Edit tour

Windows Analysis Report
https://xjp.steamproxy.vip/profiles/76561199276106401

Overview

General Information

Sample URL:	https://xjp.steamproxy.vip/profiles/76561199276106401
Analysis ID:	1502052
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1924,i,7595222898225878721,11068150345474737058,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xjp.steamproxy.vip/profiles/76561199276106401" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1Host: xjp.steamproxy.vipConnection: keep-aliveContent-Length: 1521sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryOlDnIUInfn3ww5nhsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://xjp.steamproxy.vipSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xjp.steamproxy.vip/profiles/76561199276106401Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b

Source: https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/id/_Soul_Warrior_	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/workshop_functions.js?v=NcJcKhT9Z3Dy&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2272694181271065065/B23A3C0D7C9E5E96761A1E7E8F404247A282E389/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/remote/Icon_Remote	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_geo_9-10.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/ico/ico-deck-unsupported.svg	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_2.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/aku_stand	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gyKjj7b&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/countryflags/tw.gif	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/ico_fav_tiled.png?v=1	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/ig/content_footer_fade_wide.png?v=1	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2408934408285672828/48188B68F64830BD04917303D3136BF8D37AFCD8/?imw=100&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/news/img_dota2.jpg	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/legal/	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_background.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Light.ttf?v=4.015	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_arrow_down.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/rate_ico_dn_tiled.png)	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=512	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_1-2.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/profiles/76561198067215897	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/workshop/updatekvtags/	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_9-10.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/HealthSD	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/id/POCTR	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2495639017703665015/C22352F94E7D23E6D6E7763F5E179DFFF8337BC2/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/bg_top_workshop_home.jpg	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/HentaiGirlBetty_athlete	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/heartg	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2495639017703665028/3040639974A438D1C302D9221A939AFBAEC2FD5C/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/clover	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/login/home/?goto=sharedfiles%2Ffiledetails%2F%3Fid%3D3174784110	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/id/serhan1ty	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=500	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_dateselect_arrow.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_9-10.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_5-6.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/Star_Z	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/apphubs/text_fade.png?v=1	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/Pentagram	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/2440466031439451690/AA43797DC6B1B3588ABF8F2FD175363E09D24EB0/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images//buttons/report_ico_tiled.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/ig/gl_item_green.jpg);	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/steam_refunds/	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_mandala_1-2.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/css/applications/community/main.css?v=5iTMW1V3HmVR&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_5.png?v=2	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/Speech_Love	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images//promo/summer2017/canvas_strip.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/ig/searchbox_workshop_bg_wide_blue.png?v=1);	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/popups/btn_arrow_down.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_arrow_wide.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/tradeoffer/	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/5987043299569130801/9918F0359D306FBA70FBA446F022701211CB33DF/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images//promo/summer2017/cloudtile.png);	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_double_arrows.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/ugc/5987043299569076890/2E4391BAB9C6BAD5E2AC5E2C861FCB514DCCD270/?imw=630&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gy	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/login/throbber.gif	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_1-2.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/css/skin_1/profile_reviews.css?v=vyUg0TLmllgj&l=english	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/shared/images/community/levels_crystals.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/public/images/sharedfiles/rightWorkshopToolsHeader.png	Avira URL Cloud: Label: phishing
Source: https://xjp.steamproxy.vip/economy/emoticon/catgirl_love	Avira URL Cloud: Label: phishing

Source: https://xjp.steamproxy.vip/profiles/76561199276106401/recommended/	HTTP Parser: Found new string: script $J = jQuery.noConflict();.if ( typeof JSON != 'object' \|\| !JSON.stringify \|\| !JSON.parse ) { document.write( "<scr" + "ipt type=\"text\/javascript\" src=\"https:\/\/xjp.steamproxy.vip\/public\/javascript\/json2.js?v=pmScf4470EZP&l=english\" ><\/script>\n" ); };...
Source: https://xjp.steamproxy.vip/profiles/76561199276106401	HTTP Parser: Found new string: script $J = jQuery.noConflict();.if ( typeof JSON != 'object' \|\| !JSON.stringify \|\| !JSON.parse ) { document.write( "<scr" + "ipt type=\"text\/javascript\" src=\"https:\/\/xjp.steamproxy.vip\/public\/javascript\/json2.js?v=pmScf4470EZP&l=english\" ><\/script>\n" ); };...
Source: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3300345708	HTTP Parser: Found new string: script $J = jQuery.noConflict();.if ( typeof JSON != 'object' \|\| !JSON.stringify \|\| !JSON.parse ) { document.write( "<scr" + "ipt type=\"text\/javascript\" src=\"https:\/\/xjp.steamproxy.vip\/public\/javascript\/json2.js?v=pmScf4470EZP&l=english\" ><\/script>\n" ); };...
Source: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3174784110	HTTP Parser: Found new string: script $J = jQuery.noConflict();.if ( typeof JSON != 'object' \|\| !JSON.stringify \|\| !JSON.parse ) { document.write( "<scr" + "ipt type=\"text\/javascript\" src=\"https:\/\/xjp.steamproxy.vip\/public\/javascript\/json2.js?v=pmScf4470EZP&l=english\" ><\/script>\n" ); };...

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49721 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_500.2.dr, chromecache_189.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)
Source: chromecache_540.2.dr	String found in binary or memory: <img src="https://xjp.steamproxy.vip/economy/emoticon/HentaiGirlKaren_happy" alt=":HentaiGirlKaren_happy:" class="emoticon"> <a class="bb_link" href="https://www.youtube.com/watch?v=Xs0Lxif1u9E" target="_blank" rel="" > <b>RADWIMPS - equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: xjp.steamproxy.vip
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: avatars.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: shared.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: img.youtube.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1924,i,7595222898225878721,11068150345474737058,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xjp.steamproxy.vip/profiles/76561199276106401"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1924,i,7595222898225878721,11068150345474737058,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	ytimg.l.google.com	United States	15169	GOOGLEUS	false
23.67.133.187	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
2.16.241.6	unknown	European Union	20940	AKAMAI-ASN1EU	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
8.222.231.212	xjp.steamproxy.vip	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.16.241.11	cdn.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
95.101.54.105	store.akamai.steamstatic.com	European Union	34164	AKAMAI-LONGB	false

IP
192.168.2.8
192.168.2.7
192.168.2.6

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1502052
Start date and time:	2024-08-31 00:31:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://xjp.steamproxy.vip/profiles/76561199276106401
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@18/742@38/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3174784110 Browse: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3300345708

Input	Output
URL: https://xjp.steamproxy.vip/profiles/76561199276106401 Model: jbxai	{ "brand":["OMARSO"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3174784110 Model: jbxai	{ "brand":["steam"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3300345708 Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3300345708 Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3174784110 Model: jbxai	{ "brand":["STEAM"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Source	Detection	Scanner	Label
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	0%	URL Reputation	safe
https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/id/_Soul_Warrior_	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/javascript/workshop_functions.js?v=NcJcKhT9Z3Dy&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/2272694181271065065/B23A3C0D7C9E5E96761A1E7E8F404247A282E389/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/remote/Icon_Remote	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_geo_9-10.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/ico/ico-deck-unsupported.svg	100%	Avira URL Cloud	phishing
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en	0%	URL Reputation	safe
https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_2.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/aku_stand	100%	Avira URL Cloud	phishing
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	0%	URL Reputation	safe
https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gyKjj7b&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/countryflags/tw.gif	100%	Avira URL Cloud	phishing
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	0%	URL Reputation	safe
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/860910/dc93d2e797d7a00a4fe5328697f218e972b23c00.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/sharedfiles/ico_fav_tiled.png?v=1	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/630060/5ce2e7970fc97de67925572b132a89cede431f7c.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/content_footer_fade_wide.png?v=1	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/2408934408285672828/48188B68F64830BD04917303D3136BF8D37AFCD8/?imw=100&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/news/img_dota2.jpg	100%	Avira URL Cloud	phishing
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://xjp.steamproxy.vip/legal/	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_background.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Light.ttf?v=4.015	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_arrow_down.png	100%	Avira URL Cloud	phishing
https://avatars.akamai.steamstatic.com/b43a4c87f57b6b27dbefedabadb8a91b52cce6b9_medium.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/sharedfiles/rate_ico_dn_tiled.png)	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/431960/8e56c301216c03a675b4441942fa143ced7c9ee8.jpg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2781370/14c99ec57c8c41664a87d5113b12aa605f3f2c12.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=512	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_1-2.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/profiles/76561198067215897	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/workshop/updatekvtags/	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_9-10.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/HealthSD	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/id/POCTR	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/2495639017703665015/C22352F94E7D23E6D6E7763F5E179DFFF8337BC2/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/bg_top_workshop_home.jpg	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/HentaiGirlBetty_athlete	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/heartg	100%	Avira URL Cloud	phishing
https://avatars.akamai.steamstatic.com/a60931496221af74eaa032c9bce704009388388d.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/ugc/2495639017703665028/3040639974A438D1C302D9221A939AFBAEC2FD5C/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/clover	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/login/home/?goto=sharedfiles%2Ffiledetails%2F%3Fid%3D3174784110	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/id/serhan1ty	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=500	100%	Avira URL Cloud	phishing
https://img.youtube.com/vi/pv2Dqk0D-hY/0.jpg?imw=100&imh=75&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_dateselect_arrow.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_9-10.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_5-6.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/Star_Z	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/apphubs/text_fade.png?v=1	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/Pentagram	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/2440466031439451690/AA43797DC6B1B3588ABF8F2FD175363E09D24EB0/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images//buttons/report_ico_tiled.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/gl_item_green.jpg);	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	100%	Avira URL Cloud	phishing
https://img.youtube.com/vi/Hm5ycSJFFcE/0.jpg?imw=5000&imh=5000&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/steam_refunds/	100%	Avira URL Cloud	phishing
https://community.akamai.steamstatic.com/public/css/skin_1/apphubs.css?v=0phemHYwd3Hq&l=english	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/shared/images/community/levels_mandala_1-2.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/css/applications/community/main.css?v=5iTMW1V3HmVR&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_5.png?v=2	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/Speech_Love	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/items/1146950/4b3ee5e3f3960d52d273ec67b7d9e4d3d2145e0b.png	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images//promo/summer2017/canvas_strip.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	100%	Avira URL Cloud	phishing
https://avatars.akamai.steamstatic.com/2b1bdc540b9cb1ed5f7a85e85004c5e2ce66f17e_medium.jpg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/630060/254669eae2f1d255e9f5c5a1db792d5e5c9065e3.jpg	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=eng	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/searchbox_workshop_bg_wide_blue.png?v=1);	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/popups/btn_arrow_down.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_arrow_wide.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/tradeoffer/	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/860910/8f18673adb4c362428cbce69397364439511931a.jpg	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/ugc/5987043299569130801/9918F0359D306FBA70FBA446F022701211CB33DF/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images//promo/summer2017/cloudtile.png);	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_double_arrows.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/ugc/5987043299569076890/2E4391BAB9C6BAD5E2AC5E2C861FCB514DCCD270/?imw=630&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	100%	Avira URL Cloud	phishing
https://steamcommunity.com/app/632360	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&	100%	Avira URL Cloud	phishing
https://steamcommunity.com/app/4000	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gy	100%	Avira URL Cloud	phishing
https://community.akamai.steamstatic.com/public/javascript/applications/community/localization/loyal	0%	Avira URL Cloud	safe
https://xjp.steamproxy.vip/public/images/login/throbber.gif	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_1-2.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/css/skin_1/profile_reviews.css?v=vyUg0TLmllgj&l=english	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/shared/images/community/levels_crystals.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/public/images/sharedfiles/rightWorkshopToolsHeader.png	100%	Avira URL Cloud	phishing
https://xjp.steamproxy.vip/economy/emoticon/catgirl_love	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
steamcommunity.com	23.67.133.187	true	false	unknown
xjp.steamproxy.vip	8.222.231.212	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
cdn.akamai.steamstatic.com	2.16.241.11	true	false	unknown
store.akamai.steamstatic.com	95.101.54.105	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ytimg.l.google.com	142.250.185.206	true	false	unknown
avatars.akamai.steamstatic.com	unknown	unknown	false	unknown
img.youtube.com	unknown	unknown	false	unknown
shared.akamai.steamstatic.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://xjp.steamproxy.vip/economy/emoticon/aku_stand	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2272694181271065065/B23A3C0D7C9E5E96761A1E7E8F404247A282E389/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/ico_fav_tiled.png?v=1	true	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/860910/dc93d2e797d7a00a4fe5328697f218e972b23c00.jpg	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/images/countryflags/tw.gif	true	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/630060/5ce2e7970fc97de67925572b132a89cede431f7c.jpg	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gyKjj7b&l=english	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2408934408285672828/48188B68F64830BD04917303D3136BF8D37AFCD8/?imw=100&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	true	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/431960/8e56c301216c03a675b4441942fa143ced7c9ee8.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2781370/14c99ec57c8c41664a87d5113b12aa605f3f2c12.jpg	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/economy/emoticon/HealthSD	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2495639017703665015/C22352F94E7D23E6D6E7763F5E179DFFF8337BC2/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/economy/emoticon/HentaiGirlBetty_athlete	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/economy/emoticon/heartg	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2495639017703665028/3040639974A438D1C302D9221A939AFBAEC2FD5C/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/economy/emoticon/clover	false	Avira URL Cloud: phishing	unknown
https://img.youtube.com/vi/pv2Dqk0D-hY/0.jpg?imw=100&imh=75&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/economy/emoticon/Star_Z	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/economy/emoticon/Pentagram	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2440466031439451690/AA43797DC6B1B3588ABF8F2FD175363E09D24EB0/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english	false	Avira URL Cloud: phishing	unknown
https://img.youtube.com/vi/Hm5ycSJFFcE/0.jpg?imw=5000&imh=5000&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/css/applications/community/main.css?v=5iTMW1V3HmVR&l=english	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/items/1146950/4b3ee5e3f3960d52d273ec67b7d9e4d3d2145e0b.png	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/economy/emoticon/Speech_Love	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/630060/254669eae2f1d255e9f5c5a1db792d5e5c9065e3.jpg	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/860910/8f18673adb4c362428cbce69397364439511931a.jpg	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/ugc/5987043299569130801/9918F0359D306FBA70FBA446F022701211CB33DF/?imw=150&imh=150&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/5987043299569076890/2E4391BAB9C6BAD5E2AC5E2C861FCB514DCCD270/?imw=630&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/login/throbber.gif	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/css/skin_1/profile_reviews.css?v=vyUg0TLmllgj&l=english	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/economy/emoticon/catgirl_love	false	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_2.png?v=2	chromecache_635.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_geo_9-10.png?v=2	chromecache_635.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/id/_Soul_Warrior_	chromecache_654.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/css/skin_1/workshop_itemdetails.css?v=CVzTEIccE7uv&l=english	chromecache_485.2.dr, chromecache_654.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/remote/Icon_Remote	chromecache_524.2.dr, chromecache_339.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_635.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/javascript/workshop_functions.js?v=NcJcKhT9Z3Dy&l=english	chromecache_485.2.dr, chromecache_654.2.dr	true	Avira URL Cloud: phishing	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	chromecache_270.2.dr	false	URL Reputation: safe	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/content_footer_fade_wide.png?v=1	chromecache_280.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/news/img_dota2.jpg	chromecache_287.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_background.png	chromecache_280.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/legal/	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	true	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/fonts/MotivaSans-Light.ttf?v=4.015	chromecache_265.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_arrow_down.png	chromecache_435.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/rate_ico_dn_tiled.png)	chromecache_435.2.dr	false	Avira URL Cloud: phishing	unknown
https://avatars.akamai.steamstatic.com/b43a4c87f57b6b27dbefedabadb8a91b52cce6b9_medium.jpg	chromecache_654.2.dr	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=512	chromecache_654.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_1-2.png?v=2	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/workshop/updatekvtags/	chromecache_485.2.dr, chromecache_654.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/profiles/76561198067215897	chromecache_485.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_patterns_9-10.png?v=2	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/id/POCTR	chromecache_485.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/bg_top_workshop_home.jpg	chromecache_280.2.dr	false	Avira URL Cloud: phishing	unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en	chromecache_270.2.dr	false	URL Reputation: safe	unknown
https://avatars.akamai.steamstatic.com/a60931496221af74eaa032c9bce704009388388d.jpg	chromecache_654.2.dr	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/login/home/?goto=sharedfiles%2Ffiledetails%2F%3Fid%3D3174784110	chromecache_485.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/id/serhan1ty	chromecache_654.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/ugc/2460739118151530251/91316E2AA54A5FB48A59B5296F67B71C4490E9C4/?imw=500	chromecache_654.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_dateselect_arrow.png	chromecache_280.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_9-10.png	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_5-6.png	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/apphubs/text_fade.png?v=1	chromecache_644.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/gl_item_green.jpg);	chromecache_435.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/javascript/global.js?v=9OzcxMXbaV84&l=english	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images//buttons/report_ico_tiled.png	chromecache_282.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/steam_refunds/	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://community.akamai.steamstatic.com/public/css/skin_1/apphubs.css?v=0phemHYwd3Hq&l=english	chromecache_270.2.dr	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_mandala_1-2.png?v=2	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip	chromecache_596.2.dr, chromecache_430.2.dr, chromecache_291.2.dr, chromecache_559.2.dr, chromecache_500.2.dr, chromecache_491.2.dr, chromecache_189.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_shapes_5.png?v=2	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	chromecache_270.2.dr	false	URL Reputation: safe	unknown
https://xjp.steamproxy.vip/public/images//promo/summer2017/canvas_strip.png	chromecache_507.2.dr	false	Avira URL Cloud: phishing	unknown
https://avatars.akamai.steamstatic.com/2b1bdc540b9cb1ed5f7a85e85004c5e2ce66f17e_medium.jpg	chromecache_654.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=eng	chromecache_270.2.dr	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/workshop_appselect_arrow_wide.png	chromecache_280.2.dr	false	Avira URL Cloud: phishing	unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	chromecache_270.2.dr	false	URL Reputation: safe	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/ig/searchbox_workshop_bg_wide_blue.png?v=1);	chromecache_280.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/popups/btn_arrow_down.png	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/tradeoffer/	chromecache_596.2.dr, chromecache_629.2.dr, chromecache_579.2.dr, chromecache_491.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images//promo/summer2017/cloudtile.png);	chromecache_507.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/icons/icon_double_arrows.png	chromecache_435.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://steamcommunity.com/app/632360	chromecache_270.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/localization/loyal	chromecache_270.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/app/4000	chromecache_270.2.dr	false	Avira URL Cloud: safe	unknown
https://xjp.steamproxy.vip/public/javascript/applications/community/libraries~b28b7af69.js?v=44wd1gy	chromecache_485.2.dr, chromecache_654.2.dr, chromecache_191.2.dr, chromecache_540.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_airelement_1-2.png	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown
https://xjp.steamproxy.vip/public/images/sharedfiles/rightWorkshopToolsHeader.png	chromecache_280.2.dr	false	Avira URL Cloud: phishing	unknown
https://help.steampowered.com/en/	chromecache_270.2.dr	false	URL Reputation: safe	unknown
https://xjp.steamproxy.vip/public/shared/images/community/levels_crystals.png	chromecache_635.2.dr	false	Avira URL Cloud: phishing	unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 21:32:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9816129544592593
Encrypted:	false
SSDEEP:	48:8jA0d5TlLtNHOidAKZdA1oehwiZUklqehvty+3:8EGHfGy
MD5:	7CA6F51A506986862160628FCCE1B1AB
SHA1:	686DF13913E4DC548AD93B5E908F3C7C57EFD59B
SHA-256:	1A90A14D4BFC736BB5C2C33AB0DFBF8C72CD9302F0389931CFAED5901D147B99
SHA-512:	71C018225545E0573ED194BC4F48D298B77A5C9F31A40BED9523FD94D06F231FB1A463961FE76FF508634CE0AD7D302777126D2095D9090828140C2DA5CFD82A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Nqis,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.Y......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........S.9......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 31, 2024 00:32:09.510222912 CEST	192.168.2.8	1.1.1.1	0xecef	Standard query (0)	xjp.steamproxy.vip	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:09.510440111 CEST	192.168.2.8	1.1.1.1	0x533f	Standard query (0)	xjp.steamproxy.vip	65	IN (0x0001)	false
Aug 31, 2024 00:32:11.986751080 CEST	192.168.2.8	1.1.1.1	0xb67	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:11.987688065 CEST	192.168.2.8	1.1.1.1	0x501a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:17.188806057 CEST	192.168.2.8	1.1.1.1	0xdd1a	Standard query (0)	xjp.steamproxy.vip	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:17.189070940 CEST	192.168.2.8	1.1.1.1	0x3421	Standard query (0)	xjp.steamproxy.vip	65	IN (0x0001)	false
Aug 31, 2024 00:32:21.246330976 CEST	192.168.2.8	1.1.1.1	0x22e5	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:21.246701002 CEST	192.168.2.8	1.1.1.1	0xf5e3	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:22.976874113 CEST	192.168.2.8	1.1.1.1	0xc532	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:22.976874113 CEST	192.168.2.8	1.1.1.1	0x27ae	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:23.495847940 CEST	192.168.2.8	1.1.1.1	0x6da6	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:23.496701956 CEST	192.168.2.8	1.1.1.1	0x3230	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:24.145626068 CEST	192.168.2.8	1.1.1.1	0x41ed	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:24.145833015 CEST	192.168.2.8	1.1.1.1	0xae6a	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:24.656503916 CEST	192.168.2.8	1.1.1.1	0xed4b	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:24.656872988 CEST	192.168.2.8	1.1.1.1	0xd82	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:26.299118996 CEST	192.168.2.8	1.1.1.1	0x136e	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:26.299371958 CEST	192.168.2.8	1.1.1.1	0xa24a	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:31.387229919 CEST	192.168.2.8	1.1.1.1	0x921a	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:31.387891054 CEST	192.168.2.8	1.1.1.1	0x9ff4	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:37.845138073 CEST	192.168.2.8	1.1.1.1	0xb66a	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.845988035 CEST	192.168.2.8	1.1.1.1	0x4bfb	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:37.914304972 CEST	192.168.2.8	1.1.1.1	0xc99	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.914575100 CEST	192.168.2.8	1.1.1.1	0xc42c	Standard query (0)	img.youtube.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:38.526693106 CEST	192.168.2.8	1.1.1.1	0xf0a4	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:38.527182102 CEST	192.168.2.8	1.1.1.1	0x271f	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:44.379472971 CEST	192.168.2.8	1.1.1.1	0x4290	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.379796028 CEST	192.168.2.8	1.1.1.1	0x6197	Standard query (0)	img.youtube.com	65	IN (0x0001)	false
Aug 31, 2024 00:32:44.395055056 CEST	192.168.2.8	1.1.1.1	0xfd09	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.395194054 CEST	192.168.2.8	1.1.1.1	0x8fad	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:33:10.104888916 CEST	192.168.2.8	1.1.1.1	0x458d	Standard query (0)	xjp.steamproxy.vip	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:10.105226994 CEST	192.168.2.8	1.1.1.1	0xbfef	Standard query (0)	xjp.steamproxy.vip	65	IN (0x0001)	false
Aug 31, 2024 00:33:22.166049004 CEST	192.168.2.8	1.1.1.1	0xc571	Standard query (0)	xjp.steamproxy.vip	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:22.166222095 CEST	192.168.2.8	1.1.1.1	0x29b6	Standard query (0)	xjp.steamproxy.vip	65	IN (0x0001)	false
Aug 31, 2024 00:33:24.399682045 CEST	192.168.2.8	1.1.1.1	0xbb52	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:24.400077105 CEST	192.168.2.8	1.1.1.1	0x454a	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false
Aug 31, 2024 00:33:25.594846964 CEST	192.168.2.8	1.1.1.1	0x9c4b	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:25.595282078 CEST	192.168.2.8	1.1.1.1	0x9bac	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 31, 2024 00:32:09.679635048 CEST	1.1.1.1	192.168.2.8	0xecef	No error (0)	xjp.steamproxy.vip		8.222.231.212	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:11.998817921 CEST	1.1.1.1	192.168.2.8	0xb67	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:11.999201059 CEST	1.1.1.1	192.168.2.8	0x501a	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 31, 2024 00:32:17.424725056 CEST	1.1.1.1	192.168.2.8	0xdd1a	No error (0)	xjp.steamproxy.vip		8.222.231.212	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:21.256828070 CEST	1.1.1.1	192.168.2.8	0x22e5	No error (0)	cdn.akamai.steamstatic.com		2.16.241.11	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:21.256828070 CEST	1.1.1.1	192.168.2.8	0x22e5	No error (0)	cdn.akamai.steamstatic.com		2.16.241.6	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:23.116615057 CEST	1.1.1.1	192.168.2.8	0x2402	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:23.116615057 CEST	1.1.1.1	192.168.2.8	0x2402	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:23.117268085 CEST	1.1.1.1	192.168.2.8	0xc532	No error (0)	cdn.akamai.steamstatic.com		2.16.241.6	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:23.117268085 CEST	1.1.1.1	192.168.2.8	0xc532	No error (0)	cdn.akamai.steamstatic.com		2.16.241.11	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:23.509413004 CEST	1.1.1.1	192.168.2.8	0x6da6	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:23.513910055 CEST	1.1.1.1	192.168.2.8	0x3230	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:24.157335997 CEST	1.1.1.1	192.168.2.8	0x41ed	No error (0)	store.akamai.steamstatic.com		95.101.54.105	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:24.157335997 CEST	1.1.1.1	192.168.2.8	0x41ed	No error (0)	store.akamai.steamstatic.com		95.101.54.217	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:24.665534973 CEST	1.1.1.1	192.168.2.8	0xd82	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:24.665913105 CEST	1.1.1.1	192.168.2.8	0xed4b	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:26.311564922 CEST	1.1.1.1	192.168.2.8	0x136e	No error (0)	store.akamai.steamstatic.com		2.16.238.157	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:26.311564922 CEST	1.1.1.1	192.168.2.8	0x136e	No error (0)	store.akamai.steamstatic.com		2.16.238.136	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:31.394608974 CEST	1.1.1.1	192.168.2.8	0x921a	No error (0)	steamcommunity.com		23.67.133.187	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.347635984 CEST	1.1.1.1	192.168.2.8	0x99cc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:37.347635984 CEST	1.1.1.1	192.168.2.8	0x99cc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.854130030 CEST	1.1.1.1	192.168.2.8	0xb66a	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:37.856043100 CEST	1.1.1.1	192.168.2.8	0x4bfb	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.922508001 CEST	1.1.1.1	192.168.2.8	0xc99	No error (0)	ytimg.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:37.924159050 CEST	1.1.1.1	192.168.2.8	0xc42c	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:38.533551931 CEST	1.1.1.1	192.168.2.8	0xf0a4	No error (0)	steamcommunity.com		23.67.133.187	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403812885 CEST	1.1.1.1	192.168.2.8	0x6197	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403870106 CEST	1.1.1.1	192.168.2.8	0x4290	No error (0)	ytimg.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:32:44.403976917 CEST	1.1.1.1	192.168.2.8	0xfd09	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:32:44.404561996 CEST	1.1.1.1	192.168.2.8	0x8fad	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:02.503668070 CEST	1.1.1.1	192.168.2.8	0x148	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:02.503668070 CEST	1.1.1.1	192.168.2.8	0x148	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:10.286005974 CEST	1.1.1.1	192.168.2.8	0x458d	No error (0)	xjp.steamproxy.vip		8.222.231.212	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:20.541774035 CEST	1.1.1.1	192.168.2.8	0x29b4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:20.541774035 CEST	1.1.1.1	192.168.2.8	0x29b4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:22.469484091 CEST	1.1.1.1	192.168.2.8	0xc571	No error (0)	xjp.steamproxy.vip		8.222.231.212	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:24.407025099 CEST	1.1.1.1	192.168.2.8	0x454a	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:24.409039974 CEST	1.1.1.1	192.168.2.8	0xbb52	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:25.041695118 CEST	1.1.1.1	192.168.2.8	0x16c5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:25.041695118 CEST	1.1.1.1	192.168.2.8	0x16c5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 31, 2024 00:33:25.602088928 CEST	1.1.1.1	192.168.2.8	0x9c4b	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 31, 2024 00:33:25.602377892 CEST	1.1.1.1	192.168.2.8	0x9bac	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:11 UTC	687	OUT	GET /profiles/76561199276106401 HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 22:32:12 UTC	780	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Mon, 26 Jul 1997 05:00:00 GMT Set-Cookie: sessionid=720ec227ea0966ae5d421aa2; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b; Path=/; Secure; HttpOnly; SameSite=None Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:12 UTC	15604	IN	Data Raw: 66 65 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 Data Ascii: fe11<!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 0d 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 62 6f 64 79 20 70 6f 70 75 70 5f 6d 65 6e 75 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 73 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 73 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 ae 80 e4 bd 93 e4 b8 ad e6 96 87 20 28 53 69 6d 70 6c 69 66 69 65 64 20 43 68 69 6e 65 73 65 29 Data Ascii: dropdown" style="display: none;"><div class="popup_body popup_menu"><a class="popup_menu_item tight" href="?l=schinese" onclick="ChangeLanguage( 'schinese' ); return false;"> (Simplified Chinese)
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6c 65 76 65 6c 5f 62 74 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 70 72 6f 66 69 6c 65 73 2f 37 36 35 36 31 31 39 39 32 37 36 31 30 36 34 30 31 2f 62 61 64 67 65 73 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 20 70 65 72 73 6f 6e 61 5f 6c 65 76 65 6c 22 3e 4c 65 76 65 6c 20 3c 64 69 76 20 63 6c Data Ascii: <a data-panel="{"focusable":true,"clickOnActivate":true}" class="persona_level_btn" href="https://xjp.steamproxy.vip/profiles/76561199276106401/badges"><div class="persona_name persona_level">Level <div cl
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 79 65 72 41 76 61 74 61 72 20 6f 66 66 6c 69 6e 65 22 3e 0d 0a 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 65 32 33 65 36 37 33 63 32 35 32 66 34 39 62 31 31 31 66 37 39 31 35 61 31 65 38 65 32 65 62 34 30 35 62 30 34 66 38 63 5f 6d 65 64 69 75 6d 2e 6a 70 67 22 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 69 65 6e 64 42 6c 6f 63 6b 43 6f 6e 74 65 6e 74 22 3e 0d 0a 09 09 09 09 6d 61 72 69 7a 65 3c 62 72 3e 0d 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 72 69 65 6e 64 53 6d 61 6c 6c 54 65 Data Ascii: iv><div class="playerAvatar offline"><img src="https://avatars.akamai.steamstatic.com/e23e673c252f49b111f7915a1e8e2eb405b04f8c_medium.jpg"></div><div class="friendBlockContent">marize<br><span class="friendSmallTe
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 73 68 61 72 65 64 66 69 6c 65 73 2f 66 69 6c 65 64 65 74 61 69 6c 73 2f 3f 69 64 3d 33 32 39 32 32 33 37 32 31 33 22 20 74 69 74 6c 65 3d 22 33 22 20 63 6c 61 73 73 3d 22 75 67 63 22 20 64 61 74 61 2d 61 70 70 69 64 3d 22 34 38 30 22 20 64 61 74 61 2d 70 75 62 6c 69 73 68 65 64 66 69 6c 65 69 64 3d 22 33 32 39 32 32 33 37 32 31 33 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 69 6d 67 20 63 6c 61 73 73 3d 22 77 6f 72 6b 73 68 6f 70 5f 73 68 6f 77 63 61 73 65 5f 69 74 65 6d 5f 69 6d 61 67 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 75 67 63 2f 32 34 36 35 32 34 31 34 34 39 38 Data Ascii: <a href="https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3292237213" title="3" class="ugc" data-appid="480" data-publishedfileid="3292237213"><img class="workshop_showcase_item_image" src="https://xjp.steamproxy.vip/ugc/24652414498
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 63 74 6e 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 6f 72 6b 73 68 6f 70 5f 73 68 6f 77 63 61 73 65 5f 6d 75 6c 74 69 69 74 65 6d 20 73 68 6f 77 63 61 73 65 5f 73 6c 6f 74 20 22 20 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 73 68 61 72 65 64 66 69 6c 65 73 2f 66 69 6c 65 64 65 74 61 69 6c 73 2f 3f 69 64 3d 33 31 33 31 34 30 36 38 37 36 22 20 74 69 74 6c 65 3d 22 e6 98 9f e9 87 8e e6 84 9b 61 32 22 20 63 6c 61 73 73 3d 22 75 67 63 22 20 64 61 74 61 2d 61 70 70 69 64 3d 22 34 38 30 22 20 64 61 74 61 2d 70 75 62 6c 69 73 68 65 64 66 69 6c 65 69 64 3d 22 33 31 33 31 34 30 36 38 37 36 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 69 Data Ascii: ctn"><div class="workshop_showcase_multiitem showcase_slot " ><a href="https://xjp.steamproxy.vip/sharedfiles/filedetails/?id=3131406876" title="a2" class="ugc" data-appid="480" data-publishedfileid="3131406876"><i
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 6d 79 75 47 75 71 31 77 66 68 57 53 49 59 68 59 5f 39 58 45 44 59 4f 4d 4e 52 42 73 4d 6f 47 75 75 4f 67 63 65 58 6f 62 35 30 6b 61 78 56 5f 50 48 6a 4d 4f 31 4d 48 61 45 71 67 63 6e 70 4e 53 67 75 41 6d 6f 52 55 6d 6e 79 4a 44 6c 5f 43 4e 66 37 71 66 35 4f 66 77 5f 64 61 61 56 57 7a 37 43 77 37 6b 75 36 62 63 38 48 69 76 69 78 68 73 69 73 47 33 56 77 34 36 67 63 57 58 41 4e 31 43 44 6d 59 4b 30 63 51 2f 3f 61 6c 6c 6f 77 5f 61 6e 69 6d 61 74 65 64 3d 31 22 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 21 2d 2d 0d 0a 09 09 09 09 09 09 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 20 6c 65 66 74 3b 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 Data Ascii: myuGuq1wfhWSIYhY_9XEDYOMNRBsMoGuuOgceXob50kaxV_PHjMO1MHaEqgcnpNSguAmoRUmnyJDl_CNf7qf5Ofw_daaVWz7Cw7ku6bc8HivixhsisG3Vw46gcWXAN1CDmYK0cQ/?allow_animated=1"></a></div>...<div style="clear: left;"></div>
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 6f 77 63 61 73 65 5f 73 6c 6f 74 20 73 68 6f 77 63 61 73 65 5f 61 63 68 69 65 76 65 6d 65 6e 74 20 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 68 74 6d 6c 3d 22 45 58 49 54 20 4b 55 4e 3c 62 72 3e 0a 43 68 69 63 6b 65 6e 3c 62 72 3e 0a 4c 61 75 6e 63 68 69 6e 67 20 74 68 65 20 67 61 6d 65 20 66 6f 72 20 74 68 65 20 66 69 72 73 74 20 74 69 6d 65 22 20 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 70 72 6f 66 69 6c 65 73 2f 37 36 35 36 31 31 39 39 32 37 36 31 Data Ascii: </a></div><div class="showcase_slot showcase_achievement " data-tooltip-html="EXIT KUN<br>Chicken<br>Launching the game for the first time" ><a href="https://xjp.steamproxy.vip/profiles/765611992761
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 72 6f 78 79 2e 76 69 70 2f 70 72 6f 66 69 6c 65 73 2f 37 36 35 36 31 31 39 39 32 37 36 31 30 36 34 30 31 2f 73 74 61 74 73 2f 36 33 30 30 36 30 2f 61 63 68 69 65 76 65 6d 65 6e 74 73 2f 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 73 2f 36 33 30 30 36 30 2f 35 37 30 33 64 36 38 30 64 62 30 35 37 63 38 62 62 65 31 37 65 35 30 64 36 33 30 34 31 39 64 36 38 63 65 37 62 35 38 36 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 Data Ascii: roxy.vip/profiles/76561199276106401/stats/630060/achievements/"><img src="https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/630060/5703d680db057c8bbe17e50d630419d68ce7b586.jpg"></a></div>
2024-08-30 22:32:12 UTC	16384	IN	Data Raw: 3a 20 6c 65 66 74 3b 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 6f 77 63 61 73 65 5f 73 6c 6f 74 5f 72 6f 77 22 3e 0d 0a 09 09 09 09 09 09 09 2d 2d 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 6f 77 63 61 73 65 5f 73 6c 6f 74 20 69 74 65 6d 5f 73 68 6f 77 63 61 73 65 5f 69 74 65 6d 20 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 22 20 64 61 74 61 2d 65 63 6f 6e 6f 6d 79 2d 69 74 65 6d 3d 22 63 6c 61 73 73 69 6e 66 6f 2f 37 35 33 2f 35 33 39 36 30 36 34 38 36 30 2f 33 38 37 33 35 30 33 31 33 33 22 3e 0d 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: : left;"></div></div><div class="showcase_slot_row">--><div class="showcase_slot item_showcase_item " style="border-color: transparent;" data-economy-item="classinfo/753/5396064860/3873503133"><a href="https:/

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:12 UTC	715	OUT	GET /public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:13 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:12 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:12 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:13 UTC	2568	IN	Data Raw: 39 66 63 0d 0a 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f Data Ascii: 9fc/* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Versio

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	711	OUT	GET /public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	15758	IN	Data Raw: 38 30 30 30 0d 0a 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 Data Ascii: 8000.btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linea
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 29 3b 3b 09 09 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 67 72 65 79 5f 62 6c 61 63 6b 2e 62 74 6e 5f 61 63 74 69 76 65 20 3e 20 73 70 61 6e 2c 20 62 74 6e 76 36 5f 67 72 65 79 5f 62 6c 61 63 6b 2e 61 63 74 69 76 65 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: );;}.btnv6_grey_black.btn_active > span, btnv6_grey_black.active > span {background: transparent;}.btnv6_white_transparent {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decor
2024-08-30 22:32:14 UTC	1576	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 30 34 70 78 20 30 70 78 3b 09 7d 0d 0a 0d 0a 09 09 09 2e 69 63 6f 5f 68 6f 76 65 72 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 2e 69 63 6f 31 36 2e 62 6c 75 65 61 72 72 6f 77 5f 64 6f 77 6e 20 7b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 30 34 70 78 20 2d 31 36 70 78 3b 09 09 7d 0d 0a 09 0d 0a 09 09 09 2e 62 74 6e 5f 61 63 74 69 76 65 20 2e 69 63 6f 31 36 2e 62 6c 75 65 61 72 72 6f 77 5f 64 6f 77 6e 2c 20 2e 61 63 74 69 76 65 20 2e 69 63 6f 31 36 2e 62 6c 75 65 61 72 72 6f 77 5f 64 6f 77 6e 20 7b 0d 0a 09 09 09 Data Ascii: position: -304px 0px;}.ico_hover:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover .ico16.bluearrow_down {background-position: -304px -16px;}.btn_active .ico16.bluearrow_down, .active .ico16.bluearrow_down {

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://xjp.steamproxy.vip/profiles/76561199276106401

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Windows Analysis Report
https://xjp.steamproxy.vip/profiles/76561199276106401

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	717	OUT	GET /public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	15758	IN	Data Raw: 38 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a 20 23 30 45 Data Ascii: 8000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey: #0E
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 5f 70 61 64 64 65 64 2e 70 6e 67 27 20 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 69 67 68 74 20 63 65 6e 74 65 72 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 62 6f 64 79 2e 76 36 20 2e 70 75 6c 6c 64 6f 77 6e 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 73 70 61 6e 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 70 75 6c 6c 64 6f 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: /public/shared/images/popups/btn_arrow_down_padded.png' );background-position: right center;background-repeat: no-repeat;cursor: pointer;}body.v6 .pulldown {margin-right: 5px;}span.popup_menu_pulldown_indicator {display: inline-bl
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 56 42 52 45 5a 42 52 44 6c 43 4e 7a 64 43 4e 7a 45 78 52 54 49 35 4f 44 41 7a 52 55 45 33 4d 44 55 30 4d 7a 6b 35 4d 6a 4d 35 49 6a 34 67 50 48 68 74 63 45 31 4e 4f 6b 52 6c 63 6d 6c 32 5a 57 52 47 63 6d 39 74 49 48 4e 30 55 6d 56 6d 4f 6d 6c 75 63 33 52 68 62 6d 4e 6c 53 55 51 39 49 6e 68 74 63 43 35 70 61 57 51 36 4e 55 46 45 52 6b 46 45 4f 54 67 33 4e 30 49 33 4d 54 46 46 4d 6a 6b 34 4d 44 4e 46 51 54 63 77 4e 54 51 7a 4f 54 6b 79 4d 7a 6b 69 49 48 4e 30 55 6d 56 6d 4f 6d 52 76 59 33 56 74 5a 57 35 30 53 55 51 39 49 6e 68 74 63 43 35 6b 61 57 51 36 4e 55 46 45 52 6b 46 45 4f 54 6b 33 4e 30 49 33 4d 54 46 46 4d 6a 6b 34 4d 44 4e 46 51 54 63 77 4e 54 51 7a 4f 54 6b 79 4d 7a 6b 69 4c 7a 34 67 50 43 39 79 5a 47 59 36 52 47 56 7a 59 33 4a 70 63 48 52 70 62 Data Ascii: VBREZBRDlCNzdCNzExRTI5ODAzRUE3MDU0Mzk5MjM5Ij4gPHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6NUFERkFEOTg3N0I3MTFFMjk4MDNFQTcwNTQzOTkyMzkiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6NUFERkFEOTk3N0I3MTFFMjk4MDNFQTcwNTQzOTkyMzkiLz4gPC9yZGY6RGVzY3JpcHRpb
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 61 73 79 6e 63 67 61 6d 65 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2f 69 6e 62 6f 78 5f 61 73 79 6e 63 5f 67 61 6d 65 2e 70 6e 67 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 61 73 79 6e 63 67 61 6d 65 69 6e 76 69 74 65 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a Data Ascii: .header_notification_asyncgame .notification_icon {background-image: url( 'https://xjp.steamproxy.vip/public/shared/images/header/inbox_async_game.png' );}.header_notification_asyncgameinvite .notification_icon {background-image: url( 'https:
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 31 31 31 31 31 31 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 39 29 3b 0d 0a 0d 0a 09 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 20 31 38 70 78 3b 0d 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 35 3b 0d 0a 7d 0d 0a 2e 73 74 6f 72 65 5f 6d 61 69 6e 5f 63 61 70 73 75 6c 65 20 2e 64 73 5f 66 6c 61 67 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 34 32 70 78 3b 0d 0a 7d 0d 0a 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 20 2e 64 73 5f 66 6c 61 67 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 32 38 70 78 Data Ascii: lor: #111111; box-shadow: 0 0 10px rgba(0,0,0,0.9);height: 18px;line-height: 19px;padding: 0 0 0 18px;white-space: nowrap;z-index: 5;}.store_main_capsule .ds_flag { top: 42px;}.broadcast_capsule .ds_flag { top: 28px
2024-08-30 22:32:14 UTC	5118	IN	Data Raw: 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6e 61 76 6c 69 6e 6b 73 20 7b 0d 0a 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 30 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 63 61 6c 63 28 20 39 31 30 70 78 20 2d 20 31 36 70 78 29 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 46 38 45 39 33 3b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 Data Ascii: hina_footer_navlinks { user-select: none; margin-left: 50px;line-height: 24px;}.china_footer_content { max-width: calc( 910px - 16px); margin: 0px auto; padding-top: 16px; color: #8F8E93;font-family: "Motiva Sans

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	705	OUT	GET /public/css/globalv2.css?v=PAcV2zMBzzSV&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	15758	IN	Data Raw: 38 30 30 30 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 20 23 31 62 32 38 33 38 3b 0d 0a 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 38 46 39 38 41 30 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 2e 62 6c 61 63 6b 20 7b 0d 0a 09 62 61 63 Data Ascii: 8000html {height: 100%;}body {background: #1b2838;text-align: left;color: #8F98A0;font-size: 14px;margin:0;padding:0;}body.flat_page {position: relative;min-height: 100%;}body.flat_page.black {bac
2024-08-30 22:32:14 UTC	16384	IN	Data Raw: 65 61 64 5f 73 75 62 73 63 72 69 62 65 5f 63 68 65 63 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 78 6a 70 2e 73 74 65 61 6d 70 72 6f 78 79 2e 76 69 70 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 6c 6f 67 69 6e 2f 74 68 72 6f 62 62 65 72 2e 67 69 66 27 20 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 69 6e 67 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a Data Ascii: ead_subscribe_check {display: block;background-image: url( 'https://xjp.steamproxy.vip/public/images/login/throbber.gif' );background-size: contain;}.commentthread_paging {display: flex;flex-direction: row; align-items: center;
2024-08-30 22:32:14 UTC	7343	IN	Data Raw: 75 74 74 6f 6e 2e 66 6f 63 75 73 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 45 41 41 41 41 68 43 41 59 41 41 41 42 58 35 4d 4a 76 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 32 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 Data Ascii: utton.focus {background-image: url( 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACEAAAAhCAYAAABX5MJvAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAA2RpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	707	OUT	GET /public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	2477	IN	Data Raw: 39 61 31 0d 0a 0d 0a 2e 6d 6f 64 61 6c 42 6f 64 79 0d 0a 7b 0d 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 6d 6f 64 61 6c 5f 66 72 61 6d 65 0d 0a 7b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 33 31 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 36 30 30 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 30 34 61 36 36 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 6f 64 61 6c 43 6f 6e Data Ascii: 9a1.modalBody{overflow-y: scroll;overflow-x: auto;}#modalContent.modal_frame{min-width: 310px;height: 600px;border: 2px solid #304a66;border-radius: 2px;-moz-border-radius: 2px;background-color: black;}#modalCon

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 22:32:14 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39879 Date: Fri, 30 Aug 2024 22:32:14 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	713	OUT	GET /public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	15758	IN	Data Raw: 38 30 30 30 0d 0a 0d 0a 62 6f 64 79 2e 44 65 66 61 75 6c 74 54 68 65 6d 65 20 7b 0d 0a 09 2d 2d 67 72 61 64 69 65 6e 74 2d 72 69 67 68 74 3a 20 72 67 62 61 28 31 30 39 2c 20 33 38 2c 20 34 34 2c 20 30 2e 33 30 31 29 3b 0d 0a 09 2d 2d 67 72 61 64 69 65 6e 74 2d 6c 65 66 74 3a 20 72 67 62 61 28 35 30 2c 20 32 35 35 2c 20 31 39 33 2c 20 30 2e 31 30 33 29 3b 0d 0a 09 2d 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 33 34 2c 20 33 35 2c 20 34 38 2c 20 30 2e 39 33 29 3b 0d 0a 09 2d 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 72 69 67 68 74 3a 20 72 67 62 61 28 31 30 39 2c 20 33 38 2c 20 34 34 2c 20 30 29 3b 0d 0a 09 2d 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 65 66 74 3a 20 72 67 62 Data Ascii: 8000body.DefaultTheme {--gradient-right: rgba(109, 38, 44, 0.301);--gradient-left: rgba(50, 255, 193, 0.103);--gradient-background: rgba(34, 35, 48, 0.93);--gradient-background-right: rgba(109, 38, 44, 0);--gradient-background-left: rgb
2024-08-30 22:32:15 UTC	16384	IN	Data Raw: 68 65 6d 65 20 2e 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 20 7b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 35 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 53 74 65 61 6d 33 30 30 30 54 68 65 6d 65 20 2e 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 32 70 78 20 64 6f 74 74 65 64 20 23 65 36 63 33 33 33 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 34 70 78 20 34 70 78 20 23 32 30 64 30 33 38 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 62 6c 61 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 53 74 65 61 6d 33 30 30 30 54 68 65 6d 65 20 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 70 72 6f 66 69 6c 65 5f 72 69 67 68 74 63 6f 6c 20 7b Data Ascii: heme .profile_header {max-width: 950px;}body.Steam3000Theme .profile_header_content { outline: 2px dotted #e6c333; box-shadow: 4px 4px #20d038; background: black;}body.Steam3000Theme html.responsive.tablet .profile_rightcol {
2024-08-30 22:32:15 UTC	16384	IN	Data Raw: 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 66 69 6c 65 5f 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 5f 62 6c 6f 63 6b 2e 63 75 73 74 6f 6d 69 7a 65 5f 72 65 70 6c 61 79 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 66 69 6c 65 5f 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 5f 62 6c 6f 63 6b 20 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 66 69 6c 65 5f 63 75 Data Ascii: en;}.profile_customization_block.customize_replay { display: flex; align-items: center; flex-wrap: wrap; line-height: 17px;}.profile_customization_block label { margin-right: 8px; flex-shrink: 0;}.profile_cu
2024-08-30 22:32:15 UTC	16384	IN	Data Raw: 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 72 69 67 68 74 2c 20 23 30 30 30 30 30 30 20 35 25 2c 23 32 38 32 38 32 38 20 39 35 25 29 3b 0a 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 6d 79 67 75 69 64 65 5f 73 68 6f 77 63 61 73 65 5f 69 74 65 6d 5f 63 74 6e 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 38 25 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 25 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 30 31 32 31 34 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 33 20 29 3b 0d 0a 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f Data Ascii: 95%);background: linear-gradient( to right, #000000 5%,#282828 95%);*/}.myguide_showcase_item_ctn {width: 48%;margin-right: 1%;overflow: hidden;background-color: #101214;background-color: rgba( 0, 0, 0, 0.3 );border: 1px so
2024-08-30 22:32:15 UTC	16384	IN	Data Raw: 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 66 69 6c 65 5f 74 6f 70 66 72 69 65 6e 64 73 20 2e 66 72 69 65 6e 64 42 6c 6f 63 6b 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 66 69 6c 65 5f 74 6f 70 66 72 69 65 6e 64 73 20 2e 66 72 69 65 6e 64 42 6c 6f 63 6b 3a 68 6f 76 65 72 20 7b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0d 0a 7d 0d 0a 0d 0a 23 67 72 6f 75 70 5f 69 6e 76 69 74 65 5f 6d 6f 64 61 6c 5f 6c 69 73 74 20 7b 0d 0a 09 6d 61 78 2d 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 09 62 6f 72 64 65 Data Ascii: none;}.profile_topfriends .friendBlock {background: none;}.profile_topfriends .friendBlock:hover {background-color: #3a3a3a;}#group_invite_modal_list {max-height: 400px;overflow-y: auto;background-color: #000000;borde
2024-08-30 22:32:15 UTC	7463	IN	Data Raw: 20 20 20 20 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 70 72 6f 66 69 6c 65 5f 63 6f 75 6e 74 5f 6c 69 6e 6b 5f 70 72 65 76 69 65 77 20 3e 20 64 69 76 20 7b 0d 0a 09 09 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 70 72 6f 66 69 6c 65 5f 62 61 64 67 65 73 5f 62 61 64 67 65 2c 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 70 72 6f 66 69 6c 65 5f 62 61 64 67 65 73 5f 62 61 64 67 65 20 69 6d 67 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 Data Ascii: }html.responsive.tablet .profile_count_link_preview > div {float: none;display: inline-block;vertical-align: middle;}html.responsive.tablet .profile_badges_badge,html.responsive.tablet .profile_badges_badge img {width:

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:14 UTC	722	OUT	GET /public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:14 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:14 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:14 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:14 UTC	8683	IN	Data Raw: 32 31 64 65 0d 0a 0d 0a 23 73 74 69 63 6b 65 72 5f 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 73 74 69 63 6b 65 72 5f 73 63 65 6e 65 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 74 6f 70 20 6c 65 66 74 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 69 63 6b 65 72 5f 70 61 64 64 65 72 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 25 20 33 25 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 23 65 64 69 74 5f 62 6f 78 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 7d 0d 0a 0d 0a 23 65 64 Data Ascii: 21de#sticker_container, .sticker_scene_container {position: absolute;transform-origin: top left;overflow: hidden;}.sticker_padder {padding: 2% 3%;overflow: hidden;}#edit_box {display: none;position: absolute;}#ed

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 22:32:15 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39831 Date: Fri, 30 Aug 2024 22:32:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-30 22:32:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:15 UTC	721	OUT	GET /public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:16 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:15 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:15 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:16 UTC	15758	IN	Data Raw: 34 61 38 61 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 Data Ascii: 4a8a.responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive
2024-08-30 22:32:16 UTC	3337	IN	Data Raw: 64 74 68 3a 20 32 35 30 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 20 2f 2a 20 74 68 69 6e 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 74 61 62 5f 63 6f 6e 74 72 6f 6c 20 73 65 6c 65 63 74 20 6f 70 74 69 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 61 36 64 38 62 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 49 66 20 74 68 65 20 75 73 65 72 20 68 61 73 20 6f 70 74 65 64 20 74 6f 20 22 76 69 65 77 20 64 65 73 6b 74 6f 70 20 73 69 74 65 22 2c 20 77 65 20 61 64 64 20 61 20 62 75 74 74 6f 6e 20 74 6f 20 74 68 65 20 62 6f 74 74 6f 6d 20 6f 66 20 74 68 65 20 66 6f Data Ascii: dth: 250px;font-family: "Motiva Sans", Sans-serif;font-weight: 200; /* thin /}.responsive_tab_control select option {background: #3a6d8b;}/ If the user has opted to "view desktop site", we add a button to the bottom of the fo

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:16 UTC	710	OUT	GET /public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:16 UTC	626	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:16 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:16 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:16 UTC	12637	IN	Data Raw: 33 31 35 30 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 42 61 72 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 31 31 31 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 35 34 35 34 35 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 68 65 61 64 65 72 4c 69 6e 6b 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 61 63 74 69 76 65 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 76 69 73 69 Data Ascii: 3150.a:focus {outline: 0 none;}#headerBar {text-align:left;margin:0;padding:0;background-color:#111111;width:100%;color:#545454;font-size:10px;margin-bottom:0;}a.headerLink,a.headerLink:active,a.headerLink:visi

Timestamp	Bytes transferred	Direction	Data
2024-08-30 22:32:16 UTC	693	OUT	GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1 Host: xjp.steamproxy.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xjp.steamproxy.vip/profiles/76561199276106401 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=720ec227ea0966ae5d421aa2; steamCountry=SG%7C8c0d374a16d1f20394ec0b407f04f28b
2024-08-30 22:32:16 UTC	633	IN	HTTP/1.1 200 OK Server: openresty/1.19.3.2 Date: Fri, 30 Aug 2024 22:32:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Sun, 29 Sep 2024 22:32:16 GMT Agent: MTcyLjIzLjEwNy4xNzkK access-control-allow-origin: * x-proxy-agent: true strict-transport-security: max-age=15724800; includeSubDomains proxy: 1 Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
2024-08-30 22:32:16 UTC	15751	IN	Data Raw: 38 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a 0d 0a 20 2a Data Ascii: 8000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ * *
2024-08-30 22:32:16 UTC	16384	IN	Data Raw: 65 6e 67 74 68 20 3e 20 6c 65 6e 67 74 68 20 3f 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 73 6c 69 63 65 28 30 2c 20 6c 65 6e 67 74 68 20 2d 20 74 72 75 6e 63 61 74 69 6f 6e 2e 6c 65 6e 67 74 68 29 20 2b 20 74 72 75 6e 63 61 74 69 6f 6e 20 3a 20 53 74 72 69 6e 67 28 74 68 69 73 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 2f 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2b 24 2f 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 54 61 67 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 77 2b 28 5c 73 2b 28 22 5b 5e 22 5d Data Ascii: ength > length ? this.slice(0, length - truncation.length) + truncation : String(this); } function strip() { return this.replace(/^\s+/, '').replace(/\s+$/, ''); } function stripTags() { return this.replace(/<\w+(\s+("[^"]
2024-08-30 22:32:16 UTC	16384	IN	Data Raw: 20 20 20 20 20 73 69 7a 65 2c 0d 0a 20 20 20 20 69 6e 73 70 65 63 74 3a 20 20 20 69 6e 73 70 65 63 74 0d 0a 20 20 7d 29 3b 0d 0a 0d 0a 20 20 76 61 72 20 43 4f 4e 43 41 54 5f 41 52 47 55 4d 45 4e 54 53 5f 42 55 47 47 59 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 5b 5d 2e 63 6f 6e 63 61 74 28 61 72 67 75 6d 65 6e 74 73 29 5b 30 5d 5b 30 5d 20 21 3d 3d 20 31 3b 0d 0a 20 20 7d 29 28 31 2c 32 29 0d 0a 0d 0a 20 20 69 66 20 28 43 4f 4e 43 41 54 5f 41 52 47 55 4d 45 4e 54 53 5f 42 55 47 47 59 29 20 61 72 72 61 79 50 72 6f 74 6f 2e 63 6f 6e 63 61 74 20 3d 20 63 6f 6e 63 61 74 3b 0d 0a 0d 0a 20 20 69 66 20 28 21 61 72 72 61 79 50 72 6f 74 6f 2e 69 6e 64 65 78 4f 66 29 20 61 72 72 61 79 50 72 6f 74 6f 2e 69 6e 64 65 78 4f Data Ascii: size, inspect: inspect }); var CONCAT_ARGUMENTS_BUGGY = (function() { return [].concat(arguments)[0][0] !== 1; })(1,2) if (CONCAT_ARGUMENTS_BUGGY) arrayProto.concat = concat; if (!arrayProto.indexOf) arrayProto.indexO
2024-08-30 22:32:16 UTC	16384	IN	Data Raw: 65 63 61 79 20 3a 20 31 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 6c 61 73 74 54 65 78 74 20 3d 20 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 68 69 73 2e 74 69 6d 65 72 20 3d 20 74 68 69 73 2e 6f 6e 54 69 6d 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2e 64 65 6c 61 79 28 74 68 69 73 2e 64 65 63 61 79 20 2a 20 74 68 69 73 2e 66 72 65 71 75 65 6e 63 79 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 54 69 6d 65 72 45 76 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 75 70 64 61 74 65 72 20 3d 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 20 74 68 69 73 2e 75 72 6c 2c 20 74 68 69 73 2e Data Ascii: ecay : 1); this.lastText = response.responseText; } this.timer = this.onTimerEvent.bind(this).delay(this.decay * this.frequency); }, onTimerEvent: function() { this.updater = new Ajax.Updater(this.container, this.url, this.
2024-08-30 22:32:16 UTC	16384	IN	Data Raw: 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 65 6d 70 74 79 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 24 28 65 6c 65 6d 65 6e 74 29 2e 69 6e 6e 65 72 48 54 4d 4c 2e 62 6c 61 6e 6b 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 64 65 73 63 65 6e 64 61 6e 74 4f 66 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 61 6e 63 65 73 74 6f 72 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 2c 20 61 6e 63 65 73 74 6f 72 20 3d 20 24 28 61 6e 63 65 73 74 6f 72 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 Data Ascii: } return element; }, empty: function(element) { return $(element).innerHTML.blank(); }, descendantOf: function(element, ancestor) { element = $(element), ancestor = $(ancestor); if (element.compareDocumentPosition)
2024-08-30 22:32:16 UTC	16384	IN	Data Raw: 67 20 3d 20 7b 20 7d 3b 0d 0a 0d 0a 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 45 6c 65 6d 65 6e 74 2c 20 45 6c 65 6d 65 6e 74 2e 4d 65 74 68 6f 64 73 29 3b 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 69 76 29 20 7b 0d 0a 0d 0a 20 20 69 66 20 28 21 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 65 72 46 65 61 74 75 72 65 73 2e 45 6c 65 6d 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 20 26 26 20 64 69 76 5b 27 5f 5f 70 72 6f 74 6f 5f 5f 27 5d 29 20 7b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 3d 20 7b 20 7d 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 64 69 76 5b 27 5f 5f 70 72 6f 74 6f 5f 5f 27 5d 3b 0d 0a 20 20 20 20 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 Data Ascii: g = { };Object.extend(Element, Element.Methods);(function(div) { if (!Prototype.BrowserFeatures.ElementExtensions && div['__proto__']) { window.HTMLElement = { }; window.HTMLElement.prototype = div['__proto__']; Prototype.Brows
2024-08-30 22:32:17 UTC	16384	IN	Data Raw: 65 69 67 68 74 20 6d 61 72 67 69 6e 2d 62 6f 78 2d 77 69 64 74 68 20 6d 61 72 67 69 6e 2d 62 6f 78 2d 68 65 69 67 68 74 20 62 6f 72 64 65 72 2d 62 6f 78 2d 77 69 64 74 68 20 62 6f 72 64 65 72 2d 62 6f 78 2d 68 65 69 67 68 74 27 29 2c 0d 0a 0d 0a 20 20 20 20 43 4f 4d 50 55 54 41 54 49 4f 4e 53 3a 20 7b 0d 0a 20 20 20 20 20 20 27 68 65 69 67 68 74 27 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 5f 70 72 65 43 6f 6d 70 75 74 69 6e 67 29 20 74 68 69 73 2e 5f 62 65 67 69 6e 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 48 65 69 67 68 74 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 62 6f 78 2d 68 65 69 67 68 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: eight margin-box-width margin-box-height border-box-width border-box-height'), COMPUTATIONS: { 'height': function(element) { if (!this._preComputing) this._begin(); var bHeight = this.get('border-box-height'); if
2024-08-30 22:32:17 UTC	16384	IN	Data Raw: 61 72 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 32 20 26 26 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 70 61 72 74 73 5b 30 5d 20 5d 20 29 20 7b 0d 0a 09 09 09 73 65 74 20 3d 20 70 6f 73 50 72 6f 63 65 73 73 28 20 70 61 72 74 73 5b 30 5d 20 2b 20 70 61 72 74 73 5b 31 5d 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 73 65 74 20 3d 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 70 61 72 74 73 5b 30 5d 20 5d 20 3f 0d 0a 09 09 09 09 5b 20 63 6f 6e 74 65 78 74 20 5d 20 3a 0d 0a 09 09 09 09 53 69 7a 7a 6c 65 28 20 70 61 72 74 73 2e 73 68 69 66 74 28 29 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0d 0a 0d 0a 09 09 09 77 68 69 6c 65 20 28 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0d 0a 09 09 09 09 73 65 6c 65 63 74 Data Ascii: arts.length === 2 && Expr.relative[ parts[0] ] ) {set = posProcess( parts[0] + parts[1], context );} else {set = Expr.relative[ parts[0] ] ?[ context ] :Sizzle( parts.shift(), context );while ( parts.length ) {select
2024-08-30 22:32:17 UTC	16384	IN	Data Raw: 09 09 09 09 7d 0d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 61 72 72 61 79 5b 69 5d 3b 20 69 2b 2b 20 29 20 7b 0d 0a 09 09 09 09 09 72 65 74 2e 70 75 73 68 28 20 61 72 72 61 79 5b 69 5d 20 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0d 0a 09 7d 3b 0d 0a 7d 0d 0a 0d 0a 76 61 72 20 73 6f 72 74 4f 72 64 65 72 3b 0d 0a 0d 0a 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 29 20 7b 0d 0a 09 73 6f 72 74 4f 72 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 2c 20 62 20 29 20 7b 0d 0a 09 09 69 66 20 28 20 21 61 2e 63 6f Data Ascii: }} else {for ( var i = 0; array[i]; i++ ) {ret.push( array[i] );}}}return ret;};}var sortOrder;if ( document.documentElement.compareDocumentPosition ) {sortOrder = function( a, b ) {if ( !a.co
2024-08-30 22:32:17 UTC	16384	IN	Data Raw: 6e 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 46 6f 72 6d 2e 73 65 72 69 61 6c 69 7a 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 7d 0d 0a 7d 29 3b 0d 0a 0d 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 0d 0a 41 62 73 74 72 61 63 74 2e 45 76 65 6e 74 4f 62 73 65 72 76 65 72 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 63 61 6c 6c 62 61 63 6b 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 20 3d 20 24 28 65 6c 65 6d Data Ascii: n() { return Form.serialize(this.element); }});/--------------------------------------------------------------------------/Abstract.EventObserver = Class.create({ initialize: function(element, callback) { this.element = $(elem