Edit tour

Windows Analysis Report
http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html

Overview

General Information

Sample URL:	http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html
Analysis ID:	1521600
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,712393352102078358,9699152736461754406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
4.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
4.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727564414616&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQGVFQBPES37693X8D8GContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQHFC74WW4N0E8QPWS7BContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQY7AG2P79ZBV0P0A7FCContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQY7MWFZAGPZ2VKCG8WDContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQY6PG0NH17FN270F0NEContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:39 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTQYKE7RGA3BFB6TF6DPAContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:42 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTTRDQAG9J6W3K3718YADContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:00:43 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XDTVW7K52YY7HSGDABK8RBContent-Length: 50Connection: close

Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_87.1.dr, chromecache_73.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_76.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_76.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_76.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_76.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_76.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_76.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_86.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_76.1.dr	String found in binary or memory: https://managehomevsory.publicvm.com/fuc.php
Source: chromecache_76.1.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_80.1.dr, chromecache_82.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49732 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/42@16/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,712393352102078358,9699152736461754406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,712393352102078358,9699152736461754406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.194.137	true	false	unknown
pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	172.66.0.235	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
bestfilltype.netlify.app	3.70.101.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	false		unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	true		unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://managehomevsory.publicvm.com/fuc.php	chromecache_76.1.dr	false		unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_87.1.dr, chromecache_73.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_76.1.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_76.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_80.1.dr, chromecache_82.1.dr	false		unknown
https://sizzlejs.com/	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_80.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.130.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.70.101.28	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
172.66.0.235	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521600
Start date and time:	2024-09-29 00:59:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/42@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.184.206, 173.194.76.84, 34.104.35.123, 142.250.185.106, 142.250.186.106, 142.250.186.67, 216.58.206.42, 216.58.212.170, 216.58.206.74, 142.250.181.234, 142.250.185.234, 142.250.185.170, 142.250.186.170, 142.250.186.42, 142.250.185.202, 142.250.186.74, 172.217.16.202, 142.250.74.202, 142.250.184.234, 172.217.18.10, 142.250.184.202, 4.245.163.56, 93.184.221.240, 192.229.221.95, 20.3.187.198, 20.242.39.171, 142.250.185.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html

Input	Output
URL: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Type your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"You can paste your entire secret recovery phrase into any field", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:00:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.98627499047221
Encrypted:	false
SSDEEP:	48:8IMdgTE8KHVidAKZdA19ehwiZUklqeh3y+3:80vkYy
MD5:	743A86F1FDF6B456CCFCA863557AA4EF
SHA1:	3901C9043E0068F826F4DDC9D2C877DC1292E682
SHA-256:	62D1677D12612D771B9D7B9F880C3EC10C7B838C51BC1ABA7756F031AA734EDF
SHA-512:	C2C8E395016ACBC6EF951DD22E0755184CE22611F986AD007E6844F33085209255A0A4C8D784ADBC2E47AFE55C594659000E2274BA478355F4754F3AB02D0EF9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:00:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002219221530011
Encrypted:	false
SSDEEP:	48:87MdgTE8KHVidAKZdA1weh/iZUkAQkqehIy+2:8HvW9Qly
MD5:	C6EB55C30342C9B7F696E1E4EF79F882
SHA1:	D23DDD0C33B1A9DFF252D9B08836D83D5F1CB5E0
SHA-256:	04F0C08ACCC3EB345A8324D723262B888E8220167B86CBBAD649324BF6908FAB
SHA-512:	6980BBC9606A42B2161A764D34800746FCA9129FEF07CE019F86948DB70B89BCE9F69E2C0E9DFF5A02CE63276CFBDEB24F4E2DF156B4F7A82A1B278A36A91BED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v.9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.013806764507691
Encrypted:	false
SSDEEP:	48:8xkMdgTE8sHVidAKZdA14tseh7sFiZUkmgqeh7sWy+BX:8xYvMnEy
MD5:	8E851746ADD2DD7459B1A1F77E0F6FD0
SHA1:	C8A3C93078527365B6E2F4E8FDA5D4672F90F756
SHA-256:	47D6DA6B515E4A8DD05A3D7512F7A1EE9F4DF263EBFFF60001A1E069DBF6FC80
SHA-512:	E354711291E2F43FD64A9B22CB40897ED227D8B370CB8DEFF5C738D8648E5DDC67179794623B9E8F1A2D59737346944F5DE2E008D7A22BF71B6496BA6F1A9BA5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:00:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.00267173489339
Encrypted:	false
SSDEEP:	48:84MdgTE8KHVidAKZdA1vehDiZUkwqeh8y+R:8Ev9uy
MD5:	4BC87B622D33979993D349E76FA57729
SHA1:	51F5F40E1243C52170B7B12079612C1EE8198418
SHA-256:	DBC711FF559F993254D0868C289AD494C68235EEEC68AB650DBDDBCDF730F28D
SHA-512:	14A1F737D8AAF0E22B26A7661BED4FCD7A53B04019298B95EA339F716378A24D35BC0FD8CD14B9F2581C35B8F4675AD858CE4E56314217F1E771C73CAC9E7175
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:00:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9907772306299476
Encrypted:	false
SSDEEP:	48:8IMdgTE8KHVidAKZdA1hehBiZUk1W1qehCy+C:80vd9iy
MD5:	C5D950E65203C572DA60974107319389
SHA1:	C796D7F711CB00991D371923434117A9EA2A9B05
SHA-256:	437797AE55401DC8A2156A9C1A6F24845629D5D8DA9A8FE388241CA851A01FF5
SHA-512:	84E604862408F5ED551A17C541477B37C263994312E4474780864D86AE9B25EA7B99F89ACC0D9F6FFF70FB5412F7C4D5B626574ED90328A20C551D090D68B707
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:00:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9987100356384198
Encrypted:	false
SSDEEP:	48:8fxMdgTE8KHVidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbEy+yT+:8ZvhT/TbxWOvTbEy7T
MD5:	5FC4721A71860C218CEB2B28BAD12B10
SHA1:	E63FB5F2BFF6116BCE096E348871C90BE03ABB15
SHA-256:	35A89C74EEE555F74AEE97E543C2CEA6EC280FC6FE26BD989D6197B4B5AD773A
SHA-512:	BF21F8B1640FAE3D75B7E246B075FF95745F4A986EEB14EC0942D76769ADD33C2DDF835AE7B7829B667367D797A4D7A035CB8CB0714B86A8981CAE2145BBA87F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....E.9....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q@B.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9zYQX8Xh7:ObPH/BsN
MD5:	30B0EAA1677B48059741657F6CDC4EC6
SHA1:	A6447AC4C6BF53795757FC79E736DDB40D1329D7
SHA-256:	8D3164034A27F64CD79AD84F8F910AE2E13633BCCB7F91AD400DA11AB9887F79
SHA-512:	F2C1081594242195987CC2966329F10CD30CB92EE71474C9AA3901604A2A3279538A82AF73A8571F72F132611A8FC3BC98F48C6991BB9273F44D50752518403F
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XDTVW7K52YY7HSGDABK8RB

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.716565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d908C1kW:ObPH/0z1r
MD5:	2671C1C30B2C95305AEE99420614E076
SHA1:	9E936624D1B6A86B8B15C3EDC6CED09AE3AF44CB
SHA-256:	4ABDCFCF79975BE37AD2DA4D13E22D82F0A2A89ECBEBECB60D48C44EF9D6E03F
SHA-512:	2BE10E11029DDACFE1788A85798C74FAB7923ECD653B578474B20E86763560C11DF00BF1E87648854AF53CD4076F7AE11CE1C9841C893B371EDB2DA21CF70DDF
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XDTQY6PG0NH17FN270F0NE

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	62731
Entropy (8bit):	4.704176030406668
Encrypted:	false
SSDEEP:	384:i3kpGjqAdimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBW:i3ksjqA5kikTYXa1oGBR26t
MD5:	1E9F3CC6D54D9D1AF9BFB26390F1715A
SHA1:	75D6D4003AD8CC0AA327833FC57ABA36CF8956C5
SHA-256:	194288D2A1D159BF0755ABEDDAD5681D0F58E1D1667E9C57D1A17ED862F9C0E9
SHA-512:	E4561ABDF28EE5743A3A05E61C6D195E875BDF52058B86B97A613856D5D8EDB04959497ECA12F6C6BD0A3960B01C6F3B9F82BC997C72D89F58FDE9F7EE192EC6
Malicious:	false
Reputation:	low
URL:	https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.956565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d908Wv1bDhn:ObPH/0Lvx9n
MD5:	C64D21F256D7C73F7AD3E2B347BEE9FC
SHA1:	4DFAE772E153AB91DC6AA253465D8270D9968B67
SHA-256:	EDA6ACA6600C52694FB8BFB376123E7C28EDA1F0124A88ED8B005C38AA04202A
SHA-512:	EE59D21984BEAE8EBDE177650BA9397DDD34CC25011FE1DF6DABA4D14CAD22EE0EF729C390C996486FF3C03EED257F5E04C6FC10377BC05634B36CDF5071C5B9
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XDTQY7MWFZAGPZ2VKCG8WD

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d90tJNKdzt:ObPH/0tJmt
MD5:	96B83724D65515A0FE10C934EF0C99A6
SHA1:	975BD6B9D36F7E2C462F42186D69B5D00507183F
SHA-256:	81C83A13C1ABF2F306B8529C4DF76EA3309249569FA9F588028F7796CB45E37E
SHA-512:	0A8E92B705F34944EEF7DF776286A85C24A7C6EDA33E8D588B757AE55CB504892B8E2638FE47957418C6C35E6082D5498A7CC2D87C0D47BD4786E96A65C19978
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XDTQHFC74WW4N0E8QPWS7B

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.811663380285987
Encrypted:	false
SSDEEP:	3:ObynQA2d9x3hd/BFh:ObPH/ZBb
MD5:	F4017E80C6D1EAF46B89BBA9C87C887C
SHA1:	24012B95E7BA3B8A5CA149E0B5402A4DA63BB530
SHA-256:	DB6B059A7943EAC2DF5D50B19991B955D8E76FF72907D8AADA2FA2CB31DB30F1
SHA-512:	28484107CFEE1EECAE77701DA6AE0D41FF33E49435DDBBC9745F1B42A382478F22ACD8A77ECCB124D37A845952BF5AAD7C69B55B217C0A0A293896E6B260F7AE
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XDTTRDQAG9J6W3K3718YAD

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d908/nlY:ObPH/0ei
MD5:	DD80B26B6A6D3304BC51CB42E013634A
SHA1:	0E223682CF376C310B4F345BBE517EFCA2D79124
SHA-256:	2BF04783ADF35B5F7EAEF2BAA5A39E16118085942CD23D2E3891B2377B385CB5
SHA-512:	CE347647C8163FC8639BA68353C6069F1C526EDB3C7535566977FF5658D41F3DFD9F6F951684AF9288D44D271D63A55E3FB417C034B422D8D997B9FEB298117B
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XDTQYKE7RGA3BFB6TF6DPA

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQnMyQoJwIibyhIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCYf6fS4a6JhxEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCf17GIgqZzBqEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCWiNyo1OwHEnEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCf4HsUkwHI76EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:00:24.896725893 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:24.896729946 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:25.021703959 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:34.508840084 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:34.586965084 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:34.633841991 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:34.890937090 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:34.891251087 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:34.895850897 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:34.895942926 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:34.896150112 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:34.896151066 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:34.896301031 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:34.901041031 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.367589951 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.401071072 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.401113033 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.401194096 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.401530981 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.401545048 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.416064978 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.952164888 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.952745914 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.952770948 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.953840017 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.953900099 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.956549883 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.956654072 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:35.956974983 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:35.956983089 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.007986069 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.405086040 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405169010 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405204058 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405220032 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.405236006 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405250072 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405286074 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.405307055 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405337095 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405352116 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.405364990 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405395985 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405405998 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.405414104 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.405457973 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.410114050 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410207033 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410240889 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410255909 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.410264969 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410306931 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.410312891 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410651922 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410689116 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410708904 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.410715103 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.410757065 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.410763025 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.411494017 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.411540985 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.411547899 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.411561012 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.411608934 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.411614895 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415102959 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415142059 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415163040 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.415169954 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415215015 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.415221930 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415560961 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415599108 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415611982 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.415620089 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.415677071 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.415934086 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416254997 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416290045 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.416296005 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416546106 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416587114 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.416593075 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416904926 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.416944981 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.416951895 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.417283058 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.417326927 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.417332888 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.419926882 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.419975042 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.419981956 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420101881 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420152903 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.420159101 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420197964 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.420536041 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420586109 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:36.420591116 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420617104 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:36.420655012 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:37.011630058 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:37.011640072 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:37.016623974 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.016681910 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.016803026 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.017334938 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.017385006 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.017460108 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.018388987 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:37.018404007 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:37.018616915 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:37.021188021 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.021218061 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.021699905 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.021716118 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.022222042 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:37.022238970 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:37.288877964 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:37.288918018 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:37.288985968 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:37.289882898 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:37.289894104 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:37.477830887 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.478209972 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.478240013 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.479538918 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.479607105 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.480513096 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:37.480914116 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:37.480921984 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:37.482034922 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:37.482105017 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:37.487170935 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.488226891 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.488259077 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.489270926 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:37.489346981 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:37.806726933 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:37.806776047 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:37.806854963 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:37.809668064 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:37.809684992 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:37.938947916 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:37.939214945 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:37.939241886 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:37.940397024 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:37.940466881 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:38.072057962 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.072175980 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.072252035 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.072345018 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.072360039 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.072361946 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.074606895 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.074806929 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.074845076 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.075716019 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:38.075830936 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:38.094645023 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:38.094754934 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:38.115427017 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.119409084 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.119434118 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.121100903 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.121114969 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.121114969 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:38.121129990 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.121139050 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.121143103 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:38.121150017 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.121155977 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.166551113 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.166551113 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.166580915 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.166619062 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.166619062 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:38.168581009 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169127941 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169194937 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.169198036 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169214964 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169258118 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.169275999 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169341087 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169373035 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169414043 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.169423103 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.169472933 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.170052052 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.170145988 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.170255899 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.170260906 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.173823118 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.173907995 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.173913002 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.178174019 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178241968 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178271055 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178303003 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178328991 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178329945 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.178354025 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178371906 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.178396940 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.178575993 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178626060 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178647041 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178689003 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.178699017 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.178740978 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.179366112 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.181746960 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181761026 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181781054 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181787968 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181793928 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181839943 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.181857109 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181870937 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.181875944 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.181900978 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.182811975 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.182857037 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.182867050 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.204969883 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.205020905 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.205102921 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.205439091 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.205456018 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.205550909 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.206187963 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.206207037 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.206515074 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.206526995 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.214603901 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.226788044 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.226788044 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.253825903 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253842115 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253879070 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253894091 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253911972 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253916025 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.253918886 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.253974915 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.255723000 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.255747080 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.255831003 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.255850077 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.255932093 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.257639885 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257709026 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257742882 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257781982 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257797003 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.257819891 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257834911 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.257894993 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257924080 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.257977009 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.257982969 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258279085 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.258471966 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258555889 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258586884 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258605003 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.258610010 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258626938 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258668900 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.258673906 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.258730888 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.259371042 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259440899 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259470940 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259500980 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259512901 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.259519100 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259533882 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.259551048 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.259602070 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.259605885 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.260245085 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.260303974 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.260308981 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.264760017 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.264833927 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.264904022 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.264925957 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.264944077 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.264996052 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.268296003 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.268322945 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.307275057 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.307293892 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.335491896 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.335532904 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.335642099 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.336028099 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.336040974 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.340358019 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.340384960 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.340451956 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.340488911 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.340514898 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.340529919 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.341576099 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.341595888 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.341633081 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.341664076 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.341671944 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.341711998 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.341731071 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.341747999 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.343452930 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.343466997 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346412897 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346471071 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346472979 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.346501112 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346532106 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346544027 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.346549988 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346570969 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346599102 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346607924 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.346612930 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346651077 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.346656084 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.346709013 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.346962929 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347021103 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347071886 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.347079992 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347831964 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347840071 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347850084 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347879887 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347894907 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.347903967 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.347927094 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.347945929 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.349327087 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.349344015 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.349402905 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.349412918 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.380624056 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.380667925 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.380740881 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.381357908 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.381371975 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.387072086 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.387099981 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.387167931 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.387180090 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.387207985 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.429595947 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.435564041 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.435575008 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.435614109 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.435626984 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.435631990 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.435646057 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.435677052 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.435691118 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.436146975 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436162949 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436233044 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.436240911 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.436244965 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436281919 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.436733961 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436749935 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436815977 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.436820984 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.436943054 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.437627077 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.437643051 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.437685013 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.437690020 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.437721968 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.437736988 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.439620972 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.439637899 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.439694881 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.439702034 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.440021038 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.479959965 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.480073929 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:38.490777969 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:38.490792990 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.491054058 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.523268938 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523293972 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523392916 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.523416042 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523456097 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.523616076 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523632050 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523679018 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.523684978 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523714066 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.523731947 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.523968935 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.523983955 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.524032116 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.524036884 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.524099112 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.524112940 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.524214029 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.524230003 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.524316072 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.524321079 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.524362087 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.525068998 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.525110960 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.525146008 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.525152922 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.525192022 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.525192022 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.525346041 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.534282923 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.539355040 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:38.546940088 CEST	49716	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:00:38.546963930 CEST	443	49716	151.101.194.137	192.168.2.5
Sep 29, 2024 01:00:38.569318056 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.569348097 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.569451094 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.569889069 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.569900990 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.578757048 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.578804970 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.578881025 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.579160929 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.579174995 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.579682112 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.579720020 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.579787016 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.579972029 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.580017090 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.580157995 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.580226898 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.580250025 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.580389023 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.580406904 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.780642033 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:38.797100067 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.797151089 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.797221899 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.797586918 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.797600985 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.806569099 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.807137966 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.807154894 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.808242083 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.808402061 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.810656071 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.810756922 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.810863018 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.823396921 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.840940952 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.841310024 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.841339111 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.842391968 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.842480898 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.842911005 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.843174934 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.843245983 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.843503952 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.843530893 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.843831062 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.843841076 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.844613075 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.844825029 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.851042032 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.851196051 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.851404905 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.851530075 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.851543903 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.853143930 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.853157997 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.866132021 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.866520882 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.866547108 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.867554903 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.867634058 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.868237019 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.868314981 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.871515989 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.871534109 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:38.883482933 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.898741961 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.898744106 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.914220095 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:38.940990925 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941109896 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941140890 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941167116 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941184044 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.941199064 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941229105 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.941247940 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.941607952 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.941736937 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.942136049 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.942177057 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.942188978 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.942198038 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.942245960 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.946033001 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.946094036 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.946163893 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.946178913 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:38.951499939 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951548100 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951577902 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951606989 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951615095 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.951636076 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951663971 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.951679945 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951710939 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951739073 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951750994 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.951756954 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.951775074 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.952008963 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.952836037 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.952841997 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.956727028 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.958050013 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:38.958081961 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:38.971101046 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.971178055 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:38.971360922 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:38.988744974 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:38.997970104 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:39.029602051 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.029668093 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.029695988 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.029709101 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.029721022 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.029759884 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.030055046 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030108929 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030152082 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.030158997 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030484915 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030519009 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030544996 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030556917 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.030564070 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.030586004 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.031110048 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.031150103 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.031160116 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.031168938 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.031306028 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.031311989 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.041779041 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:39.041831970 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:39.041879892 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:39.041898012 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:39.041948080 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:39.042021036 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:39.082035065 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.118196011 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118210077 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118231058 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118243933 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118248940 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.118249893 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118263006 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118314028 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.118329048 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.118360996 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.119271994 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.119287968 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.119334936 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.119343996 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.119426966 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.120162010 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.120178938 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.120209932 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.120239973 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.120248079 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.120281935 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.120284081 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.120326042 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.159512043 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.159595013 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.159687996 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.186285019 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.186377048 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.186460972 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.204392910 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.212114096 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.223861933 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.233948946 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.249924898 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.253078938 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.263323069 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.267533064 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.286885023 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.301183939 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.376900911 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.376934052 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.377098083 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.377123117 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.378443956 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.378459930 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.378523111 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.378640890 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.378700018 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.397438049 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.397469997 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.397685051 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.397701025 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.397888899 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.397914886 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.398282051 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.398749113 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.398816109 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.398997068 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.399060011 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.399328947 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.399504900 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.399524927 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.400213003 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.400291920 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.400693893 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.400773048 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.400804043 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.400861979 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.401144028 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.401177883 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.401696920 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.401827097 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.402023077 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.402038097 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.402189970 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.402215004 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.402318954 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.402331114 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.402508974 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.402523994 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.441538095 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:39.441576004 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:39.444957018 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.444958925 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.444963932 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.445218086 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.445220947 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.464654922 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.465344906 CEST	49721	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.465378046 CEST	443	49721	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.468863010 CEST	49722	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.468880892 CEST	443	49722	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.497062922 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.508407116 CEST	49724	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:00:39.508444071 CEST	443	49724	104.17.25.14	192.168.2.5
Sep 29, 2024 01:00:39.510695934 CEST	49725	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.510731936 CEST	443	49725	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512697935 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512707949 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512723923 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512731075 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512737989 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512772083 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.512809992 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512830019 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.512836933 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.512852907 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.555408001 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.585565090 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.585639000 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.585747004 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.585793972 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.585800886 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.585838079 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.585855961 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.585874081 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.585887909 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.585922956 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.586205006 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.586272001 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.586328030 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.586703062 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.586765051 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.587712049 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.587769985 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.587778091 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.587811947 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.587837934 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.587852955 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.587861061 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.587872982 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.587893009 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.591289043 CEST	49728	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.591312885 CEST	443	49728	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.592061996 CEST	49726	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.592092991 CEST	443	49726	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.592616081 CEST	49729	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.592638969 CEST	443	49729	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.598711014 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.598797083 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.599170923 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.618535995 CEST	49727	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:39.618587971 CEST	443	49727	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:39.631393909 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:39.631448030 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:39.631508112 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:39.632097006 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:39.632112980 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:39.671380997 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.671412945 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.671474934 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.671495914 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.671546936 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.673255920 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.673271894 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.673326015 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.673333883 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.673371077 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.674406052 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.674422026 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.674479961 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.674487114 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.674540043 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.676194906 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.676213026 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.676285982 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.676301956 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.676347971 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.757973909 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.757999897 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.758052111 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.758089066 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.758126974 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.758161068 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.759145021 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.759160995 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.759218931 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.759229898 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.759355068 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.760123968 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.760139942 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.760193110 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.760204077 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.760253906 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.761090040 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.761112928 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.761162996 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.761173964 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.761491060 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.762053967 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.762068987 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.762124062 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.762132883 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.762181997 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.763034105 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.763050079 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.763107061 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.763113022 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.763201952 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844197035 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844221115 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844263077 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844295025 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844311953 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844361067 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844434977 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844451904 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844510078 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844517946 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844551086 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844894886 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844917059 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844948053 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844953060 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844964981 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.844984055 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.844990015 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.845011950 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.845017910 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.845040083 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.845073938 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:39.845122099 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.845238924 CEST	49730	443	192.168.2.5	151.101.130.137
Sep 29, 2024 01:00:39.845253944 CEST	443	49730	151.101.130.137	192.168.2.5
Sep 29, 2024 01:00:40.266149044 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.266241074 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.344789982 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.344821930 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.345290899 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.355407953 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.399415016 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.542381048 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.542476892 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.542555094 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.615144014 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.615163088 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:40.615175009 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:00:40.615180016 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 01:00:41.016730070 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:41.016752005 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:41.017000914 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:41.017374992 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:41.017384052 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.110115051 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.111723900 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.111753941 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.112194061 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.112588882 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.112683058 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.112833023 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.159421921 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.472507954 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.472595930 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.472641945 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.591600895 CEST	49738	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.591639042 CEST	443	49738	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.629117012 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.629163027 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:42.629214048 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.629587889 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:42.629599094 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.296567917 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.296911001 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.296917915 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.297278881 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.297863960 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.298058033 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.298064947 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.298235893 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.341757059 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.623228073 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.623316050 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:43.623364925 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.641006947 CEST	49740	443	192.168.2.5	3.70.101.28
Sep 29, 2024 01:00:43.641032934 CEST	443	49740	3.70.101.28	192.168.2.5
Sep 29, 2024 01:00:45.556677103 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:45.556744099 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:45.557029963 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:45.557070017 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:45.557142019 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:45.557415962 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:45.557427883 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:45.561517000 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:45.561767101 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.159955025 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.160218954 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:46.231698036 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:46.231739044 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.232120991 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.234127998 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:46.234888077 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:46.234931946 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.235183954 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:46.235202074 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.514945984 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.515938044 CEST	443	49745	23.1.237.91	192.168.2.5
Sep 29, 2024 01:00:46.516314983 CEST	49745	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:00:47.833524942 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:47.833596945 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:47.833652973 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:49.498025894 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:00:49.498106003 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 29, 2024 01:00:50.272176027 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 01:00:50.272237062 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:51.497595072 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:00:51.502384901 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 01:01:20.368180990 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 01:01:20.373148918 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 01:01:37.338233948 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:37.338347912 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:37.338448048 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:37.338737965 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:37.338777065 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:38.012331963 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:38.012641907 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:38.012671947 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:38.013008118 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:38.013509035 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:38.013576984 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:38.055389881 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:47.897603035 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:47.897674084 CEST	443	49749	172.217.16.132	192.168.2.5
Sep 29, 2024 01:01:47.898557901 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:49.497287989 CEST	49749	443	192.168.2.5	172.217.16.132
Sep 29, 2024 01:01:49.497373104 CEST	443	49749	172.217.16.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:00:32.908262014 CEST	53	57627	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:33.210122108 CEST	53	60196	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:34.427465916 CEST	53	61088	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:34.871589899 CEST	63460	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:34.873163939 CEST	58311	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:34.880006075 CEST	53	63460	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:34.882631063 CEST	53	58311	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:35.378592968 CEST	57855	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:35.378748894 CEST	64015	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:35.387887955 CEST	53	57855	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:35.447390079 CEST	53	64015	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.004693985 CEST	59304	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.005465031 CEST	61930	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.006236076 CEST	53035	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.006757975 CEST	59726	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.010689020 CEST	53	62253	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.011550903 CEST	53	59304	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.012134075 CEST	53	61930	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.012764931 CEST	53	53035	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.013243914 CEST	53	59726	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.014445066 CEST	53	59392	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.279722929 CEST	62637	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.280147076 CEST	50077	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:37.286228895 CEST	53	62637	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:37.286537886 CEST	53	50077	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.195213079 CEST	57505	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.195807934 CEST	63833	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.204003096 CEST	53	63833	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.204338074 CEST	53	57505	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.327564955 CEST	64101	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.328006029 CEST	52465	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.334377050 CEST	53	64101	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.334578037 CEST	53	52465	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.372608900 CEST	51197	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.372931957 CEST	63496	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:00:38.379563093 CEST	53	63496	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.379621983 CEST	53	51197	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:38.799150944 CEST	53	51053	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:41.025715113 CEST	53	50046	1.1.1.1	192.168.2.5
Sep 29, 2024 01:00:51.691061974 CEST	53	62287	1.1.1.1	192.168.2.5
Sep 29, 2024 01:01:10.706799984 CEST	53	62116	1.1.1.1	192.168.2.5
Sep 29, 2024 01:01:32.700453997 CEST	53	54968	1.1.1.1	192.168.2.5
Sep 29, 2024 01:01:33.462912083 CEST	53	64979	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 01:00:35.447484970 CEST	192.168.2.5	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 01:00:34.871589899 CEST	192.168.2.5	1.1.1.1	0x6fc9	Standard query (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:34.873163939 CEST	192.168.2.5	1.1.1.1	0xa005	Standard query (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:00:35.378592968 CEST	192.168.2.5	1.1.1.1	0xc739	Standard query (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:35.378748894 CEST	192.168.2.5	1.1.1.1	0x4a23	Standard query (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:00:37.004693985 CEST	192.168.2.5	1.1.1.1	0xec1a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.005465031 CEST	192.168.2.5	1.1.1.1	0xfef6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:00:37.006236076 CEST	192.168.2.5	1.1.1.1	0x771	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.006757975 CEST	192.168.2.5	1.1.1.1	0xea76	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:00:37.279722929 CEST	192.168.2.5	1.1.1.1	0x3560	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.280147076 CEST	192.168.2.5	1.1.1.1	0x2f12	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 01:00:38.195213079 CEST	192.168.2.5	1.1.1.1	0x9b3b	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.195807934 CEST	192.168.2.5	1.1.1.1	0x8282	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 01:00:38.327564955 CEST	192.168.2.5	1.1.1.1	0xd4b3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.328006029 CEST	192.168.2.5	1.1.1.1	0xf723	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:00:38.372608900 CEST	192.168.2.5	1.1.1.1	0x71f6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.372931957 CEST	192.168.2.5	1.1.1.1	0x674a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 01:00:34.880006075 CEST	1.1.1.1	192.168.2.5	0x6fc9	No error (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:34.880006075 CEST	1.1.1.1	192.168.2.5	0x6fc9	No error (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:35.387887955 CEST	1.1.1.1	192.168.2.5	0xc739	No error (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:35.387887955 CEST	1.1.1.1	192.168.2.5	0xc739	No error (0)	pub-3019d8288f8446f9972a55bb08a4c968.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.011550903 CEST	1.1.1.1	192.168.2.5	0xec1a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.011550903 CEST	1.1.1.1	192.168.2.5	0xec1a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.011550903 CEST	1.1.1.1	192.168.2.5	0xec1a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.011550903 CEST	1.1.1.1	192.168.2.5	0xec1a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.012764931 CEST	1.1.1.1	192.168.2.5	0x771	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.012764931 CEST	1.1.1.1	192.168.2.5	0x771	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.013243914 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:00:37.286228895 CEST	1.1.1.1	192.168.2.5	0x3560	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:37.286537886 CEST	1.1.1.1	192.168.2.5	0x2f12	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 01:00:38.204338074 CEST	1.1.1.1	192.168.2.5	0x9b3b	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.204338074 CEST	1.1.1.1	192.168.2.5	0x9b3b	No error (0)	bestfilltype.netlify.app		18.192.94.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.334377050 CEST	1.1.1.1	192.168.2.5	0xd4b3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.334377050 CEST	1.1.1.1	192.168.2.5	0xd4b3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.334578037 CEST	1.1.1.1	192.168.2.5	0xf723	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:00:38.379621983 CEST	1.1.1.1	192.168.2.5	0x71f6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.379621983 CEST	1.1.1.1	192.168.2.5	0x71f6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.379621983 CEST	1.1.1.1	192.168.2.5	0x71f6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:38.379621983 CEST	1.1.1.1	192.168.2.5	0x71f6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:45.309334993 CEST	1.1.1.1	192.168.2.5	0x4a12	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:00:45.309334993 CEST	1.1.1.1	192.168.2.5	0x4a12	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:00:58.672804117 CEST	1.1.1.1	192.168.2.5	0xee5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:00:58.672804117 CEST	1.1.1.1	192.168.2.5	0xee5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:01:25.822614908 CEST	1.1.1.1	192.168.2.5	0xcd06	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:01:25.822614908 CEST	1.1.1.1	192.168.2.5	0xcd06	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:01:46.090801001 CEST	1.1.1.1	192.168.2.5	0xe14e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:01:46.090801001 CEST	1.1.1.1	192.168.2.5	0xe14e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-3019d8288f8446f9972a55bb08a4c968.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

www.bing.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	172.66.0.235	80	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 01:00:34.896151066 CEST	470	OUT	GET /lkjasdf.html HTTP/1.1 Host: pub-3019d8288f8446f9972a55bb08a4c968.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 01:00:35.367589951 CEST	526	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 28 Sep 2024 23:00:35 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 00:00:35 GMT Location: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca759b899a20fa9-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 01:01:20.368180990 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	172.66.0.235	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:35 UTC	698	OUT	GET /lkjasdf.html HTTP/1.1 Host: pub-3019d8288f8446f9972a55bb08a4c968.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:36 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:00:36 GMT Content-Type: text/html Content-Length: 62731 Connection: close Accept-Ranges: bytes ETag: "1e9f3cc6d54d9d1af9bfb26390f1715a" Last-Modified: Wed, 10 Apr 2024 11:10:36 GMT Server: cloudflare CF-RAY: 8ca759bd1e8a439f-EWR
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 70 72 65 6c 6f 61 64 65 72 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 Data Ascii: ransform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{ transform: translateX(-50px); }}.preloader{ position: fixed; width: 100%;
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 0d 0a 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 Data Ascii: width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; } .form-box-main{ display: block; text-align: center; }} </style></head><body>
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 74 22 3e 45 73 74 6f 6e 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 61 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 22 3e 53 75 6f 6d 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 6c 22 3e 46 69 6c Data Ascii: ption value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value="et">Estonian</option><option value="fa"></option><option value="fi">Suomi</option><option value="fil">Fil
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 76 22 3e 53 76 65 6e 73 6b 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 77 22 3e 53 77 61 68 69 6c 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 74 61 22 3e e0 ae a4 e0 ae ae e0 ae bf e0 ae b4 e0 af 8d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 Data Ascii: option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option value="sv">Svenska</option><option value="sw">Swahili</option><option value="ta"></option><option value="
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 2d 62 6f 78 20 62 6f 78 2d 73 65 6c 65 63 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 69 64 3d 22 77 6f 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 22 Data Ascii: /div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4> <div class="select-box box-selec"> <select id="word"> <option value="12"
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 32 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 Data Ascii: type.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div> <div class="input-form"> <label for="">2. </label> <input type="password" class="word-12">
2024-09-28 23:00:36 UTC	1369	IN	Data Raw: 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 36 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e Data Ascii: </div> <div class="input-form"> <label for="">6. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	151.101.194.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:38 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:00:38 GMT Age: 1683821 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740025-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 8 X-Timer: S1727564438.121471,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:00:38 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:00:38 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-28 23:00:38 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-28 23:00:38 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-28 23:00:38 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-28 23:00:38 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	151.101.194.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:38 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3340647 Date: Sat, 28 Sep 2024 23:00:38 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727564438.121388,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	104.17.25.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:38 UTC	962	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:00:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 864667 Expires: Thu, 18 Sep 2025 23:00:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y5o0%2FAMe1rwB6NxHs5K%2Bx5tJCX4CqB5ppAaJgpdwC%2FAaQtM8LrAxeWmSxRnjeORrSf3VGRcQ8E0Vzn7U48tt%2FcHnTCQB40T3N5B5cCTjLi2cUGlnhDxFVqInzvhMT%2BoOa54BcOaf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca759ca4e641869-EWR alt-svc: h3=":443"; ma=86400
2024-09-28 23:00:38 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:00:38 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=150264 Date: Sat, 28 Sep 2024 23:00:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	104.17.25.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:38 UTC	928	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:00:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 864667 Expires: Thu, 18 Sep 2025 23:00:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0dNXcuKbYFGUz6SuGjBEfpLy1KhUL1mRYzQ7GGzTxsQk5pouLMCY2M4wyfHbtjj2Bp0lA%2FwyOH2hqATIqNGL6ur3GuVpuA%2FqvaeY6rvdvI1RKLhclPr5xV78k%2FyypjBm5NGQOCiJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca759cf1ce815af-EWR
2024-09-28 23:00:38 UTC	441	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e Data Ascii: mputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e[
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 Data Ascii: ft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e Data Ascii: dth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clien
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b Data Ascii: eprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c Data Ascii: .popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 Data Ascii: on(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 Data Ascii: ,'-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pla
2024-09-28 23:00:38 UTC	1369	IN	Data Raw: 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPrope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	151.101.130.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:38 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:00:38 GMT Age: 1683821 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740067-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 3 X-Timer: S1727564439.894420,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-28 23:00:38 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQGVFQBPES37693X8D8G Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 47 56 46 51 42 50 45 53 33 37 36 39 33 58 38 44 38 47 Data Ascii: Not Found - Request ID: 01J8XDTQGVFQBPES37693X8D8G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:38 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQHFC74WW4N0E8QPWS7B Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 48 46 43 37 34 57 57 34 4e 30 45 38 51 50 57 53 37 42 Data Ascii: Not Found - Request ID: 01J8XDTQHFC74WW4N0E8QPWS7B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49730	151.101.130.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:39 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:00:39 GMT Age: 3340648 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1727564439.451129,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-09-28 23:00:39 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:39 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQYKE7RGA3BFB6TF6DPA Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 59 4b 45 37 52 47 41 33 42 46 42 36 54 46 36 44 50 41 Data Ascii: Not Found - Request ID: 01J8XDTQYKE7RGA3BFB6TF6DPA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:39 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQY6PG0NH17FN270F0NE Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 59 36 50 47 30 4e 48 31 37 46 4e 32 37 30 46 30 4e 45 Data Ascii: Not Found - Request ID: 01J8XDTQY6PG0NH17FN270F0NE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:39 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQY7AG2P79ZBV0P0A7FC Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 59 37 41 47 32 50 37 39 5a 42 56 30 50 30 41 37 46 43 Data Ascii: Not Found - Request ID: 01J8XDTQY7AG2P79ZBV0P0A7FC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:39 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:39 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:39 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTQY7MWFZAGPZ2VKCG8WD Content-Length: 50 Connection: close
2024-09-28 23:00:39 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 51 59 37 4d 57 46 5a 41 47 50 5a 32 56 4b 43 47 38 57 44 Data Ascii: Not Found - Request ID: 01J8XDTQY7MWFZAGPZ2VKCG8WD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49732	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:00:40 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150292 Date: Sat, 28 Sep 2024 23:00:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 23:00:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49738	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:42 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:42 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:42 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTTRDQAG9J6W3K3718YAD Content-Length: 50 Connection: close
2024-09-28 23:00:42 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 54 52 44 51 41 47 39 4a 36 57 33 4b 33 37 31 38 59 41 44 Data Ascii: Not Found - Request ID: 01J8XDTTRDQAG9J6W3K3718YAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49740	3.70.101.28	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:43 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:00:43 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:00:43 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XDTVW7K52YY7HSGDABK8RB Content-Length: 50 Connection: close
2024-09-28 23:00:43 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 44 54 56 57 37 4b 35 32 59 59 37 48 53 47 44 41 42 4b 38 52 42 Data Ascii: Not Found - Request ID: 01J8XDTVW7K52YY7HSGDABK8RB

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49745	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:00:46 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727564414616&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-09-28 23:00:46 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-09-28 23:00:46 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-09-28 23:00:46 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8D77D6B27B5048B1836C4B68374BDB04 Ref B: LAXEDGE1612 Ref C: 2024-09-28T23:00:46Z Date: Sat, 28 Sep 2024 23:00:46 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.4ced0117.1727564446.1ce9fab7

Target ID:	0
Start time:	19:00:27
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	19:00:31
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,712393352102078358,9699152736461754406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:00:33
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 4.1.pages.csv, type: HTML
Source: Yara match	File source: 4.2.pages.csv, type: HTML
Source: Yara match	File source: 4.0.pages.csv, type: HTML

Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /lkjasdf.html HTTP/1.1Host: pub-3019d8288f8446f9972a55bb08a4c968.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lkjasdf.html HTTP/1.1Host: pub-3019d8288f8446f9972a55bb08a4c968.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-3019d8288f8446f9972a55bb08a4c968.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
http://pub-3019d8288f8446f9972a55bb08a4c968.r2.dev/lkjasdf.html