Edit tour

Windows Analysis Report
http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html
Analysis ID:	1521651
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2176,i,10633608411738784547,346745873738805942,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58595 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58597 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49740 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:58589 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-c7f440236a9e4596b155c7ab367794d3.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-c7f440236a9e4596b155c7ab367794d3.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-c7f440236a9e4596b155c7ab367794d3.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 197.87.175.4.in-addr.arpa

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:04 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ8JZYAZCX0JSJJPA39QQContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:04 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ8JX6T49WY148M7B0S7WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:05 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ991R0N2XCDJJJNW5R4ZContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:05 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ99BRJVP9QZD3MVWMQRJContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:05 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ9ATXVMG5K8HZFPQTQCGContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:05 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZ9AQEDNR5KTTRS44YACXContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:38:07 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XFZB0B349WAVN679KC0DYFContent-Length: 50Connection: close

Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_60.2.dr, chromecache_74.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_56.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_56.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_56.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_56.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_56.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://freuserndb.publicvm.com/m.php
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_56.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_65.2.dr, chromecache_64.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58595 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58597 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/39@23/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2176,i,10633608411738784547,346745873738805942,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2176,i,10633608411738784547,346745873738805942,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.111.153	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	172.66.0.235	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
bestfilltype.netlify.app	18.192.94.96	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	unknown
197.87.175.4.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	true		unknown
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html	false		unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_60.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_56.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_56.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://freuserndb.publicvm.com/m.php	chromecache_56.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_65.2.dr, chromecache_64.2.dr	false		unknown
https://sizzlejs.com/	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_65.2.dr, chromecache_64.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.159.140.237	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
185.199.109.153	unknown	Netherlands	54113	FASTLYUS	false
185.199.111.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
18.192.94.96	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.66.0.235	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521651
Start date and time:	2024-09-29 01:37:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/39@23/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.184.206, 142.251.173.84, 34.104.35.123, 142.250.185.234, 142.250.186.106, 172.217.16.138, 142.250.185.138, 142.250.185.74, 216.58.212.170, 142.250.186.74, 216.58.212.138, 216.58.206.42, 142.250.74.202, 216.58.206.74, 172.217.16.202, 142.250.186.42, 142.250.185.106, 142.250.186.138, 172.217.18.10, 142.250.186.170, 52.165.165.26, 192.229.221.95, 13.85.23.206, 93.184.221.240, 20.242.39.171, 40.69.42.241, 20.12.23.50, 4.175.87.197, 131.107.255.255
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"English", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"confirm", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9ZxQIqM4:ObPH/CM4
MD5:	99F6ED1603F34F9D39135DC01F3E84FB
SHA1:	7BE8952783F8C9D539CF4161FDDB1534DF85A547
SHA-256:	866C2080BCC27E0B170C8AB10B4591A0D9CAD6FD2A765A8CCAF3123F7540E607
SHA-512:	42FB8FDD59077786DC89BC9E0795F62C16C0606EB73D6E7AE6A3063B02BFCFFEDD4A489309A75F1A3624C80E720FBA3F079138237A10F2ED89D68BB2362A7ADB
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XFZ8JX6T49WY148M7B0S7W

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65290
Entropy (8bit):	4.720558309838876
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBW:i3kvjqy5kikTYXa1oG33agJ
MD5:	3DACF26301E848B34AB860FE92881E86
SHA1:	3CDBEBE0BBB8F838573B13CCAC26ECC818AC780E
SHA-256:	9097EDC9AC96681AEF4B0D63D956B4F41FA10EA7C19FCE54884E021D44D41A3A
SHA-512:	D6DD03CCFF7F663B40EC9923C0C5C152D897B2036ACDB623F7E595F72B3B1EF42FF98CEADE5D434935692BD04EAD7918210DE58EB64ED9A6FCA6828992D5A5B4
Malicious:	false
Reputation:	low
URL:	https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9Bfj1x32R+9n:ObPH/nx3D9
MD5:	9F94D709A08310FE2DDCEA186FD2157B
SHA1:	A3475B1395B06CA2989EAEBA1FF552BE5514DCCD
SHA-256:	8CE2DD5F57FDCF8C95755B8397F509F5E0E1C5DE171AEF600B4D515E5F8DFAC3
SHA-512:	FA2003298D35C1315384E1EAF9A999552F389DF5EAF0F008DA04DFFDCC2A079D64322E206A1FC604482FA4B125B049EAED87AB4DE98650EDE998E2AECB1E360A
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XFZ9AQEDNR5KTTRS44YACX

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.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_mv7EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCbY3rLPnQw3ZEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.726370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2d953hyo30f:ObPH/53h730f
MD5:	2FB68D8E324A180AFE5179A2FD5978C4
SHA1:	2801234E7DCC007CA908E75D9F3468F4D145BD16
SHA-256:	4F9B2A5DF2670C1BF8D23BB49C00AC0A384B8EB914661CF430831D6F2950D8C5
SHA-512:	2FD938D0EE3C95C1DF5254F4A2C24C8D1177E1FC18903D4B57E5A829A29934823ADCFE28CDD348CC5FD5613989D2855BF144A8DF2EA7CF13AAE353C2DD54CFD6
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XFZ99BRJVP9QZD3MVWMQRJ

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.901467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9Bby6Pmj:ObPH/Fy6Pmj
MD5:	17350CDB5E00C250FBDC79AEB304C67A
SHA1:	5EBA2FBA56D8587E54F32D4650D7E19ED038D0FE
SHA-256:	DE6C0662CFEE87A9A2FD3EBE95BA925451B075E5E024C25A0D09E44F93853AA4
SHA-512:	99B772830433ADCD4A3F21563BDCD642E170F62B3C4415D94F6CEB2EFE4EEFDCAA7E65767A13DDB8CD0D132928701F054971383826E53DE2D189117ACC58A184
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XFZB0B349WAVN679KC0DYF

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.621467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2d9s+zF:ObPH/5zF
MD5:	0850A76E9E3F894E5EFBF173EC9EB96E
SHA1:	65D607B014A09B7EDD7A97A29731FD54079DEED9
SHA-256:	8E864341503569797DD513A526A387B736CE58DEB117C87F6B5E95CB326865F0
SHA-512:	48519FE43D4C645DA14C2E6AC517CAB804F5E1C4E996ABC62929CA26B695865466D25CB442F916BDA69126C886B75E136069C49D820419C410DAD4AC71BD2DE4
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XFZ991R0N2XCDJJJNW5R4Z

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9B3ozehoin:ObPH/xVoi
MD5:	0C6EF483D701997F0E15DC5CF0827762
SHA1:	E90AB1EBB394047EF3605EF591CFDF65340F867B
SHA-256:	797BA9E27C807498FB5525A72C21416B9BDD806C1AFFC557A20243CA42FDA058
SHA-512:	3A7149FCC16DBB244CEED54EDD1315214D0F6C561A8D028F322A9E67E9B9CE10E3648D7767BF39EC5C8175DB8902DA5B296326D7769F48ED03AE53A088CF310E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XFZ9ATXVMG5K8HZFPQTQCG

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:37:52.419111967 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:37:52.419111967 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:37:52.669114113 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:37:59.110331059 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.110435963 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.110531092 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.111201048 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.111234903 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.700788021 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.700879097 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.707521915 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.707536936 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.707771063 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.709928989 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.710021019 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.710026026 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.710315943 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.751415968 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.818816900 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.818981886 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:37:59.819057941 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.819221020 CEST	49710	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:37:59.819252968 CEST	443	49710	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:00.500559092 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:00.500950098 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:00.505284071 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:00.505354881 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:00.505708933 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:00.505801916 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:00.506072044 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:00.510843039 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:00.967813015 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:00.980915070 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:00.980958939 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:00.981112003 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:00.981259108 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:00.981271982 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.014715910 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:01.456598997 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.458420992 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:01.458429098 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.459300041 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.459366083 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:01.460479975 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:01.460530996 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.460777044 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:01.460782051 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:01.513917923 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:01.513932943 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:01.518860102 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:01.519325018 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:02.026540041 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:38:02.026540041 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:38:02.280278921 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:38:02.370297909 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.375999928 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.376025915 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.376060963 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.376070023 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.376076937 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.376121998 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.376125097 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.376202106 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.376210928 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.380944014 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.381011009 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.381015062 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.381061077 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.381099939 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.381119967 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.381124020 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.381166935 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.466494083 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466670990 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466711998 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466732979 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.466739893 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466768026 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466778040 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.466782093 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.466842890 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.466846943 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.467624903 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.467652082 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.467675924 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.467679977 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.467750072 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.468080997 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468131065 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468173027 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468195915 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468199015 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.468204021 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468404055 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.468920946 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.468969107 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.468971968 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.469038963 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.469069004 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.469090939 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.469093084 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.469096899 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.469194889 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.509485960 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.509766102 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.509771109 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.556967974 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.556996107 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557028055 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557034016 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557120085 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557123899 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557271957 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557315111 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557320118 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557622910 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557678938 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557682037 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557717085 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557750940 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557751894 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557759047 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557774067 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557809114 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.557815075 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.557853937 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.679845095 CEST	49718	443	192.168.2.6	162.159.140.237
Sep 29, 2024 01:38:02.679858923 CEST	443	49718	162.159.140.237	192.168.2.6
Sep 29, 2024 01:38:02.694161892 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:02.694181919 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:02.694255114 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:02.695502996 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.695553064 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:02.695620060 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.697365999 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.697410107 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:02.697484970 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.706631899 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:02.706645012 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:02.706830978 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.706851006 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:02.707365036 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:02.707391024 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.168030977 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.181066036 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.181076050 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.182800055 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.182955027 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.188862085 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.191030025 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.236654997 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.236658096 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.454374075 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.454399109 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.454811096 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.454854012 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.456001043 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.456073046 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.456397057 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.456753969 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.456819057 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.456855059 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.467791080 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.467881918 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.468354940 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.468559980 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.469259977 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.469274998 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.470990896 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.470999956 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.475192070 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:03.475228071 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:03.475302935 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:03.475373983 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.475390911 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.475987911 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:03.476000071 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:03.513653994 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.513664961 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.529232979 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.578002930 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584610939 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584619045 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584651947 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584662914 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584671974 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584670067 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.584705114 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584743023 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.584743023 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.584773064 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.591336966 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591402054 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591434002 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591454983 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.591463089 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591499090 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591577053 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.591584921 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591651917 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.591702938 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591758966 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.591912031 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.591918945 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.594718933 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.596096039 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.596133947 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.596172094 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.596179962 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.596210957 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.596225977 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.597001076 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.597037077 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.597074986 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.597079039 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.597089052 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.597148895 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.603724003 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.603773117 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.603775024 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.603786945 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.603827953 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.603967905 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.604075909 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.604114056 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.604119062 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.604129076 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.604197979 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.609015942 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.637058973 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.641351938 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.641390085 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:03.641458035 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.641751051 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.641794920 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:03.641854048 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.642364979 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.642381907 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:03.642827034 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:03.642853022 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:03.653142929 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.669075012 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.669084072 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.669120073 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.669130087 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.669181108 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.669208050 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.669241905 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.669265032 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.670887947 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.670895100 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.670921087 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.670984983 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.671003103 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.671051025 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.676018953 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.676101923 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.676188946 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.676265955 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.678160906 CEST	49722	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:03.678168058 CEST	443	49722	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:03.686942101 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.687079906 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.687117100 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.687153101 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.687169075 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.687181950 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.687210083 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.688029051 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688081980 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.688087940 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688127041 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688165903 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688194036 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.688199043 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688240051 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.688245058 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688863993 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.688919067 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.688924074 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696225882 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696274996 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696321964 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.696329117 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696366072 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.696532965 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696616888 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.696696997 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.696702957 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.697101116 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.697141886 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.697180033 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.697189093 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.697196960 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.697227955 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.743432045 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.743484974 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.743490934 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.743505001 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.743550062 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.743555069 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.759181976 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.759202957 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.759278059 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.759294033 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.759341002 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.760797024 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760828018 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760863066 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.760869026 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760879993 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760922909 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.760930061 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760962009 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.760965109 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.760981083 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.761018038 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.779642105 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779696941 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779697895 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.779711962 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779759884 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.779766083 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779813051 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779854059 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779895067 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.779901028 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.779941082 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.781893969 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781903982 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781923056 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781929970 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781946898 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.781954050 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781963110 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.781970024 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.782002926 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.788816929 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.788836956 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.788892984 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.788902998 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.788928032 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.788949013 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.789705992 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.789724112 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.789773941 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.789781094 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.789830923 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.834022045 CEST	49723	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.834064960 CEST	443	49723	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.873728991 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.873754025 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.873790026 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.873797894 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.873838902 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.875145912 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.875164986 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.875225067 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.875231028 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.875273943 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.876250029 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.876274109 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.876328945 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.876334906 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.876384020 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.881165028 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881185055 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881258011 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.881263971 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881310940 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.881665945 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881685019 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881746054 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.881752968 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.881788969 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.883115053 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.883133888 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.883197069 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.883202076 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.883241892 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.924469948 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.924489975 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.924540997 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.924554110 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.924577951 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.924602985 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.946561098 CEST	443	49708	173.222.162.64	192.168.2.6
Sep 29, 2024 01:38:03.946669102 CEST	49708	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:38:03.965727091 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.965750933 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.965804100 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.965811014 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.965862989 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.966180086 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.966206074 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.966283083 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.966283083 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.966290951 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.966335058 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.966962099 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.966999054 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.967020988 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.967025995 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.967062950 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:03.967076063 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.967102051 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.971829891 CEST	49724	443	192.168.2.6	151.101.2.137
Sep 29, 2024 01:38:03.971847057 CEST	443	49724	151.101.2.137	192.168.2.6
Sep 29, 2024 01:38:04.159818888 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.214535952 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.231075048 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.231093884 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.232302904 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.232316971 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.232368946 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.240576982 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.240655899 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.258481026 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.258510113 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.258591890 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.259095907 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.259109974 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.259164095 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.282216072 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.287173033 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.288880110 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.288894892 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:04.325303078 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.341412067 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.341413021 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:04.591789961 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.591866016 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.591953993 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.592889071 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.592910051 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.592964888 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.603935957 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.603948116 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.604316950 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.604341984 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.609947920 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.609985113 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.610680103 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.610692978 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.611099005 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.611169100 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.612348080 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.612366915 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.612401009 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.614387989 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:04.614414930 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:04.614496946 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:04.659159899 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.659188986 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.659722090 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.659733057 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.664433956 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:04.664448023 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:04.666131973 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.666225910 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.672451019 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.672630072 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.672743082 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.672775030 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.673933983 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.673949003 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.714183092 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.714190006 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.847657919 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:04.847688913 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:04.847779036 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:04.853454113 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:04.853471041 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:04.856163979 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.856259108 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.856308937 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.856781960 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.856862068 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.856916904 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.859987020 CEST	49728	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.860007048 CEST	443	49728	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:04.860779047 CEST	49727	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:04.860811949 CEST	443	49727	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.142107010 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.142421961 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.142432928 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.143913984 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.143978119 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.190735102 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.190949917 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.191242933 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.191257954 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.241858006 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.242310047 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.242330074 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.243833065 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.243899107 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.244719028 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.244793892 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.254443884 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.254451990 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.255135059 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.255717039 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.255729914 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.256733894 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.256793976 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.257411957 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.257473946 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.257806063 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.257812977 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.263561964 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.288111925 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.288259029 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.288311005 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.290200949 CEST	49734	443	192.168.2.6	185.199.111.153
Sep 29, 2024 01:38:05.290214062 CEST	443	49734	185.199.111.153	192.168.2.6
Sep 29, 2024 01:38:05.297708988 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:05.297739983 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:05.297832012 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:05.298259974 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:05.298274040 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:05.306179047 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.306241035 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.306704998 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.306718111 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.306910038 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.306920052 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.307923079 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.308001995 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.308163881 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.308218002 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.308473110 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.308537006 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.308764935 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.308849096 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.308952093 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.308959961 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.309043884 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.309051991 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.310187101 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.357033968 CEST	49740	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.360230923 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.360249996 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.360313892 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.360922098 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.360944033 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.361179113 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.361639023 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.361651897 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.361782074 CEST	53	49740	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.361826897 CEST	49740	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.361911058 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.361922979 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.372961998 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.372972965 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.446357965 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:05.446392059 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:05.446475029 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:05.447632074 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:05.447644949 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:05.515415907 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.516271114 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.530280113 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:05.530384064 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:05.565989971 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.566066980 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.566118002 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.576201916 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.576270103 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.576344967 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.620618105 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.620702982 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.620753050 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.621037006 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.621094942 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:05.621381044 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:05.775489092 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:05.802566051 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:05.802598000 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:05.803086042 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:05.817454100 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.822268963 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:05.906917095 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:05.934000015 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:05.962470055 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:05.962491989 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:05.964199066 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.081366062 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.081402063 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.081471920 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.081513882 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.081564903 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.081574917 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.082086086 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.082093954 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.082911968 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.082918882 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.082967997 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.083234072 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.083250046 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.083292961 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.084764957 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.084892988 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.085319042 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.085355997 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.085371971 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.085383892 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.085406065 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.085447073 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.086998940 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.087085962 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.096035004 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.096271038 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.114372969 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.114638090 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.114995956 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.115021944 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.117227077 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.117240906 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.117930889 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.117944002 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.128587008 CEST	49731	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.128606081 CEST	443	49731	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.131423950 CEST	49730	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.131458044 CEST	443	49730	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.132343054 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.132358074 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.133985996 CEST	49733	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.133999109 CEST	443	49733	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.134529114 CEST	49732	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.134552956 CEST	443	49732	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.232882023 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.232901096 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.232988119 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.232990980 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.232997894 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233026981 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233051062 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.233191967 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233232021 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.233232021 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.233253002 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233292103 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.233298063 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233382940 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233434916 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.233439922 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233558893 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233604908 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.233611107 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233719110 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.233773947 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.233778954 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237483978 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237494946 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237533092 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237560987 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237571001 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.237586975 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237598896 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.237605095 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.237653017 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.238064051 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.238938093 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.238980055 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239000082 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.239018917 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239058971 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239068985 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.239077091 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239119053 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.239125967 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239501953 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239533901 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239552021 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.239558935 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.239593983 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.243669033 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.243733883 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.243801117 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.243808985 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.311326981 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.311336040 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315449953 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315483093 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315521955 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315526962 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.315551043 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315573931 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.315602064 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315620899 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315638065 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315654993 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.315660954 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.315685987 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.317289114 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317298889 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317332983 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317352057 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317361116 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.317373991 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317384005 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.317389011 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.317398071 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.317415953 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.317437887 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.329137087 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.329205036 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.329215050 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.329437971 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.329498053 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.352073908 CEST	49744	443	192.168.2.6	185.199.109.153
Sep 29, 2024 01:38:06.352096081 CEST	443	49744	185.199.109.153	192.168.2.6
Sep 29, 2024 01:38:06.354396105 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.354518890 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.354609013 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.364229918 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:06.364248037 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:06.368158102 CEST	49738	443	192.168.2.6	104.17.25.14
Sep 29, 2024 01:38:06.368175030 CEST	443	49738	104.17.25.14	192.168.2.6
Sep 29, 2024 01:38:06.400643110 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.400841951 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.400867939 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.400906086 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.400918007 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.400924921 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.400945902 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.400971889 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.400986910 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.401000023 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.401000023 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.401010036 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.401030064 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.402251005 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.402276039 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.402321100 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.402321100 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.402338982 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.402364016 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.402369022 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.402395010 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.403269053 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.403311014 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.403327942 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.403335094 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.403353930 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.403377056 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.404419899 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.404431105 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.404472113 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.404489994 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.404498100 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.404537916 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.404544115 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.404563904 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.404578924 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.405141115 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405189991 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405226946 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.405232906 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405275106 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.405519009 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405529022 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405555964 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405586958 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.405630112 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.405633926 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.405672073 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.406580925 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.406600952 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.406666994 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.406672955 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.406732082 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.407394886 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.407455921 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.407460928 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.407489061 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.407535076 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.417772055 CEST	49742	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.417785883 CEST	443	49742	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.447412968 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.487785101 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.487842083 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.487870932 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.487880945 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.487915039 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.488465071 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488498926 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488522053 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.488528013 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488550901 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488559961 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.488595963 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488611937 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.488619089 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.488639116 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.489213943 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.489279032 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.489283085 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.489311934 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.489356041 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.490165949 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.490209103 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.490235090 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.490241051 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.490283012 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.490986109 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.491029024 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.491067886 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.491075993 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.491108894 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.491966963 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.492013931 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.492038965 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.492046118 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.492091894 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.494549036 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.494604111 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.494630098 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.494637966 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.494673014 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.535453081 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.574683905 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.574757099 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.574786901 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.574796915 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.574841976 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.574992895 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575042963 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575062990 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.575067997 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575119019 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.575645924 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575694084 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575715065 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.575786114 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575812101 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.575917959 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575965881 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.575983047 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.575989008 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.576013088 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.576129913 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.576176882 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.584379911 CEST	49743	443	192.168.2.6	151.101.194.137
Sep 29, 2024 01:38:06.584407091 CEST	443	49743	151.101.194.137	192.168.2.6
Sep 29, 2024 01:38:06.591044903 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.591121912 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.591182947 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.594552994 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.594574928 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.594587088 CEST	49737	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.594593048 CEST	443	49737	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.666496992 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.666528940 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:06.666599035 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.671523094 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:06.671536922 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.012120008 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.012419939 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:07.012443066 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.012783051 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.013415098 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:07.013511896 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.013722897 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:07.055401087 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.327667952 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.327742100 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.329742908 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.329752922 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.330065012 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.331146955 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.335290909 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.335369110 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.335432053 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:07.336431026 CEST	49745	443	192.168.2.6	18.192.94.96
Sep 29, 2024 01:38:07.336443901 CEST	443	49745	18.192.94.96	192.168.2.6
Sep 29, 2024 01:38:07.375416040 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.477251053 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:07.477283955 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:07.477421045 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:07.479782104 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:07.479795933 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:07.612497091 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.612571001 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.612651110 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.632221937 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.632251978 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:07.632270098 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:38:07.632280111 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 01:38:08.057718039 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.057807922 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.710901976 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.710932970 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.711278915 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.743856907 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.743980885 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.743997097 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.744122982 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.791420937 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.852343082 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.852426052 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:08.852580070 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.852710009 CEST	49750	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:08.852741957 CEST	443	49750	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:14.053910017 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:14.053970098 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:14.054018974 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:15.546142101 CEST	49726	443	192.168.2.6	172.217.16.132
Sep 29, 2024 01:38:15.546159029 CEST	443	49726	172.217.16.132	192.168.2.6
Sep 29, 2024 01:38:16.898721933 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:16.898776054 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:17.263036966 CEST	49716	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:17.267811060 CEST	80	49716	172.66.0.235	192.168.2.6
Sep 29, 2024 01:38:22.601380110 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:22.601440907 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:22.601525068 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:22.602123976 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:22.602139950 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.355950117 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.356240034 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.361980915 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.362000942 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.362310886 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.364459038 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.364598036 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.364603996 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.364667892 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.407407999 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.492918015 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.493165016 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:23.493251085 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.493402958 CEST	49754	443	192.168.2.6	20.7.2.167
Sep 29, 2024 01:38:23.493422031 CEST	443	49754	20.7.2.167	192.168.2.6
Sep 29, 2024 01:38:25.174906969 CEST	58589	53	192.168.2.6	162.159.36.2
Sep 29, 2024 01:38:25.179883957 CEST	53	58589	162.159.36.2	192.168.2.6
Sep 29, 2024 01:38:25.179972887 CEST	58589	53	192.168.2.6	162.159.36.2
Sep 29, 2024 01:38:25.180053949 CEST	58589	53	192.168.2.6	162.159.36.2
Sep 29, 2024 01:38:25.185142040 CEST	53	58589	162.159.36.2	192.168.2.6
Sep 29, 2024 01:38:25.625078917 CEST	53	58589	162.159.36.2	192.168.2.6
Sep 29, 2024 01:38:25.627593994 CEST	58589	53	192.168.2.6	162.159.36.2
Sep 29, 2024 01:38:25.632822990 CEST	53	58589	162.159.36.2	192.168.2.6
Sep 29, 2024 01:38:25.632982016 CEST	58589	53	192.168.2.6	162.159.36.2
Sep 29, 2024 01:38:38.004625082 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:38.004662991 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:38.004723072 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:38.005932093 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:38.005948067 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.368952990 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.369024992 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.372243881 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.372260094 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.372508049 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.375967979 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.376405954 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.376415968 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.376647949 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.423417091 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.554313898 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.554405928 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:39.554619074 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.554878950 CEST	58595	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:38:39.554903984 CEST	443	58595	40.115.3.253	192.168.2.6
Sep 29, 2024 01:38:45.980191946 CEST	49717	80	192.168.2.6	172.66.0.235
Sep 29, 2024 01:38:46.071191072 CEST	80	49717	172.66.0.235	192.168.2.6
Sep 29, 2024 01:39:00.910461903 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:00.910504103 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:00.910595894 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:00.911165953 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:00.911192894 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.703707933 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.703816891 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.705781937 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.705796957 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.706139088 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.708023071 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.708141088 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.708153963 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.708276033 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.755400896 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.889089108 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.889384031 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.889461040 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.890291929 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:01.890321016 CEST	443	58597	40.115.3.253	192.168.2.6
Sep 29, 2024 01:39:01.890351057 CEST	58597	443	192.168.2.6	40.115.3.253
Sep 29, 2024 01:39:03.505938053 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:03.505979061 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:03.506119013 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:03.506941080 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:03.506958008 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:04.160121918 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:04.160630941 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:04.160665989 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:04.161711931 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:04.164267063 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:04.164354086 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:04.215135098 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:14.053725004 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:14.053818941 CEST	443	58598	172.217.18.4	192.168.2.6
Sep 29, 2024 01:39:14.054097891 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:15.420816898 CEST	58598	443	192.168.2.6	172.217.18.4
Sep 29, 2024 01:39:15.420877934 CEST	443	58598	172.217.18.4	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:37:59.111546993 CEST	53	60274	1.1.1.1	192.168.2.6
Sep 29, 2024 01:37:59.126085043 CEST	53	58272	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:00.141506910 CEST	53	57041	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:00.485266924 CEST	60744	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:00.485855103 CEST	63433	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:00.493673086 CEST	53	60744	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:00.495362043 CEST	53	63433	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:00.971035957 CEST	61684	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:00.971194029 CEST	63861	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:00.979567051 CEST	53	61684	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:00.980366945 CEST	53	63861	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.673108101 CEST	62069	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:02.673852921 CEST	63382	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:02.675796032 CEST	59225	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:02.676312923 CEST	51782	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:02.678616047 CEST	53	50400	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.679754972 CEST	53	62069	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.680840015 CEST	53	63382	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.683084965 CEST	53	59225	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.683120966 CEST	53	51782	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:02.684870958 CEST	53	59043	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:03.461827040 CEST	58249	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:03.462487936 CEST	61837	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:03.468477964 CEST	53	58249	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:03.469255924 CEST	53	61837	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:03.629581928 CEST	64335	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:03.630007982 CEST	63979	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:03.638051033 CEST	53	63979	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:03.638246059 CEST	53	64335	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:04.260417938 CEST	53600	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:04.268729925 CEST	53	53600	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:04.581760883 CEST	54310	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:04.590372086 CEST	53	54310	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.287348986 CEST	51565	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.288242102 CEST	60837	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.293989897 CEST	53	51565	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.294939041 CEST	53	60837	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.344238043 CEST	56224	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.344257116 CEST	53	55683	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.344731092 CEST	50089	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.353190899 CEST	53	56224	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.353846073 CEST	53	50089	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.357877016 CEST	53	64599	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.429069042 CEST	54099	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.430608988 CEST	64429	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:05.437520981 CEST	53	64429	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:05.437728882 CEST	53	54099	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:17.270865917 CEST	53	54181	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:25.174278021 CEST	53	53660	162.159.36.2	192.168.2.6
Sep 29, 2024 01:38:25.636738062 CEST	56007	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:25.643681049 CEST	53	56007	1.1.1.1	192.168.2.6
Sep 29, 2024 01:38:26.806677103 CEST	51964	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:38:26.813695908 CEST	53	51964	1.1.1.1	192.168.2.6
Sep 29, 2024 01:39:03.497020960 CEST	52376	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:39:03.503803015 CEST	53	52376	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 01:38:00.485266924 CEST	192.168.2.6	1.1.1.1	0x3f82	Standard query (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:00.485855103 CEST	192.168.2.6	1.1.1.1	0xf957	Standard query (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:38:00.971035957 CEST	192.168.2.6	1.1.1.1	0x1623	Standard query (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:00.971194029 CEST	192.168.2.6	1.1.1.1	0x3f5	Standard query (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:38:02.673108101 CEST	192.168.2.6	1.1.1.1	0x2493	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.673852921 CEST	192.168.2.6	1.1.1.1	0xfc79	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:38:02.675796032 CEST	192.168.2.6	1.1.1.1	0xc478	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.676312923 CEST	192.168.2.6	1.1.1.1	0xbc6f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:38:03.461827040 CEST	192.168.2.6	1.1.1.1	0x3b7b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:03.462487936 CEST	192.168.2.6	1.1.1.1	0x78ee	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 01:38:03.629581928 CEST	192.168.2.6	1.1.1.1	0x7933	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:03.630007982 CEST	192.168.2.6	1.1.1.1	0x4851	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 01:38:04.260417938 CEST	192.168.2.6	1.1.1.1	0xa52f	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:04.581760883 CEST	192.168.2.6	1.1.1.1	0xd46b	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 01:38:05.287348986 CEST	192.168.2.6	1.1.1.1	0xce5f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.288242102 CEST	192.168.2.6	1.1.1.1	0x706f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:38:05.344238043 CEST	192.168.2.6	1.1.1.1	0xd5c6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.344731092 CEST	192.168.2.6	1.1.1.1	0x8c50	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:38:05.429069042 CEST	192.168.2.6	1.1.1.1	0xf7cb	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.430608988 CEST	192.168.2.6	1.1.1.1	0xf9e	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 01:38:25.636738062 CEST	192.168.2.6	1.1.1.1	0xcf1a	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 01:38:26.806677103 CEST	192.168.2.6	1.1.1.1	0x324f	Standard query (0)	197.87.175.4.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 01:39:03.497020960 CEST	192.168.2.6	1.1.1.1	0xcd22	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 01:38:00.493673086 CEST	1.1.1.1	192.168.2.6	0x3f82	No error (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:00.493673086 CEST	1.1.1.1	192.168.2.6	0x3f82	No error (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:00.979567051 CEST	1.1.1.1	192.168.2.6	0x1623	No error (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:00.979567051 CEST	1.1.1.1	192.168.2.6	0x1623	No error (0)	pub-c7f440236a9e4596b155c7ab367794d3.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.679754972 CEST	1.1.1.1	192.168.2.6	0x2493	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.679754972 CEST	1.1.1.1	192.168.2.6	0x2493	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.679754972 CEST	1.1.1.1	192.168.2.6	0x2493	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.679754972 CEST	1.1.1.1	192.168.2.6	0x2493	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.683084965 CEST	1.1.1.1	192.168.2.6	0xc478	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.683084965 CEST	1.1.1.1	192.168.2.6	0xc478	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:02.683120966 CEST	1.1.1.1	192.168.2.6	0xbc6f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:38:03.468477964 CEST	1.1.1.1	192.168.2.6	0x3b7b	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:03.469255924 CEST	1.1.1.1	192.168.2.6	0x78ee	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 01:38:03.638246059 CEST	1.1.1.1	192.168.2.6	0x7933	No error (0)	bestfilltype.netlify.app		18.192.94.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:03.638246059 CEST	1.1.1.1	192.168.2.6	0x7933	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:04.268729925 CEST	1.1.1.1	192.168.2.6	0xa52f	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:04.268729925 CEST	1.1.1.1	192.168.2.6	0xa52f	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:04.268729925 CEST	1.1.1.1	192.168.2.6	0xa52f	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:04.268729925 CEST	1.1.1.1	192.168.2.6	0xa52f	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.293989897 CEST	1.1.1.1	192.168.2.6	0xce5f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.293989897 CEST	1.1.1.1	192.168.2.6	0xce5f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.294939041 CEST	1.1.1.1	192.168.2.6	0x706f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:38:05.353190899 CEST	1.1.1.1	192.168.2.6	0xd5c6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.353190899 CEST	1.1.1.1	192.168.2.6	0xd5c6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.353190899 CEST	1.1.1.1	192.168.2.6	0xd5c6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.353190899 CEST	1.1.1.1	192.168.2.6	0xd5c6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.437728882 CEST	1.1.1.1	192.168.2.6	0xf7cb	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.437728882 CEST	1.1.1.1	192.168.2.6	0xf7cb	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.437728882 CEST	1.1.1.1	192.168.2.6	0xf7cb	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:05.437728882 CEST	1.1.1.1	192.168.2.6	0xf7cb	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:11.600678921 CEST	1.1.1.1	192.168.2.6	0xd9b1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:38:11.600678921 CEST	1.1.1.1	192.168.2.6	0xd9b1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:38:25.643681049 CEST	1.1.1.1	192.168.2.6	0xcf1a	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 01:38:26.813695908 CEST	1.1.1.1	192.168.2.6	0x324f	Name error (3)	197.87.175.4.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 01:39:03.503803015 CEST	1.1.1.1	192.168.2.6	0xcd22	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-c7f440236a9e4596b155c7ab367794d3.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49717	172.66.0.235	80	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 01:38:00.506072044 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-c7f440236a9e4596b155c7ab367794d3.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 01:38:00.967813015 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 28 Sep 2024 23:38:00 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 00:38:00 GMT Location: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7908bb8cfc45e-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 01:38:45.980191946 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	20.7.2.167	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:37:59 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 34 4f 39 55 56 45 4b 41 45 30 4b 71 51 35 61 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 30 34 62 33 31 35 66 62 39 38 39 63 65 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 4O9UVEKAE0KqQ5aE.1Context: b104b315fb989ce6
2024-09-28 23:37:59 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:37:59 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 34 4f 39 55 56 45 4b 41 45 30 4b 71 51 35 61 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 30 34 62 33 31 35 66 62 39 38 39 63 65 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 4O9UVEKAE0KqQ5aE.2Context: b104b315fb989ce6<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-28 23:37:59 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 34 4f 39 55 56 45 4b 41 45 30 4b 71 51 35 61 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 30 34 62 33 31 35 66 62 39 38 39 63 65 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 4O9UVEKAE0KqQ5aE.3Context: b104b315fb989ce6<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:37:59 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:37:59 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 37 37 65 32 49 4e 6b 59 55 2b 57 72 47 30 72 4a 55 43 33 4b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: t77e2INkYU+WrG0rJUC3Kg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	162.159.140.237	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:01 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-c7f440236a9e4596b155c7ab367794d3.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:02 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:38:02 GMT Content-Type: text/html Content-Length: 65290 Connection: close Accept-Ranges: bytes ETag: "3dacf26301e848b34ab860fe92881e86" Last-Modified: Tue, 02 Jul 2024 19:49:24 GMT Server: cloudflare CF-RAY: 8ca7908f8e78de93-EWR
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-09-28 23:38:02 UTC	1336	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-09-28 23:38:02 UTC	1369	IN	Data Raw: 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c Data Ascii: div> <div class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	104.17.25.14	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:03 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:03 UTC	926	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:38:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 866912 Expires: Thu, 18 Sep 2025 23:38:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qE7HwnB%2BaOtW5S3iKKhYn2TpuSsdmSIhTz8C8Sux0ASFdANrTOIF5vJcrG%2FJLHyniEmClmlxqeyNKD4bjoKqOtZgH8H6TDAUxlWMzywB42ZkWBwyrdm1yOcXOeK8wE7eG9yiTNZc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7909c097342ca-EWR
2024-09-28 23:38:03 UTC	443	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 Data Ascii: utedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.ov
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['b
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d Data Ascii: -m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 Data Ascii: h,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientW
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c Data Ascii: recated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c Data Ascii: opper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 Data Ascii: (e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 Data Ascii: -'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.place
2024-09-28 23:38:03 UTC	1369	IN	Data Raw: 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPropert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49723	151.101.2.137	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:03 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:03 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:38:03 GMT Age: 1686066 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740073-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 2 X-Timer: S1727566684.525808,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:38:03 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:38:03 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-28 23:38:03 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-28 23:38:03 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-28 23:38:03 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-28 23:38:03 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49724	151.101.2.137	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:03 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:03 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 992641 Date: Sat, 28 Sep 2024 23:38:03 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890037-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1727566684.531853,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 23:38:03 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49727	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:04 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:04 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:04 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ8JZYAZCX0JSJJPA39QQ Content-Length: 50 Connection: close
2024-09-28 23:38:04 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 38 4a 5a 59 41 5a 43 58 30 4a 53 4a 4a 50 41 33 39 51 51 Data Ascii: Not Found - Request ID: 01J8XFZ8JZYAZCX0JSJJPA39QQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49728	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:04 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:04 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:04 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ8JX6T49WY148M7B0S7W Content-Length: 50 Connection: close
2024-09-28 23:38:04 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 38 4a 58 36 54 34 39 57 59 31 34 38 4d 37 42 30 53 37 57 Data Ascii: Not Found - Request ID: 01J8XFZ8JX6T49WY148M7B0S7W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49734	185.199.111.153	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:05 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:05 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Age: 492 Date: Sat, 28 Sep 2024 23:38:05 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740077-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727566685.243198,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 3f5d9451139ee047e9ad781f44e88a1ad515717d
2024-09-28 23:38:05 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:05 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:05 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:05 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ991R0N2XCDJJJNW5R4Z Content-Length: 50 Connection: close
2024-09-28 23:38:05 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 39 39 31 52 30 4e 32 58 43 44 4a 4a 4a 4e 57 35 52 34 5a Data Ascii: Not Found - Request ID: 01J8XFZ991R0N2XCDJJJNW5R4Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49730	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:05 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:05 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:05 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ99BRJVP9QZD3MVWMQRJ Content-Length: 50 Connection: close
2024-09-28 23:38:05 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 39 39 42 52 4a 56 50 39 51 5a 44 33 4d 56 57 4d 51 52 4a Data Ascii: Not Found - Request ID: 01J8XFZ99BRJVP9QZD3MVWMQRJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:05 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:05 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:05 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ9AQEDNR5KTTRS44YACX Content-Length: 50 Connection: close
2024-09-28 23:38:05 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 39 41 51 45 44 4e 52 35 4b 54 54 52 53 34 34 59 41 43 58 Data Ascii: Not Found - Request ID: 01J8XFZ9AQEDNR5KTTRS44YACX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49733	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:05 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:05 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:05 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZ9ATXVMG5K8HZFPQTQCG Content-Length: 50 Connection: close
2024-09-28 23:38:05 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 39 41 54 58 56 4d 47 35 4b 38 48 5a 46 50 51 54 51 43 47 Data Ascii: Not Found - Request ID: 01J8XFZ9ATXVMG5K8HZFPQTQCG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49742	151.101.194.137	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:06 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:06 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:38:06 GMT Age: 1686068 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 19 X-Timer: S1727566686.171259,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:38:06 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:38:06 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-28 23:38:06 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-28 23:38:06 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-28 23:38:06 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-28 23:38:06 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49744	185.199.109.153	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:06 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:06 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:38:06 GMT Via: 1.1 varnish Age: 493 X-Served-By: cache-ewr-kewr1740036-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727566686.176089,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: 0fc44607241591c4fd3b05c5c2bf0f6fa9a44b24
2024-09-28 23:38:06 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49743	151.101.194.137	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:06 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:06 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3342895 Date: Sat, 28 Sep 2024 23:38:06 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727566686.177440,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 23:38:06 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49738	104.17.25.14	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:06 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:06 UTC	932	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:38:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 866915 Expires: Thu, 18 Sep 2025 23:38:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oX%2F8W3x%2BsbgxRks6mf8nnJOZRf%2BHGoGyDJkzLW9aB6SKPU9vmOU8jUGfsQ9Ork9gC8lOj7ErbctBX04jj2QEiHTEawTdo6QkB%2F7qdBgFdopHTThmmumM8%2Fmu5O0Pxh5DUaSmpL2c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca790acacb615bb-EWR
2024-09-28 23:38:06 UTC	437	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c Data Ascii: etComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 Data Ascii: oid 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloa
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f Data Ascii: s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BO
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 Data Ascii: p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.c
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c Data Ascii: is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyl
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 Data Ascii: nction(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 Data Ascii: ['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e
2024-09-28 23:38:06 UTC	1369	IN	Data Raw: 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: (t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49737	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:06 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:38:06 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=148016 Date: Sat, 28 Sep 2024 23:38:06 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49745	18.192.94.96	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:07 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:38:07 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:38:07 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XFZB0B349WAVN679KC0DYF Content-Length: 50 Connection: close
2024-09-28 23:38:07 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 46 5a 42 30 42 33 34 39 57 41 56 4e 36 37 39 4b 43 30 44 59 46 Data Ascii: Not Found - Request ID: 01J8XFZB0B349WAVN679KC0DYF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:38:07 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=148045 Date: Sat, 28 Sep 2024 23:38:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 23:38:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49750	20.7.2.167	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 71 68 4d 48 6a 38 53 36 45 65 79 5a 4d 7a 43 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 37 35 31 64 65 64 32 66 33 63 38 38 35 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RqhMHj8S6EeyZMzC.1Context: f5751ded2f3c8857
2024-09-28 23:38:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:38:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 71 68 4d 48 6a 38 53 36 45 65 79 5a 4d 7a 43 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 37 35 31 64 65 64 32 66 33 63 38 38 35 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: RqhMHj8S6EeyZMzC.2Context: f5751ded2f3c8857<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-28 23:38:08 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 71 68 4d 48 6a 38 53 36 45 65 79 5a 4d 7a 43 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 37 35 31 64 65 64 32 66 33 63 38 38 35 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RqhMHj8S6EeyZMzC.3Context: f5751ded2f3c8857<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:38:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:38:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 53 73 30 4a 6a 79 57 39 30 4b 77 7a 56 61 75 6b 34 55 4c 66 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GSs0JjyW90KwzVauk4ULfQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49754	20.7.2.167	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 65 6c 2f 37 41 64 46 4a 77 45 57 33 37 55 50 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 61 66 65 39 33 62 61 64 61 39 61 36 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: el/7AdFJwEW37UPb.1Context: 310afe93bada9a6d
2024-09-28 23:38:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:38:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 65 6c 2f 37 41 64 46 4a 77 45 57 33 37 55 50 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 61 66 65 39 33 62 61 64 61 39 61 36 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: el/7AdFJwEW37UPb.2Context: 310afe93bada9a6d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-28 23:38:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 65 6c 2f 37 41 64 46 4a 77 45 57 33 37 55 50 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 61 66 65 39 33 62 61 64 61 39 61 36 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: el/7AdFJwEW37UPb.3Context: 310afe93bada9a6d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:38:23 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:38:23 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 65 44 57 4e 6f 66 77 69 45 2b 37 48 6e 36 5a 67 49 7a 58 77 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: deDWNofwiE+7Hn6ZgIzXwg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	58595	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:38:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 6a 77 59 48 6c 37 65 78 45 2b 55 39 42 30 57 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 34 31 36 35 31 31 34 39 36 66 33 64 38 63 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: YjwYHl7exE+U9B0W.1Context: f416511496f3d8c0
2024-09-28 23:38:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:38:39 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 6a 77 59 48 6c 37 65 78 45 2b 55 39 42 30 57 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 34 31 36 35 31 31 34 39 36 66 33 64 38 63 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: YjwYHl7exE+U9B0W.2Context: f416511496f3d8c0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-28 23:38:39 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 6a 77 59 48 6c 37 65 78 45 2b 55 39 42 30 57 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 34 31 36 35 31 31 34 39 36 66 33 64 38 63 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: YjwYHl7exE+U9B0W.3Context: f416511496f3d8c0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:38:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:38:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 30 4d 65 72 35 55 71 65 30 32 2f 49 2b 52 62 61 43 35 73 74 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: L0Mer5Uqe02/I+RbaC5stA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	58597	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:39:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 41 57 61 32 46 49 6e 43 6b 79 74 65 44 43 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 37 32 65 61 37 62 31 31 31 38 65 65 38 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: iAWa2FInCkyteDCn.1Context: ab72ea7b1118ee85
2024-09-28 23:39:01 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:39:01 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 69 41 57 61 32 46 49 6e 43 6b 79 74 65 44 43 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 37 32 65 61 37 62 31 31 31 38 65 65 38 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: iAWa2FInCkyteDCn.2Context: ab72ea7b1118ee85<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-28 23:39:01 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 41 57 61 32 46 49 6e 43 6b 79 74 65 44 43 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 37 32 65 61 37 62 31 31 31 38 65 65 38 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: iAWa2FInCkyteDCn.3Context: ab72ea7b1118ee85<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:39:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:39:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 51 37 46 56 6c 65 78 64 6b 4b 70 67 63 78 69 79 50 70 64 45 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: gQ7FVlexdkKpgcxiyPpdEA.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5092, Parent PID: 5932

General

Target ID:	0
Start time:	19:37:51
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6236, Parent PID: 5092

General

Target ID:	2
Start time:	19:37:57
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2176,i,10633608411738784547,346745873738805942,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1968, Parent PID: 5932

General

Target ID:	3
Start time:	19:37:58
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
http://pub-c7f440236a9e4596b155c7ab367794d3.r2.dev/index.html