Edit tour

Windows Analysis Report
http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html
Analysis ID:	1501496
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2232,i,8367868854102146476,12365560675068725945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49755 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49761 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:49743 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49755 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-83f34dc51f3647dfa8d7b2730955fd48.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6oy3dOr1nDzNb1L&MD=PlPM5eE4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6oy3dOr1nDzNb1L&MD=PlPM5eE4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-83f34dc51f3647dfa8d7b2730955fd48.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:26 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XNJ620N0RZKCC8E7J0WWContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:26 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XNK1G0MRSFSV3VSJVPZZContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:27 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XPHMVFSEXQTWQNEGVYSGContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:27 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XPHMD1NHJ8R0543Y0MCXContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:28 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XQ2JQQ05H9FDD6YVF7QZContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:28 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XQ2S1J5XGBKEG1P49FBHContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:28 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XQ32NEQQEKYZEADP8T9PContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Thu, 29 Aug 2024 22:43:30 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6G4XRTMBGBKMRDE5RYEH3R1Content-Length: 50Connection: close

Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_71.2.dr, chromecache_54.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_64.2.dr	String found in binary or memory: https://adsol16.publicvm.com/m.php
Source: chromecache_64.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_64.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_64.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_64.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_64.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_64.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_67.2.dr, chromecache_53.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49761 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@17/39@20/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2232,i,8367868854102146476,12365560675068725945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2232,i,8367868854102146476,12365560675068725945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	100%	Avira URL Cloud	phishing
http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://github.com/eslint/eslint/issues/6125	0%	Avira URL Cloud	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	Avira URL Cloud	safe
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	0%	Avira URL Cloud	safe
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-open.png	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/pull/557)	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/full.png	0%	Avira URL Cloud	safe
https://github.com/eslint/eslint/issues/3229	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/confirm.png	0%	Avira URL Cloud	safe
https://github.com/jquery/sizzle/pull/225	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://adsol16.publicvm.com/m.php	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/icon.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/logo.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-close.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/tada.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	104.18.3.35	true	false	unknown
gtomitsuka.github.io	185.199.111.153	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
bestfilltype.netlify.app	3.72.140.173	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	true		unknown
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/full.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_71.2.dr, chromecache_54.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-54	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://adsol16.publicvm.com/m.php	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-48	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_67.2.dr, chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_67.2.dr, chromecache_53.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.3.35	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	United States	13335	CLOUDFLARENETUS	false
104.18.2.35	unknown	United States	13335	CLOUDFLARENETUS	false
3.72.140.173	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
185.199.109.153	unknown	Netherlands	54113	FASTLYUS	false
185.199.111.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501496
Start date and time:	2024-08-30 00:42:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@17/39@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.186.110, 142.250.110.84, 34.104.35.123, 142.250.186.42, 142.250.185.138, 142.250.186.67, 142.250.185.202, 142.250.184.202, 216.58.206.74, 172.217.16.138, 142.250.186.170, 172.217.18.10, 142.250.184.234, 142.250.181.234, 142.250.186.74, 172.217.16.202, 142.250.74.202, 142.250.185.234, 216.58.206.42, 142.250.185.170, 142.250.65.202, 192.229.221.95, 20.242.39.171, 93.184.221.240, 20.166.126.56
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2T7oujQ/:ObPHdq
MD5:	74BA9B552A1EA3C25892F448E2CE8CBC
SHA1:	98D3ADA80510B0544A5947B2A9E2EBD995A206CD
SHA-256:	7D71CCD7CA0FB8AA1F9EDB49A25DE8F7C9EF5EF9573E1E9CB991134FC3043C37
SHA-512:	E3C6C9F8BD7D36F7E1303E96B180290037A1CF1D283BC60E4D0219DEB482879E118796B38B3E114A8ADBBD956DDDC4D314F1367CE49828C8CC3946775AA0A252
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J6G4XQ2JQQ05H9FDD6YVF7QZ

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2T6tuj25ne:ObPHW4gne
MD5:	62538C29B2BAB5C5B9DE1D1A0EF1AF03
SHA1:	661990902DDBCB0D670984A20B92895B8696FE8E
SHA-256:	F383790412C01E9B8C3D04D0BD2FBBF81D23E0C1C8ABDC96A0AC0DECD408DBDD
SHA-512:	5E291767C091F5CBB4C1B5866522F38F705F0979560208557403BEEA7A56BE8FAAB8DEB38B938E795810500CDAF7E3D59CF39DB0C2D1D12AFB0C72849F4465E8
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J6G4XPHMVFSEXQTWQNEGVYSG

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.7414678801994485
Encrypted:	false
SSDEEP:	3:ObynQA2TkbiVoGLar1/:ObPHIbKaR
MD5:	2A02DB11A006E0F8942A234BC51D1254
SHA1:	1C4A1B18AEDF758687050F04A2674EE6D0599C23
SHA-256:	723767CB16A338EF400298F5087A67F32A58B81A8321DCE7DA14647D4BD95DA8
SHA-512:	CFC131CD2AB034C2E9E34BD89B7224D1FD0440D0A9CE398D6DEED627342D2C47E8EF2F3B4137CEA0D50AD7C1B5B39310B50ADC0BF7EBCEAEB8DB441B9080C5FB
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J6G4XNK1G0MRSFSV3VSJVPZZ

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2T7jv/un:ObPHTv2n
MD5:	518FBE7C67724DB2CC837BEF97C5DAB1
SHA1:	4B2059B8B307E909BFC91C080B336CD9B1AD5B65
SHA-256:	E8426D168BBF664A074DA92791177CC43CE24798F4AE204EEAE0398852564C14
SHA-512:	A8B0C3B18B91D2BDC9B62991C02EFA01794776A95AB805580D41A948CD566C6220A48E846F61928881DD4C0AAB3C728ED25964061747ECB548913E8E299AF4FB
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J6G4XQ2S1J5XGBKEG1P49FBH

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65287
Entropy (8bit):	4.720567336456336
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBG:i3kvjqy5kikTYXa1oG33IgJ
MD5:	DF467003F88A77D4A3E1C26B3D638BE0
SHA1:	918B2A9F72F2D90EABB5784771B7C49D99BB96AF
SHA-256:	A3C5A9A03DBCD6E7CAC689D98BEC33E02B41B6A08C9457B3A6D6D5ADD26EF302
SHA-512:	7A8C947BA33387AF029ADBED323363C0C539F0C95EBE60EFB360B9AAE7DAA3446B7C9DF78794A8F294FC0BCE97C13CD37BB11D49687A965F022385CD1D5566BE
Malicious:	false
Reputation:	low
URL:	https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSXQkYL3o_qscTIxIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCShZg4kAm_bfEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCQZ6jvEitDBlEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCemmMP_2KUHZEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCbRn2Gg5JzjZEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.779470570797251
Encrypted:	false
SSDEEP:	3:ObynQA2T4oiGfoh:ObPHUoid
MD5:	A5C8DC41D3A83DF3BEBD97BEDA28739C
SHA1:	0D7EDCA0AC896400CF3209600A323B9D6A33044B
SHA-256:	023511DC46EDFD3A7E0B58A3EAAB0438F4E3F5C766571F8E64A7F1B7D1C88726
SHA-512:	2878DF387FF61469380E2F1937DE1E291D826DB6432F7F064E9D490C2B42FD4414597805CF7AF3B7148F5D3AD6936EF480A2F97BCA8C8D51217F7DE130A5156A
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J6G4XRTMBGBKMRDE5RYEH3R1

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.796565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2T6t8QfQRR79n:ObPHWq/RR79
MD5:	A5AF9FD7897930F41F0F473E0FBAE4F5
SHA1:	F0011CA7A0EA16FCD421B3366637A5E8264D7B95
SHA-256:	38AC89B3ECC15A78F3F0F92DFE742C368144E0F7DD2F89D863A6EEC426092EE5
SHA-512:	F728EF2FB99976E53B7A80A6E43ADA1C84DDAEE36BF6DF31676A25B3005BD6766697EA6B0F9AF80C63A4DA102157C060A93EFF3B183AF0DF526AEED9080D8FFA
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J6G4XPHMD1NHJ8R0543Y0MCX

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 00:43:14.762708902 CEST	49673	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:14.762748957 CEST	49674	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:15.075241089 CEST	49672	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:23.107059956 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.107103109 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.107171059 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.107887983 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.107898951 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.903935909 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.904012918 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.908798933 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.908813953 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.909054041 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.910725117 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.910769939 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.910775900 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:23.910984039 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:23.952498913 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:24.088152885 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:24.088378906 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:24.088447094 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:24.089143991 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:24.089158058 CEST	443	49713	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:24.089169025 CEST	49713	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:24.318753958 CEST	49716	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:24.319051027 CEST	49717	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:24.324614048 CEST	80	49716	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:24.324701071 CEST	49716	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:24.324832916 CEST	49716	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:24.325714111 CEST	80	49717	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:24.325783014 CEST	49717	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:24.331017017 CEST	80	49716	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:24.387253046 CEST	49674	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:24.418226004 CEST	49673	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:24.763369083 CEST	49672	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:24.856394053 CEST	80	49716	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:24.982794046 CEST	49716	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:25.046271086 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.046308994 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.046360970 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.046590090 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.046602964 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.538623095 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.539189100 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.539215088 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.540222883 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.540290117 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.545125961 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.545188904 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.547019005 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.547028065 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.590975046 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.786164045 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786225080 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786256075 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786278009 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.786287069 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786300898 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786330938 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.786593914 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786623955 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786644936 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.786658049 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.786695957 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.787350893 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.787503004 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.787555933 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.787563086 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.792556047 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.792639971 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.792649031 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.840694904 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.874136925 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.874202013 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.874353886 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.874372005 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.874522924 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.874567986 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.874574900 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.875193119 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.875221014 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.875271082 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.875279903 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.875319958 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.875916004 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.875974894 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.876039982 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.876046896 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.876883984 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.877018929 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.877028942 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.877408028 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.877434969 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.877479076 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.877491951 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.877556086 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.878195047 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.878251076 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.878453970 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.878460884 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.878911018 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.878978968 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.878985882 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.879695892 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.879722118 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.879740000 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.879748106 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.879792929 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.880556107 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.881517887 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.881525993 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:25.881582975 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.882137060 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.882168055 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:25.882231951 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.883259058 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:25.883286953 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:25.883348942 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:25.887386084 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.887403011 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:25.887677908 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:25.887691021 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:25.888190985 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:25.888200998 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:25.920039892 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.963624954 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.963756084 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.963805914 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.963828087 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964127064 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964184999 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.964195013 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964726925 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964771032 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964786053 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.964795113 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964816093 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.964845896 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.964889050 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.966316938 CEST	49718	443	192.168.2.6	104.18.2.35
Aug 30, 2024 00:43:25.966329098 CEST	443	49718	104.18.2.35	192.168.2.6
Aug 30, 2024 00:43:25.985299110 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.985323906 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:25.985383034 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.985789061 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.985822916 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:25.985867023 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.986460924 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.986474037 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:25.986887932 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:25.986897945 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.329436064 CEST	443	49704	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:26.329526901 CEST	49704	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:26.354912043 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.355259895 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.355283976 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.355719090 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.355900049 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.355920076 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.356277943 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.356342077 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.356985092 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.357083082 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.400837898 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.401096106 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.401113987 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.402326107 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.402404070 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.689207077 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.690046072 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.690068960 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.690965891 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.691034079 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.692018032 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.697099924 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.697114944 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.698230028 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.698287964 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.700511932 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.700665951 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.703030109 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.703157902 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.704044104 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.704147100 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.704910040 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.704926968 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.707496881 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.707567930 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.708385944 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.708451033 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.710366011 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.710388899 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.710985899 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.711002111 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.711694002 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.711709023 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.712043047 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.712052107 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:26.750438929 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.750447035 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.757977009 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.757998943 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.758591890 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:26.803512096 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805222034 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805269003 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.805290937 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805428982 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805458069 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805469990 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.805475950 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.805512905 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.805517912 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.806323051 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.806351900 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.806365013 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.806370020 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.806410074 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.806416035 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.808329105 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.820772886 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.820827007 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.820847034 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.823028088 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823069096 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823102951 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823132992 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.823151112 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823195934 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.823196888 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823215008 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823287010 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.823293924 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823817968 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823869944 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823879004 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.823885918 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.823935986 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.823942900 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.859483004 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.871340036 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.871364117 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.871386051 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.893675089 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.893775940 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.893819094 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.893829107 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894021988 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894061089 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.894066095 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894438982 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894474030 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894481897 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.894486904 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.894522905 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.894527912 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.895380020 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.895423889 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.895426035 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.895435095 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.895482063 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.896497011 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.896549940 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.896574020 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.896593094 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.896599054 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.896637917 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897175074 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897188902 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897223949 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897237062 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897250891 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897258997 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897262096 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897267103 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897284985 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897284985 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897316933 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897356987 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.897406101 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.897412062 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.899609089 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.899625063 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.899707079 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.899707079 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.899713993 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.899763107 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.911475897 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.915152073 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.915221930 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.915251970 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.915293932 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.915307045 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.915338993 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.915376902 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.915376902 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.922018051 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:26.922058105 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:26.922137022 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:26.922564983 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:26.922579050 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:26.939330101 CEST	49724	443	192.168.2.6	104.17.24.14
Aug 30, 2024 00:43:26.939344883 CEST	443	49724	104.17.24.14	192.168.2.6
Aug 30, 2024 00:43:26.946424007 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.946446896 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.946527958 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.946527958 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.946551085 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.946814060 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.950695038 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.950730085 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.950757980 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.950767994 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.950824022 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.982002974 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982064962 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982098103 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982127905 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982146025 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.982172012 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982182026 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.982791901 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982841969 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982872009 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982903957 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.982907057 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982917070 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.982933044 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.983167887 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.983535051 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.985517025 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.985551119 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.985563040 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.985579014 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.985599995 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.985610008 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.985616922 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.985693932 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.986583948 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.986598969 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.986696005 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.986696005 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.986702919 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.986860037 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988269091 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988285065 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988379955 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988379955 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988395929 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988511086 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988524914 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988607883 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988607883 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988614082 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988696098 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:26.988728046 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:26.988765955 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.988831043 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:26.988842964 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988914967 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:26.988943100 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.989175081 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.989383936 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:26.989399910 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:26.995261908 CEST	49722	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:26.995274067 CEST	443	49722	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.010924101 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.011008978 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.011217117 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.015387058 CEST	49727	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.015404940 CEST	443	49727	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.021502972 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.021534920 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.022181988 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.022208929 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.022243023 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.022356033 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.022788048 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.022794008 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.023287058 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.023302078 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.029876947 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.040817022 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.040899992 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.041210890 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.062993050 CEST	49726	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.063024998 CEST	443	49726	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.065258980 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.065296888 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.065392971 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.066003084 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.066015005 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.070985079 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.071011066 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.071094990 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.071094990 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.071118116 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.071322918 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.072129965 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.072149992 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.072334051 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.072340965 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.072403908 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.073915958 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.073931932 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.074068069 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.074073076 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.074146986 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.076550007 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.076566935 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.076653957 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.076653957 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.076662064 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.076910973 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.078397989 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.078414917 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.078521967 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.078521967 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.078527927 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.078603983 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.079612017 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.079624891 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.079751015 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.079756021 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.079853058 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.128889084 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.128906965 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.129031897 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.129031897 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.129055977 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.129357100 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.159384966 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.159400940 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160072088 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.160079956 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160279989 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.160372019 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160386086 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160530090 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.160537004 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160655975 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160676003 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160693884 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.160700083 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.160727978 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.160825968 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.161262035 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.161345005 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.161372900 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.161462069 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.471820116 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.503688097 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.516913891 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.534060955 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.534060955 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.534082890 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.534100056 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.534379005 CEST	49723	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.534405947 CEST	443	49723	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.535083055 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.535423040 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.536021948 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.536183119 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.536183119 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.536236048 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.540236950 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.540236950 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.540249109 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.540292978 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.540488958 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.557698011 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:27.563954115 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:27.563971996 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:27.565037012 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:27.565112114 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:27.566956043 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:27.567034006 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:27.584162951 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.584296942 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.584304094 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.602364063 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.602397919 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.602580070 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.603100061 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.603135109 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.603276014 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.604306936 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.604326010 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.605967045 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.605982065 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.606013060 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.606020927 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.606705904 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.606810093 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.606818914 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.615880966 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:27.615890026 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:27.618453026 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:27.618478060 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:27.618874073 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:27.618974924 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:27.618988991 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:27.629957914 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.640635014 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647001982 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647010088 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647028923 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647044897 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647051096 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647088051 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.647099018 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.647128105 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.647216082 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.660689116 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660737038 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660772085 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660799026 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660832882 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660839081 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.660839081 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.660846949 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:27.660849094 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660887957 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660924911 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.660947084 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.660958052 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.661144972 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.661154032 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.663378954 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.676543951 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.676600933 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.679080963 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.679088116 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.695924044 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.696914911 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.696928978 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.697268009 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.698071957 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.701562881 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.701562881 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.701586008 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.701634884 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.701961994 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.701994896 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.702617884 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.702708960 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.706912994 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:27.725837946 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.725939989 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.726032019 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.726052046 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.726080894 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.726301908 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.728506088 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.728523016 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.728609085 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.728621006 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.728694916 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.728830099 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.730350971 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.744493008 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.748497009 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:27.748527050 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.748605967 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.748706102 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:27.748989105 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.811460018 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.811602116 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.811650038 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.811682940 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.811713934 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.812052965 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.813150883 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.813169003 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.813283920 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.813291073 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.813486099 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.814286947 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.814405918 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.814412117 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.814434052 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.815108061 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.869515896 CEST	49732	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:27.869532108 CEST	443	49732	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:27.878967047 CEST	49730	443	192.168.2.6	104.17.25.14
Aug 30, 2024 00:43:27.878974915 CEST	443	49730	104.17.25.14	192.168.2.6
Aug 30, 2024 00:43:28.012428999 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.012501001 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.012554884 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.020030975 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.020107985 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.020160913 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.034503937 CEST	49733	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.034528971 CEST	443	49733	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.037844896 CEST	49731	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.037856102 CEST	443	49731	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.083110094 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.083404064 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.083424091 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.084624052 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.084678888 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.240914106 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.241355896 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.241374016 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.242384911 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.242439032 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.242821932 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.242880106 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.242996931 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.243004084 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.244661093 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:28.244688034 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:28.244760990 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:28.247657061 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:28.247672081 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:28.248394012 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.248593092 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.248606920 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.249669075 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.249727011 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.250716925 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.250895977 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.250901937 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.250943899 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.253329039 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.253624916 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.253635883 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.254669905 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.254731894 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.255275965 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.255332947 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.255429983 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.255435944 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.295218945 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.295228004 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.295228004 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.295237064 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.342544079 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.572453022 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.572653055 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.572945118 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.572954893 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.627774000 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.738311052 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738383055 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738399029 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738409042 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738421917 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.738504887 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738506079 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.738545895 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.738888979 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.811707020 CEST	49736	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.811733961 CEST	443	49736	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.816723108 CEST	49735	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.816750050 CEST	443	49735	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.818445921 CEST	49734	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:28.818464041 CEST	443	49734	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:28.943875074 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:28.943909883 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:28.947279930 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:28.947920084 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:28.947932959 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:28.976988077 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.977092981 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.979479074 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.984456062 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:28.984688044 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:28.988056898 CEST	49737	443	192.168.2.6	185.199.111.153
Aug 30, 2024 00:43:28.988079071 CEST	443	49737	185.199.111.153	192.168.2.6
Aug 30, 2024 00:43:28.989737034 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:28.996673107 CEST	53	49743	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:28.996851921 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.016577959 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.016577959 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.023849010 CEST	53	49743	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.023864031 CEST	53	49743	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.036931038 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.036947966 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.037255049 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.206636906 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.330024958 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:29.330071926 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:29.330602884 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:29.331089020 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:29.331100941 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:29.377993107 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.411798954 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.411820889 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.411948919 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.412727118 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.412736893 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.424499989 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.437402964 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.463331938 CEST	53	49743	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.474900961 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.475265980 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.475291967 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.475816965 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.477193117 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.477276087 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.477658987 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.480411053 CEST	53	49743	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.480629921 CEST	49743	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.524492979 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.568655968 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.569006920 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.569025993 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.569053888 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.569197893 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.569225073 CEST	443	49740	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.569303989 CEST	49740	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.574249029 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.574290037 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.574336052 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.574358940 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.574378014 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.574496984 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.574763060 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.574996948 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.575032949 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.575057030 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.575067997 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.575109005 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.575871944 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.575905085 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.575967073 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.575979948 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.576034069 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.576472998 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.616039038 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.616070032 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.616286039 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.637959957 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:29.637980938 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:29.663620949 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663630962 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663669109 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663693905 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663712978 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.663742065 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663757086 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.663774967 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.663825989 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.665457964 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.665465117 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.665491104 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.665501118 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.665565014 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.665565014 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.665577888 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.750017881 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.750027895 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.750051022 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.750056982 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.750184059 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.750184059 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.750200033 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.751600027 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.751605988 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.751620054 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.751626968 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.751719952 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.751719952 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.751732111 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753365993 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753407001 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753420115 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753452063 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.753460884 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753468990 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.753501892 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.753638983 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.807569981 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.807579994 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.807614088 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.807733059 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.807733059 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.807745934 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.837908983 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.837954044 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.838112116 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.838113070 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.838143110 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.839447021 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.839467049 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.839553118 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.839553118 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.839566946 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.840580940 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.840605974 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.840687037 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.840687037 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.840693951 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.842235088 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.842261076 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.842334032 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.842334032 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.842341900 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.843470097 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.843481064 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.844887018 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.844894886 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.875233889 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.895154953 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.895186901 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.895392895 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.895402908 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925211906 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925244093 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925304890 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925554037 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.925564051 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925797939 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925820112 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925834894 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925843954 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.925863028 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.925869942 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926093102 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.926692009 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926718950 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926728010 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926749945 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.926758051 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926893950 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.926975965 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.926999092 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.927062035 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.927062035 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.927069902 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.927086115 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:29.927134037 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:29.927884102 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.942249060 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.942264080 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.943428040 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.943438053 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:29.943487883 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:29.959763050 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.076832056 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.155776024 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:30.155905962 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:30.155930042 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.155940056 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.156610012 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:30.156626940 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:30.156646013 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.156920910 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.157217979 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.157253027 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.165069103 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:30.170816898 CEST	49742	443	192.168.2.6	151.101.130.137
Aug 30, 2024 00:43:30.170831919 CEST	443	49742	151.101.130.137	192.168.2.6
Aug 30, 2024 00:43:30.199902058 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:30.225163937 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.274920940 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:30.275031090 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:30.275111914 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:30.276490927 CEST	49746	443	192.168.2.6	185.199.109.153
Aug 30, 2024 00:43:30.276508093 CEST	443	49746	185.199.109.153	192.168.2.6
Aug 30, 2024 00:43:30.287502050 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.287611008 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.289905071 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.289911985 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.290134907 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.291382074 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.336505890 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.348566055 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.348683119 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.348732948 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.349653959 CEST	49745	443	192.168.2.6	3.72.140.173
Aug 30, 2024 00:43:30.349669933 CEST	443	49745	3.72.140.173	192.168.2.6
Aug 30, 2024 00:43:30.563893080 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.563954115 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.564023018 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.564905882 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.564922094 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:30.564933062 CEST	49750	443	192.168.2.6	184.28.90.27
Aug 30, 2024 00:43:30.564938068 CEST	443	49750	184.28.90.27	192.168.2.6
Aug 30, 2024 00:43:31.035073042 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.035110950 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.035231113 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.036942959 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.036955118 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.815387011 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.815568924 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.837717056 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.837743044 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.838143110 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.848922014 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.849219084 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.849226952 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:31.849363089 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:31.892498016 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:32.039721012 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:32.040033102 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:32.040107965 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:32.040426970 CEST	49751	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:32.040448904 CEST	443	49751	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:35.033056974 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.033094883 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:35.033468008 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.035753965 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.035765886 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:35.801043987 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:35.801145077 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.809324980 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.809334040 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:35.809582949 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:35.854827881 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:35.968709946 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.012494087 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221843958 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221869946 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221879005 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221888065 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221916914 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221968889 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.221986055 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.221997976 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.222029924 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.222081900 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.222089052 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.222187042 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.222457886 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.222522020 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:36.222574949 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.265849113 CEST	49752	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:43:36.265877008 CEST	443	49752	40.127.169.103	192.168.2.6
Aug 30, 2024 00:43:37.388251066 CEST	49704	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.388570070 CEST	49704	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.390047073 CEST	49755	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.390110970 CEST	443	49755	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:37.390772104 CEST	49755	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.409193039 CEST	49755	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.409233093 CEST	443	49755	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:37.622191906 CEST	49704	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:37.933197021 CEST	49704	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:38.071396112 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:38.071495056 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:38.071541071 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:38.073184013 CEST	443	49704	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:38.073194027 CEST	443	49704	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:38.073230028 CEST	443	49704	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:38.073239088 CEST	443	49704	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:38.899231911 CEST	443	49755	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:38.899302006 CEST	49755	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:43:39.584945917 CEST	49728	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:43:39.584991932 CEST	443	49728	142.250.185.132	192.168.2.6
Aug 30, 2024 00:43:39.713434935 CEST	80	49717	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:39.720941067 CEST	49717	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:41.283845901 CEST	49717	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:43:41.288799047 CEST	80	49717	104.18.3.35	192.168.2.6
Aug 30, 2024 00:43:43.225194931 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:43.225244999 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:43.225450039 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:43.226090908 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:43.226102114 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.043782949 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.043855906 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.049644947 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.049658060 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.049890041 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.051762104 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.051815033 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.051820993 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.051939964 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.096491098 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.231836081 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.231980085 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:44.232052088 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.232363939 CEST	49757	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:43:44.232383013 CEST	443	49757	40.115.3.253	192.168.2.6
Aug 30, 2024 00:43:58.051490068 CEST	443	49755	173.222.162.64	192.168.2.6
Aug 30, 2024 00:43:58.055097103 CEST	49755	443	192.168.2.6	173.222.162.64
Aug 30, 2024 00:44:01.913973093 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:01.914036989 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:01.914093018 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:01.914885998 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:01.914900064 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.714112997 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.714384079 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.717206955 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.717223883 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.717469931 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.719425917 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.719645977 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.719655991 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.719712019 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.764501095 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.936356068 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.936444044 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:02.936583042 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.936930895 CEST	49758	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:02.936964989 CEST	443	49758	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:09.870460033 CEST	49716	80	192.168.2.6	104.18.3.35
Aug 30, 2024 00:44:09.875586033 CEST	80	49716	104.18.3.35	192.168.2.6
Aug 30, 2024 00:44:12.757955074 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:12.757998943 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:12.758105993 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:12.758482933 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:12.758497000 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.530977011 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.531070948 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.533018112 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.533025980 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.533238888 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.542278051 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.588499069 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.857119083 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.857136965 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.857150078 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.857232094 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.857249022 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.857296944 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.858988047 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.859035015 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.859049082 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.859081030 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.859127045 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.862454891 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.862464905 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:13.862514019 CEST	49759	443	192.168.2.6	40.127.169.103
Aug 30, 2024 00:44:13.862518072 CEST	443	49759	40.127.169.103	192.168.2.6
Aug 30, 2024 00:44:25.838335991 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:25.838361025 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:25.838423014 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:25.839261055 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:25.839271069 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.646209002 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.646312952 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.649621964 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.649631023 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.649880886 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.652360916 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.653372049 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.653377056 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.653578997 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.696500063 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.834458113 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.834604979 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.834851027 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.835031033 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.835046053 CEST	443	49761	40.115.3.253	192.168.2.6
Aug 30, 2024 00:44:26.835057974 CEST	49761	443	192.168.2.6	40.115.3.253
Aug 30, 2024 00:44:26.872792006 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:26.872817993 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:26.872879028 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:26.873146057 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:26.873157978 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:27.507302999 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:27.507736921 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:27.507750034 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:27.508164883 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:27.508832932 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:27.508896112 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:27.558545113 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:37.422946930 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:37.423021078 CEST	443	49762	142.250.185.132	192.168.2.6
Aug 30, 2024 00:44:37.423089027 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:39.272746086 CEST	49762	443	192.168.2.6	142.250.185.132
Aug 30, 2024 00:44:39.272769928 CEST	443	49762	142.250.185.132	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 00:43:22.968817949 CEST	53	51259	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:23.046020985 CEST	53	49674	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:24.026184082 CEST	53	51607	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:24.301696062 CEST	61368	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:24.304760933 CEST	64843	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:24.313138962 CEST	53	61368	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:24.317157984 CEST	53	64843	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:24.888797998 CEST	50518	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:24.889168978 CEST	61932	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:24.901479959 CEST	53	61932	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:24.949008942 CEST	53	50518	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.867295980 CEST	63149	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.867624998 CEST	51092	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.869172096 CEST	58485	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.869641066 CEST	52615	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.875354052 CEST	53	49554	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.877214909 CEST	53	63149	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.877506018 CEST	53	51092	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.878001928 CEST	53	58485	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.879518032 CEST	53	52615	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.881637096 CEST	53	62538	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.973799944 CEST	59501	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.974363089 CEST	50362	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:25.984261990 CEST	53	59501	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:25.984517097 CEST	53	50362	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:26.841825008 CEST	53800	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:26.842176914 CEST	63269	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:26.850416899 CEST	53	53800	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:26.852488995 CEST	53	63269	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:26.947832108 CEST	53	54143	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:26.977601051 CEST	62900	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:26.978806019 CEST	50350	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:26.987139940 CEST	53	62900	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:26.987520933 CEST	53	50350	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:27.010628939 CEST	59634	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:27.011826038 CEST	56033	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:27.019926071 CEST	53	59634	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:27.021132946 CEST	53	56033	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:27.599313021 CEST	61433	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:27.599705935 CEST	64947	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:27.612605095 CEST	53	61433	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:27.616277933 CEST	53	64947	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:28.980176926 CEST	53	51387	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:28.980302095 CEST	53	59186	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.043992996 CEST	53	49306	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.398288012 CEST	59894	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.398808956 CEST	54631	53	192.168.2.6	1.1.1.1
Aug 30, 2024 00:43:29.409221888 CEST	53	59894	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:29.409255981 CEST	53	54631	1.1.1.1	192.168.2.6
Aug 30, 2024 00:43:41.457627058 CEST	53	51305	1.1.1.1	192.168.2.6
Aug 30, 2024 00:44:00.474569082 CEST	53	55339	1.1.1.1	192.168.2.6
Aug 30, 2024 00:44:22.657979965 CEST	53	61048	1.1.1.1	192.168.2.6
Aug 30, 2024 00:44:23.166003942 CEST	53	65090	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 30, 2024 00:43:24.301696062 CEST	192.168.2.6	1.1.1.1	0xa15c	Standard query (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:24.304760933 CEST	192.168.2.6	1.1.1.1	0xb3d	Standard query (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	65	IN (0x0001)	false
Aug 30, 2024 00:43:24.888797998 CEST	192.168.2.6	1.1.1.1	0xcac2	Standard query (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:24.889168978 CEST	192.168.2.6	1.1.1.1	0x1e12	Standard query (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev	65	IN (0x0001)	false
Aug 30, 2024 00:43:25.867295980 CEST	192.168.2.6	1.1.1.1	0x1e06	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.867624998 CEST	192.168.2.6	1.1.1.1	0x3f53	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 30, 2024 00:43:25.869172096 CEST	192.168.2.6	1.1.1.1	0x3468	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.869641066 CEST	192.168.2.6	1.1.1.1	0x8caf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 00:43:25.973799944 CEST	192.168.2.6	1.1.1.1	0x960	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.974363089 CEST	192.168.2.6	1.1.1.1	0x868	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Aug 30, 2024 00:43:26.841825008 CEST	192.168.2.6	1.1.1.1	0x984	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.842176914 CEST	192.168.2.6	1.1.1.1	0xbde2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 30, 2024 00:43:26.977601051 CEST	192.168.2.6	1.1.1.1	0xce15	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.978806019 CEST	192.168.2.6	1.1.1.1	0x791a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 00:43:27.010628939 CEST	192.168.2.6	1.1.1.1	0x1f3c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.011826038 CEST	192.168.2.6	1.1.1.1	0x6841	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 30, 2024 00:43:27.599313021 CEST	192.168.2.6	1.1.1.1	0x39c7	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.599705935 CEST	192.168.2.6	1.1.1.1	0x8c7d	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Aug 30, 2024 00:43:29.398288012 CEST	192.168.2.6	1.1.1.1	0x5376	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:29.398808956 CEST	192.168.2.6	1.1.1.1	0x16e7	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 30, 2024 00:43:24.313138962 CEST	1.1.1.1	192.168.2.6	0xa15c	No error (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:24.313138962 CEST	1.1.1.1	192.168.2.6	0xa15c	No error (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:24.949008942 CEST	1.1.1.1	192.168.2.6	0xcac2	No error (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:24.949008942 CEST	1.1.1.1	192.168.2.6	0xcac2	No error (0)	pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.877214909 CEST	1.1.1.1	192.168.2.6	0x1e06	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.877214909 CEST	1.1.1.1	192.168.2.6	0x1e06	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.877214909 CEST	1.1.1.1	192.168.2.6	0x1e06	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.877214909 CEST	1.1.1.1	192.168.2.6	0x1e06	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.878001928 CEST	1.1.1.1	192.168.2.6	0x3468	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.878001928 CEST	1.1.1.1	192.168.2.6	0x3468	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.879518032 CEST	1.1.1.1	192.168.2.6	0x8caf	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 00:43:25.984261990 CEST	1.1.1.1	192.168.2.6	0x960	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:25.984261990 CEST	1.1.1.1	192.168.2.6	0x960	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.850416899 CEST	1.1.1.1	192.168.2.6	0x984	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.852488995 CEST	1.1.1.1	192.168.2.6	0xbde2	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 30, 2024 00:43:26.987139940 CEST	1.1.1.1	192.168.2.6	0xce15	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.987139940 CEST	1.1.1.1	192.168.2.6	0xce15	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:26.987520933 CEST	1.1.1.1	192.168.2.6	0x791a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 00:43:27.019926071 CEST	1.1.1.1	192.168.2.6	0x1f3c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.019926071 CEST	1.1.1.1	192.168.2.6	0x1f3c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.019926071 CEST	1.1.1.1	192.168.2.6	0x1f3c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.019926071 CEST	1.1.1.1	192.168.2.6	0x1f3c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.612605095 CEST	1.1.1.1	192.168.2.6	0x39c7	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.612605095 CEST	1.1.1.1	192.168.2.6	0x39c7	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.612605095 CEST	1.1.1.1	192.168.2.6	0x39c7	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:27.612605095 CEST	1.1.1.1	192.168.2.6	0x39c7	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:29.409221888 CEST	1.1.1.1	192.168.2.6	0x5376	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:29.409221888 CEST	1.1.1.1	192.168.2.6	0x5376	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:29.409221888 CEST	1.1.1.1	192.168.2.6	0x5376	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:29.409221888 CEST	1.1.1.1	192.168.2.6	0x5376	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 30, 2024 00:43:35.575581074 CEST	1.1.1.1	192.168.2.6	0x6783	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 00:43:35.575581074 CEST	1.1.1.1	192.168.2.6	0x6783	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	104.18.3.35	80	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 30, 2024 00:43:24.324832916 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 30, 2024 00:43:24.856394053 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 29 Aug 2024 22:43:24 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Thu, 29 Aug 2024 23:43:24 GMT Location: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8bb00f4fbdbb32e8-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Aug 30, 2024 00:44:09.870460033 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2f 32 6d 4e 6a 49 69 63 73 55 65 73 6e 2b 46 4f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 64 66 35 32 32 31 34 31 35 65 30 31 31 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: /2mNjIicsUesn+FO.1Context: a7df5221415e0114
2024-08-29 22:43:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-29 22:43:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2f 32 6d 4e 6a 49 69 63 73 55 65 73 6e 2b 46 4f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 64 66 35 32 32 31 34 31 35 65 30 31 31 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 74 31 2b 48 44 51 6d 53 43 36 78 79 35 76 6a 51 63 71 64 42 55 50 6d 44 4b 75 6e 72 69 54 51 65 76 73 74 39 63 36 63 33 45 55 71 55 4f 39 4a 77 50 4b 64 2f 2f 5a 66 4c 46 55 61 56 30 4f 64 6c 4e 53 37 56 6d 42 61 38 30 50 50 50 34 50 68 49 2b 4d 45 49 63 4e 74 46 69 36 78 4d 50 4c 4f 6d 6d 77 6d 45 6b 4b 4a 79 66 4b 56 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: /2mNjIicsUesn+FO.2Context: a7df5221415e0114<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXt1+HDQmSC6xy5vjQcqdBUPmDKunriTQevst9c6c3EUqUO9JwPKd//ZfLFUaV0OdlNS7VmBa80PPP4PhI+MEIcNtFi6xMPLOmmwmEkKJyfKVc
2024-08-29 22:43:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2f 32 6d 4e 6a 49 69 63 73 55 65 73 6e 2b 46 4f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 64 66 35 32 32 31 34 31 35 65 30 31 31 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: /2mNjIicsUesn+FO.3Context: a7df5221415e0114<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-29 22:43:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-29 22:43:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 31 6f 36 44 31 64 74 65 45 65 38 63 5a 65 67 7a 54 4c 68 52 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 61o6D1dteEe8cZegzTLhRw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	104.18.2.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:25 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:25 UTC	283	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:43:25 GMT Content-Type: text/html Content-Length: 65287 Connection: close Accept-Ranges: bytes ETag: "df467003f88a77d4a3e1c26b3d638be0" Last-Modified: Tue, 28 May 2024 17:02:51 GMT Server: cloudflare CF-RAY: 8bb00f55481d4251-EWR
2024-08-29 22:43:25 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2a 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 Data Ascii: 'https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');*{ margin: 0; padding: 0;}body{ box-sizing: border-box; font-family: 'Poppins', sans-serif;}button,input, select{ font-family: i
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0d 0a 20 20 67 72 69 64 2d 67 61 70 3a 20 32 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 7b 0d 0a 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d Data Ascii: slateY(-3px); margin-left: 4px;}.form-box-main{ display: grid; grid-template-columns: repeat(3, 1fr); grid-gap: 20px; margin: 20px 10px;}.input-form{ display: flex; align-items: center;}.input-form input{ width: 80%;
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 38 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c Data Ascii: color: red; font-size: 14px;}@-webkit-keyframes load8 { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }}@keyframes l
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 73 2d 62 6f 78 20 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6d 65 73 73 61 67 65 2d 62 6f 78 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 2d 74 65 78 74 20 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 2d 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: s-box img{ width: 90%; } .icon2{ display: block; } .message-box{ margin: 0; } .icon-text p{ font-size: 13px; } .icon1{ display: none; } .icon2 img{ width: 40px; } .head-text-p{ font-s
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 5f 5f 73 65 6c 65 63 74 22 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 6d 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 72 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 67 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 6e 22 3e e0 a6 ac e0 a6 be e0 a6 82 e0 a6 b2 e0 a6 be 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 61 22 3e 43 61 74 61 6c c3 a0 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e Data Ascii: <select class="dropdown__select"><option value="am">English</option><option value="ar"></option><option value="bg"></option><option value="bn"></option><option value="ca">Catal</option><option
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6d 73 22 3e 4d 61 6c 61 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6c 22 3e 4e 65 64 65 72 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6f 22 3e 4e 6f 72 77 65 67 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 68 22 3e 50 69 6c 69 70 69 6e 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 6c 22 3e 50 6f 6c 73 6b 69 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 22 3e 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 42 52 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 42 72 61 7a 69 Data Ascii: option value="ms">Malay</option><option value="nl">Nederlands</option><option value="no">Norwegian</option><option value="ph">Pilipino</option><option value="pl">Polskie</option><option value="pt">Portugus</option><option value="pt_BR">Portugus (Brazi
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 63 6f 76 65 72 79 20 50 68 72 61 73 65 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 2d 74 65 78 74 2d 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4d 65 74 61 4d 61 73 6b 20 63 61 6e 6e 6f 74 20 72 65 63 6f 76 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 20 77 69 6c 6c 20 75 73 65 20 79 6f 75 72 20 3c 2f 62 72 3e 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 6f 20 76 61 6c 69 64 61 74 65 20 79 6f 75 72 20 6f 77 6e 65 72 73 68 69 70 2c 20 72 65 73 74 6f 72 65 20 79 6f 75 72 20 77 61 6c 6c 65 74 20 61 6e 64 20 73 65 74 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 Data Ascii: covery Phrase</h1> </div> <div class="head-text-p"> <p>MetaMask cannot recover your password. We will use your </br> Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new passw
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 59 6f 75 20 63 61 6e 20 70 61 73 74 65 20 79 6f 75 72 20 65 6e 74 69 72 65 20 73 65 63 72 65 74 20 72 65 63 6f 76 65 72 79 20 70 68 72 61 73 65 20 69 6e 74 6f 20 61 6e 79 20 66 69 65 6c 64 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 2d 20 46 6f 72 6d 31 32 20 2d 2d 2d 2d 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 Data Ascii: </div> <div class="icon-text"> <p>You can paste your entire secret recovery phrase into any field</p> </div> </div> ...- Form12 ------> <form act
2024-08-29 22:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 34 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: <label for="">4. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	151.101.130.137	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:26 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:26 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1430175 Date: Thu, 29 Aug 2024 22:43:26 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT X-Cache-Hits: 53, 0 X-Timer: S1724971407.758819,VS0,VE1 Vary: Accept-Encoding
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-08-29 22:43:26 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49722	151.101.130.137	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:26 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:26 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:43:26 GMT Age: 1093912 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT X-Cache-Hits: 2578, 8 X-Timer: S1724971407.764051,VS0,VE0 Vary: Accept-Encoding
2024-08-29 22:43:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-29 22:43:26 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-08-29 22:43:26 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-08-29 22:43:26 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-08-29 22:43:26 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-08-29 22:43:26 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49724	104.17.24.14	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:26 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:26 UTC	953	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:43:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 72031 Expires: Tue, 19 Aug 2025 22:43:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wdNp1Z2a6gP7z1l5UqEUwu%2Fwm2V3lu41UsOjgo2e9R6FcIVgkhTl0lydOhlZzaS6A9oFHIHL664SEHm4Xbl4sBYjTDZi0tJbPMi8Z3uFkLEmmkmF1WqmitYbJCF2zQKkxOWLpH5x"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bb00f5c49d88c0b-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:43:26 UTC	416	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 Data Ascii: Type)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':retur
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 Data Ascii: 2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 Data Ascii: -s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.c
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 Data Ascii: eight},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 Data Ascii: '`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:thi
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d Data Ascii: ons.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 Data Ascii: =t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 Data Ascii: =e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t)
2024-08-29 22:43:26 UTC	1369	IN	Data Raw: 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a Data Ascii: e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49727	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:26 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:27 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:26 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XNJ620N0RZKCC8E7J0WW Content-Length: 50 Connection: close
2024-08-29 22:43:27 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 4e 4a 36 32 30 4e 30 52 5a 4b 43 43 38 45 37 4a 30 57 57 Data Ascii: Not Found - Request ID: 01J6G4XNJ620N0RZKCC8E7J0WW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49726	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:26 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:27 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:26 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XNK1G0MRSFSV3VSJVPZZ Content-Length: 50 Connection: close
2024-08-29 22:43:27 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 4e 4b 31 47 30 4d 52 53 46 53 56 33 56 53 4a 56 50 5a 5a Data Ascii: Not Found - Request ID: 01J6G4XNK1G0MRSFSV3VSJVPZZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49732	151.101.130.137	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:27 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:27 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:43:27 GMT Age: 1093913 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 2578, 1 X-Timer: S1724971408.592871,VS0,VE1 Vary: Accept-Encoding
2024-08-29 22:43:27 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-29 22:43:27 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-08-29 22:43:27 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-08-29 22:43:27 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-08-29 22:43:27 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-08-29 22:43:27 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49730	104.17.25.14	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:27 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:27 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 22:43:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 72032 Expires: Tue, 19 Aug 2025 22:43:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r7ap4DnhXCGZ6%2BqNlxGgbG9rOksvgLLeafJ%2F2bcWT0kWKHx%2B49LOw14isgDn9FGZTGYluxDVHWQsSbYS3HIthKptb8UxkcU81WV2EC4gMRNOYliNE5fXk0sgUZnOQc2cP%2BSpQkaD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bb00f61782341ec-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 22:43:27 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-08-29 22:43:27 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:27 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:27 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XPHMD1NHJ8R0543Y0MCX Content-Length: 50 Connection: close
2024-08-29 22:43:28 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 50 48 4d 44 31 4e 48 4a 38 52 30 35 34 33 59 30 4d 43 58 Data Ascii: Not Found - Request ID: 01J6G4XPHMD1NHJ8R0543Y0MCX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49733	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:27 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:27 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XPHMVFSEXQTWQNEGVYSG Content-Length: 50 Connection: close
2024-08-29 22:43:28 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 50 48 4d 56 46 53 45 58 51 54 57 51 4e 45 47 56 59 53 47 Data Ascii: Not Found - Request ID: 01J6G4XPHMVFSEXQTWQNEGVYSG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49734	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:28 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:28 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XQ2JQQ05H9FDD6YVF7QZ Content-Length: 50 Connection: close
2024-08-29 22:43:28 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 51 32 4a 51 51 30 35 48 39 46 44 44 36 59 56 46 37 51 5a Data Ascii: Not Found - Request ID: 01J6G4XQ2JQQ05H9FDD6YVF7QZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49735	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:28 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:28 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XQ2S1J5XGBKEG1P49FBH Content-Length: 50 Connection: close
2024-08-29 22:43:28 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 51 32 53 31 4a 35 58 47 42 4b 45 47 31 50 34 39 46 42 48 Data Ascii: Not Found - Request ID: 01J6G4XQ2S1J5XGBKEG1P49FBH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49736	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:28 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:28 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XQ32NEQQEKYZEADP8T9P Content-Length: 50 Connection: close
2024-08-29 22:43:28 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 51 33 32 4e 45 51 51 45 4b 59 5a 45 41 44 50 38 54 39 50 Data Ascii: Not Found - Request ID: 01J6G4XQ32NEQQEKYZEADP8T9P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49737	185.199.111.153	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:28 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:28 UTC	720	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Thu, 29 Aug 2024 22:53:28 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 8192:30FE5E:4BA5F6:526349:66D0F98D Accept-Ranges: bytes Age: 0 Date: Thu, 29 Aug 2024 22:43:28 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1724971409.785004,VS0,VE25 Vary: Accept-Encoding X-Fastly-Request-ID: 9174c7cc88674ebb69969009cfea6dc62b9e6d01
2024-08-29 22:43:28 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 22:43:29 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125604 Date: Thu, 29 Aug 2024 22:43:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49742	151.101.130.137	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:29 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:29 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:43:29 GMT Age: 1430178 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740047-EWR X-Cache: HIT, HIT X-Cache-Hits: 53, 1 X-Timer: S1724971410.529181,VS0,VE1 Vary: Accept-Encoding
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-08-29 22:43:29 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49746	185.199.109.153	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:30 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:30 UTC	718	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Thu, 29 Aug 2024 22:53:28 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 8192:30FE5E:4BA5F6:526349:66D0F98D Accept-Ranges: bytes Date: Thu, 29 Aug 2024 22:43:30 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1724971410.219074,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: da9e4c2e334981690fcca56e647ffaea0dd03b87
2024-08-29 22:43:30 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49745	3.72.140.173	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:30 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 22:43:30 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Thu, 29 Aug 2024 22:43:30 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6G4XRTMBGBKMRDE5RYEH3R1 Content-Length: 50 Connection: close
2024-08-29 22:43:30 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 47 34 58 52 54 4d 42 47 42 4b 4d 52 44 45 35 52 59 45 48 33 52 31 Data Ascii: Not Found - Request ID: 01J6G4XRTMBGBKMRDE5RYEH3R1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 22:43:30 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125556 Date: Thu, 29 Aug 2024 22:43:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 22:43:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49751	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 30 49 68 76 4d 38 65 69 6b 79 42 6b 49 58 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 37 34 31 63 33 64 32 66 66 39 38 39 32 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: l0IhvM8eikyBkIX2.1Context: cc741c3d2ff98929
2024-08-29 22:43:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-29 22:43:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6c 30 49 68 76 4d 38 65 69 6b 79 42 6b 49 58 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 37 34 31 63 33 64 32 66 66 39 38 39 32 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 74 31 2b 48 44 51 6d 53 43 36 78 79 35 76 6a 51 63 71 64 42 55 50 6d 44 4b 75 6e 72 69 54 51 65 76 73 74 39 63 36 63 33 45 55 71 55 4f 39 4a 77 50 4b 64 2f 2f 5a 66 4c 46 55 61 56 30 4f 64 6c 4e 53 37 56 6d 42 61 38 30 50 50 50 34 50 68 49 2b 4d 45 49 63 4e 74 46 69 36 78 4d 50 4c 4f 6d 6d 77 6d 45 6b 4b 4a 79 66 4b 56 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: l0IhvM8eikyBkIX2.2Context: cc741c3d2ff98929<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXt1+HDQmSC6xy5vjQcqdBUPmDKunriTQevst9c6c3EUqUO9JwPKd//ZfLFUaV0OdlNS7VmBa80PPP4PhI+MEIcNtFi6xMPLOmmwmEkKJyfKVc
2024-08-29 22:43:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 30 49 68 76 4d 38 65 69 6b 79 42 6b 49 58 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 37 34 31 63 33 64 32 66 66 39 38 39 32 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: l0IhvM8eikyBkIX2.3Context: cc741c3d2ff98929<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-29 22:43:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-29 22:43:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 32 72 51 42 55 70 72 77 30 32 67 78 4e 5a 77 70 75 5a 48 46 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: J2rQBUprw02gxNZwpuZHFQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49752	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:35 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6oy3dOr1nDzNb1L&MD=PlPM5eE4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-29 22:43:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 21b6b9f3-7cd6-4839-82fc-5260a17707ea MS-RequestId: a94472be-0911-43e6-9aea-406abcd8a884 MS-CV: 6KzrDYkXFEiEw8st.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 29 Aug 2024 22:43:35 GMT Connection: close Content-Length: 24490
2024-08-29 22:43:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-29 22:43:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49757	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:43:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 31 4b 75 6c 68 66 6a 77 55 43 45 58 7a 67 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 66 33 38 39 66 35 38 34 31 61 33 31 66 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: B1KulhfjwUCEXzgw.1Context: 63f389f5841a31ff
2024-08-29 22:43:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-29 22:43:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 31 4b 75 6c 68 66 6a 77 55 43 45 58 7a 67 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 66 33 38 39 66 35 38 34 31 61 33 31 66 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 74 31 2b 48 44 51 6d 53 43 36 78 79 35 76 6a 51 63 71 64 42 55 50 6d 44 4b 75 6e 72 69 54 51 65 76 73 74 39 63 36 63 33 45 55 71 55 4f 39 4a 77 50 4b 64 2f 2f 5a 66 4c 46 55 61 56 30 4f 64 6c 4e 53 37 56 6d 42 61 38 30 50 50 50 34 50 68 49 2b 4d 45 49 63 4e 74 46 69 36 78 4d 50 4c 4f 6d 6d 77 6d 45 6b 4b 4a 79 66 4b 56 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: B1KulhfjwUCEXzgw.2Context: 63f389f5841a31ff<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXt1+HDQmSC6xy5vjQcqdBUPmDKunriTQevst9c6c3EUqUO9JwPKd//ZfLFUaV0OdlNS7VmBa80PPP4PhI+MEIcNtFi6xMPLOmmwmEkKJyfKVc
2024-08-29 22:43:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 31 4b 75 6c 68 66 6a 77 55 43 45 58 7a 67 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 66 33 38 39 66 35 38 34 31 61 33 31 66 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: B1KulhfjwUCEXzgw.3Context: 63f389f5841a31ff<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-29 22:43:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-29 22:43:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 54 4b 5a 33 32 72 78 54 30 4b 65 61 4b 57 79 59 4e 6d 41 38 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: aTKZ32rxT0KeaKWyYNmA8Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49758	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:44:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 72 67 50 6d 4a 73 65 4d 45 75 30 31 57 45 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 66 63 37 30 66 61 33 64 61 65 61 66 35 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: lrgPmJseMEu01WE/.1Context: edfc70fa3daeaf59
2024-08-29 22:44:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-29 22:44:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6c 72 67 50 6d 4a 73 65 4d 45 75 30 31 57 45 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 66 63 37 30 66 61 33 64 61 65 61 66 35 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 74 31 2b 48 44 51 6d 53 43 36 78 79 35 76 6a 51 63 71 64 42 55 50 6d 44 4b 75 6e 72 69 54 51 65 76 73 74 39 63 36 63 33 45 55 71 55 4f 39 4a 77 50 4b 64 2f 2f 5a 66 4c 46 55 61 56 30 4f 64 6c 4e 53 37 56 6d 42 61 38 30 50 50 50 34 50 68 49 2b 4d 45 49 63 4e 74 46 69 36 78 4d 50 4c 4f 6d 6d 77 6d 45 6b 4b 4a 79 66 4b 56 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: lrgPmJseMEu01WE/.2Context: edfc70fa3daeaf59<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXt1+HDQmSC6xy5vjQcqdBUPmDKunriTQevst9c6c3EUqUO9JwPKd//ZfLFUaV0OdlNS7VmBa80PPP4PhI+MEIcNtFi6xMPLOmmwmEkKJyfKVc
2024-08-29 22:44:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 72 67 50 6d 4a 73 65 4d 45 75 30 31 57 45 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 66 63 37 30 66 61 33 64 61 65 61 66 35 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: lrgPmJseMEu01WE/.3Context: edfc70fa3daeaf59<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-29 22:44:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-29 22:44:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 66 58 74 4d 50 66 49 45 45 4f 55 2f 6d 6f 61 50 37 32 6b 4a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ZfXtMPfIEEOU/moaP72kJQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49759	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:44:13 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6oy3dOr1nDzNb1L&MD=PlPM5eE4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-29 22:44:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: b95f9013-c2a9-4aab-acd9-b7722fbce3b6 MS-RequestId: 47c7019f-bd77-4a11-8b28-c48f07e906aa MS-CV: bhWfghkb9UKJEf/D.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 29 Aug 2024 22:44:13 GMT Connection: close Content-Length: 30005
2024-08-29 22:44:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-29 22:44:13 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49761	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 22:44:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 7a 38 69 4e 34 74 6d 43 78 6b 6d 4b 37 31 5a 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 61 63 39 33 33 32 38 65 34 30 32 38 35 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: z8iN4tmCxkmK71ZI.1Context: 8dac93328e40285a
2024-08-29 22:44:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-29 22:44:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 7a 38 69 4e 34 74 6d 43 78 6b 6d 4b 37 31 5a 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 61 63 39 33 33 32 38 65 34 30 32 38 35 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 74 31 2b 48 44 51 6d 53 43 36 78 79 35 76 6a 51 63 71 64 42 55 50 6d 44 4b 75 6e 72 69 54 51 65 76 73 74 39 63 36 63 33 45 55 71 55 4f 39 4a 77 50 4b 64 2f 2f 5a 66 4c 46 55 61 56 30 4f 64 6c 4e 53 37 56 6d 42 61 38 30 50 50 50 34 50 68 49 2b 4d 45 49 63 4e 74 46 69 36 78 4d 50 4c 4f 6d 6d 77 6d 45 6b 4b 4a 79 66 4b 56 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: z8iN4tmCxkmK71ZI.2Context: 8dac93328e40285a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXt1+HDQmSC6xy5vjQcqdBUPmDKunriTQevst9c6c3EUqUO9JwPKd//ZfLFUaV0OdlNS7VmBa80PPP4PhI+MEIcNtFi6xMPLOmmwmEkKJyfKVc
2024-08-29 22:44:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 7a 38 69 4e 34 74 6d 43 78 6b 6d 4b 37 31 5a 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 61 63 39 33 33 32 38 65 34 30 32 38 35 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: z8iN4tmCxkmK71ZI.3Context: 8dac93328e40285a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-29 22:44:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-29 22:44:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 41 32 34 4b 33 38 34 48 6b 4b 45 49 6e 5a 61 53 2b 70 58 36 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +A24K384HkKEInZaS+pX6w.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1476, Parent PID: 5904

General

Target ID:	0
Start time:	18:43:17
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3204, Parent PID: 1476

General

Target ID:	2
Start time:	18:43:21
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2232,i,8367868854102146476,12365560675068725945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2016, Parent PID: 5904

General

Target ID:	3
Start time:	18:43:23
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
http://pub-83f34dc51f3647dfa8d7b2730955fd48.r2.dev/index.html