Edit tour

Windows Analysis Report
http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html
Analysis ID:	1521658
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2224,i,7493216822298213626,653781551684278391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
3.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
3.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
3.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 3.2.pages.csv, type: HTML
Source: Yara match	File source: 3.1.pages.csv, type: HTML
Source: Yara match	File source: 3.0.pages.csv, type: HTML

Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-72f4175190054b068a6db1f116f55ca9.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-72f4175190054b068a6db1f116f55ca9.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-72f4175190054b068a6db1f116f55ca9.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-72f4175190054b068a6db1f116f55ca9.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-72f4175190054b068a6db1f116f55ca9.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FN0H17ERDDA17XQCE2Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FQJB4T6K4NV855XKJRContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FH1RTXZD5EX1PWTHX7Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FJZNVPBS183ADP8NDSContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FRPZ4MQWPASSWEZXQ4Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC1FJYC0QT5AM0J9ATKV2Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 23:45:05 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XGC3H6KKR787P73V2KGFX4Content-Length: 50Connection: close

Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_81.2.dr, chromecache_88.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_84.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_84.2.dr	String found in binary or memory: https://bexernoajind.publicvm.com/fr.php
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_84.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_84.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_84.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_84.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_83.2.dr, chromecache_72.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/45@20/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2224,i,7493216822298213626,653781551684278391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2224,i,7493216822298213626,653781551684278391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.110.153	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
pub-72f4175190054b068a6db1f116f55ca9.r2.dev	162.159.140.237	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
bestfilltype.netlify.app	35.156.224.161	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false		unknown
http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	true		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html	false		unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bexernoajind.publicvm.com/fr.php	chromecache_84.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_81.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_84.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_84.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_83.2.dr, chromecache_72.2.dr	false		unknown
https://sizzlejs.com/	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_83.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
162.159.140.237	pub-72f4175190054b068a6db1f116f55ca9.r2.dev	United States	13335	CLOUDFLARENETUS	false
185.199.111.153	unknown	Netherlands	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
172.66.0.235	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.156.224.161	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
185.199.110.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521658
Start date and time:	2024-09-29 01:44:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/45@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.174, 64.233.167.84, 34.104.35.123, 142.250.185.106, 142.250.186.42, 142.250.186.163, 142.250.184.234, 172.217.23.106, 216.58.212.170, 216.58.206.74, 142.250.185.202, 142.250.186.106, 172.217.18.10, 142.250.185.74, 172.217.16.202, 142.250.186.138, 142.250.185.138, 216.58.206.42, 142.250.185.170, 142.250.186.74, 172.217.16.138, 20.12.23.50, 199.232.214.172, 192.229.221.95, 13.85.23.206, 40.69.42.241, 142.250.74.195, 217.20.57.18
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":false, "trigger_text":"You can paste your entire secret recovery phrase into any field", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:44:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9764584609434226
Encrypted:	false
SSDEEP:	48:88dWTS2BHiidAKZdA19ehwiZUklqehqy+3:8VLmFy
MD5:	830FBA45E3129ED7569B6E104CDEA883
SHA1:	9D1D1ED87ED08D79E0A43450296A512422CAE31C
SHA-256:	A8C30B691951C43EE3ACA32E2A47C7FC2B855B9A8A28473EEF1DA8FC3A7DCE24
SHA-512:	0A33DB02CD3C46F8FE7B933B7F4E1D55340BE215E77EEE09EDA3321FC42189E396620E114DAFFB3A60B983A389970EEAB7B6D865F228F6471F2B4DCF3DCA8840
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....bn....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:44:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9877035828913594
Encrypted:	false
SSDEEP:	48:8tdWTS2BHiidAKZdA1weh/iZUkAQkqeh1y+2:82Lk9QYy
MD5:	B129D272B2645551223A141FB05919AC
SHA1:	E252F0F3FD633E50A08B20DEC9DF4CFDEC0FEFD5
SHA-256:	201D75A1AB7391498833DF81A07151708F9CAB4D6584AE979CD4EF2E73192B73
SHA-512:	CD0997566DBE1A7751E3BD92158C7F27E522D93C3A6B0A9B6F09D25ED2BC7616AA680BFED98053E1766923C00F5BC838B931B259089FBF7D136C61596B7B58E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....DGVn....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008634391285272
Encrypted:	false
SSDEEP:	48:8xfdWTS2sHiidAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xcLjnBy
MD5:	15A77A1CD4EB2DC13EDAA69527F59452
SHA1:	7ACB412C188C653ADBB4FC8954FD0723C5C24836
SHA-256:	9B3566A97BC48D03046D162AC2495F237D4DA327F24B51DC1EC59B5938E3803E
SHA-512:	46316067E94EE76307F716776E6A47397FA70BA46AF58C88627E9EE1EA2D11E8464641FCE35616C6695047A0CEEA798EAC8BED30B94BEFA4E45BEF9346D7FB11
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:44:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.99027411479284
Encrypted:	false
SSDEEP:	48:8LdWTS2BHiidAKZdA1vehDiZUkwqehJy+R:8YLvjy
MD5:	35EE1F36BEBC24A2E3B510331E354945
SHA1:	0020C91EC243D59F92C2AC0BA1B07DA70A6946F1
SHA-256:	FD0954C7578297C38B4F43ECF4CC4BBE93904BC450ED487ABF6D856EDBF73C64
SHA-512:	9A155D749B5C08B85C40B6395D444131C9133193B6177FB99A17AE695D4370E2DD5D6A30689C7D746402460BBD88A4D205EB9559BF4E627DFBB2066CC16EF879
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H(Qn....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:44:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.98053674648173
Encrypted:	false
SSDEEP:	48:89dWTS2BHiidAKZdA1hehBiZUk1W1qehHy+C:8GLP9ny
MD5:	14C49BECFC63DD280A1A2F643EF9ABEE
SHA1:	945C5C870CBE43B62DA599EBC318D57334B5DC46
SHA-256:	ED04128881FAC88E725BA398C2C1F8FC7A58DEB7D2D55C459CC4FA3A6E85F059
SHA-512:	1876FF21A9972E227665054D90E6B2A5D8488F3337A32DDFD110ABE9A0B2FE63D4728011B0DE70532394D944D01FD5B7B20999FE0EE588D6B4E8DCC50B5DD805
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......[n....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 22:44:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9894859341239663
Encrypted:	false
SSDEEP:	48:8gdWTS2BHiidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbBy+yT+:8pLHT/TbxWOvTbBy7T
MD5:	86A8AD2590594776969566A6DCBDA0A3
SHA1:	B8B509E490955CCA14A090B3877D9A6FA06D4200
SHA-256:	9A65065FA4261B00FCEBDC2D564C37CE68C1E92CA1B43444A68CC1CAF8347234
SHA-512:	FB46BBE91866F06DD7D1888FA9C58B3596246F5AF5A022CBA7B1A0D3145281FF0149784A7D0FB811E9EF5747F129388B7330984822D45415B0A4A4AF83007440
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....]Hn....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............f\Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.676565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9srVtLy3kUrn:ObPH/KHArn
MD5:	595299F7E2E9AA424953410480925403
SHA1:	DE3B841C946AE43E35D7D30E3AC6435A05996781
SHA-256:	7D6CCCAE08F5EE9493A9F66F5C2092A23C5E4E5766BC6A6BED7B557F8A3C61A8
SHA-512:	FD06A560D228D6448C15F3ADCAF63900F345CA67215CEB4AB8A4223E7C86CC20BD6B377D59AE3D6DAA9BA9709FEFC1C445E9C85DE24A2C07D4ECC500727C9464
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XGC1FN0H17ERDDA17XQCE2

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.821467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9Sh3Xjz:ObPH/ShXn
MD5:	87EAEDFC0DC01C30EDFD8B4A2E283EB0
SHA1:	9B4DA21E263439261EE1397A7FBC02502CAF9C23
SHA-256:	47577758870CD91677B77C53FCFEF9EAD6C5AF6223915B4B1506F328DDEB720B
SHA-512:	7DB2B605E7D0077B78BBCBCAC6F8C1C37BD15E2D1B095E4A51822F4937C138680C31CF022191BE57F1BC00325AFD97438FFB231B5D3E4D31C4FFC5596AE7793A
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XGC3H6KKR787P73V2KGFX4

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9sv5E:ObPH/Oe
MD5:	992EBB7BD95D02A8E3BE0BE3E4483BE2
SHA1:	8BD645015AA153C0FE6A2738F136C771D4BC1A21
SHA-256:	CF94D4A639189E3E6918F3C1710F4584206BF0DF5D57599652C64603431254CB
SHA-512:	D632A8BC75140BE7B40F54D911AEB77AC5AF12BED94F14AEA4B0A24D3CED030CA0D792AE705B36FEDDF2DFD7B16C900E74A40341BA5543BF326E7C68CBBABE7B
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XGC1FJYC0QT5AM0J9ATKV2

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.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_Go_uRZ4EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCWeFDGBrjmztEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.731663380285988
Encrypted:	false
SSDEEP:	3:ObynQA2d9stU3xj199q:ObPH/MUBj39q
MD5:	5F825FA355F684629EBAEE9948D4EE0D
SHA1:	8BD6C4ADCE1B5FD1649E33B1F6802D227A586B24
SHA-256:	59102233EFE26410FC5F6E27C758F6965993DC87A19729967216DB7A7F2AEFE1
SHA-512:	12B0C289E0E53B6DF4EA8365C6992931E01EE7A8CA25010D879793D799D33C8DF6A6D58D23AF7B73A74433346684A1C8242E4BE7DFCE3BDEEAD1CAEC1E469FEE
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XGC1FH1RTXZD5EX1PWTHX7

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65293
Entropy (8bit):	4.720679404476246
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBW:i3kvjqy5kikTYXa1oG33ogJ
MD5:	3E8088ADB077F900A816AED7823F97CC
SHA1:	E98CAA5DF17633246910064A7286BB296DB8061B
SHA-256:	F37052E9E70C7F0FD108A71FDCE96BB2E25E1AEEB11CD544659E43E8CF941ED2
SHA-512:	60E80DCF014869008DCC0D60BAB4725188EF82262873305A9DD5247687BBA850E7AEAAB38A889A08443187737188FA545753ADD5427BDD25BD11A6E70AF7E242
Malicious:	false
Reputation:	low
URL:	https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.851663380285987
Encrypted:	false
SSDEEP:	3:ObynQA2d9s31bYn:ObPH/W1E
MD5:	DC6AC41438C375CB59F477BD2AC82EF2
SHA1:	3D51E36634D925F25C420A5C2019B5AB30932C8F
SHA-256:	061778A1ADECEA92F7B9FC5A5B16132A6A9E01F03AA36E9B9C14A0105708C1CE
SHA-512:	AAF0CEC2CF82D8D740E8AE2A8C2092AA48A8A4A771A66334D3DB68216763CAB24040B95D0A8B800D14A60711DAA62BDAB85775DBF410FB8F7E117B97EADB735A
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XGC1FRPZ4MQWPASSWEZXQ4

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.711272380112909
Encrypted:	false
SSDEEP:	3:ObynQA2d9sv8UUoX8n:ObPH/O8I8n
MD5:	EDB1EC8802BF7603741B175766F1A2BD
SHA1:	8C173683AFF882FEB0FE918CCAD682DD46FF2A71
SHA-256:	77093D6E24789DA7A94837BC1B6D123C7D22B1B0E10D5D9E29A1BB7AE6D94D8B
SHA-512:	855DA618BF244105D83F4B5370E7DCA9791CED9AAFE5BEC94DF176E48D030B1FF92C573466F37A4EDBCFC5BEB66D1D03B9B45290E19B83CDB0637B83CB0BB116
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XGC1FJZNVPBS183ADP8NDS

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:44:50.758690119 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:44:50.758697987 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:44:50.883701086 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:44:59.776123047 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:44:59.776532888 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:44:59.780930996 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 01:44:59.781102896 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:44:59.781272888 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 01:44:59.781279087 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:44:59.785473108 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:44:59.786005020 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 01:45:00.254302979 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 01:45:00.269411087 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.269459963 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.269526958 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.269735098 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.269748926 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.299227953 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:45:00.365551949 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:00.365569115 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:00.483324051 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:00.731331110 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.731650114 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.731678009 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.732656002 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.732722998 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.733891964 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.733952999 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.734170914 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:00.734178066 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:00.786791086 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.083703041 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.083779097 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.083821058 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.083856106 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.083945036 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.083945036 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.083971977 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.084358931 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.084383965 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.084404945 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.084412098 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.084451914 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.088471889 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.088536978 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.088567972 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.088587999 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.088594913 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.088639975 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.171320915 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171410084 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171443939 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171474934 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171473980 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.171494007 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171535015 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171569109 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171663046 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.171663046 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.171670914 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.171715021 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.172209978 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172288895 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172334909 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.172339916 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172780037 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172815084 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172830105 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.172836065 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.172874928 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.172930002 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173767090 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173801899 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173819065 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.173823118 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173863888 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.173866034 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173876047 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.173923016 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.173928022 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.206383944 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.206439018 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.206505060 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.206660986 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.206747055 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.206811905 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.207408905 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.207431078 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.207925081 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.207941055 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.208672047 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.208684921 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.208739042 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.209724903 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.209738970 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.215461969 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.218734026 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.258994102 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259047031 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259079933 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259124994 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259152889 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259161949 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259174109 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259183884 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259201050 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259233952 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259243011 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259283066 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259294987 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259605885 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259644032 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259654045 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259659052 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259691954 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.259697914 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259723902 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.259764910 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.260297060 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 01:45:01.260310888 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 01:45:01.665570021 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.677932024 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.678852081 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.706526041 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.712843895 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.712877989 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.716254950 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.716269970 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.716422081 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.716435909 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.717118979 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.717200994 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.717474937 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.717550993 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.718017101 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.718074083 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.881638050 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.881824017 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.882757902 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.882884026 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.884953022 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.885044098 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.886734962 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.886759043 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.888549089 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.888603926 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.888638020 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.888663054 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.940689087 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.940716982 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.940846920 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.969643116 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:01.969671965 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:01.969729900 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:01.970232964 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:01.970243931 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:01.983483076 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.983606100 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.983649015 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.983649969 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.983663082 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.983700037 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.983720064 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989075899 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989322901 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989377022 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.989417076 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989509106 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989559889 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.989590883 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989680052 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989743948 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.989758015 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989934921 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.989986897 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.990000010 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.990514040 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.990569115 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.990587950 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992120028 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992168903 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.992180109 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992221117 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992261887 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992263079 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.992275000 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.992314100 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.992327929 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.997410059 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997457027 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997477055 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997500896 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.997505903 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.997524023 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997565031 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997570992 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.997570992 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.997587919 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.997595072 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997613907 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997632980 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.997865915 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997910023 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997914076 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.997925043 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.997973919 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:01.997986078 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:01.999502897 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:01.999551058 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:01.999557018 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.002780914 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.002835035 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.002847910 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.019071102 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.019170046 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.019248962 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.019313097 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.019350052 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.019402027 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.023302078 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.023315907 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.023549080 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.023561001 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.050157070 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.055001020 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.055001020 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.078840017 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.078907967 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.078941107 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.078953981 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.078963995 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079003096 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079006910 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079041004 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079071045 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079077959 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079083920 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079117060 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079118013 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079128027 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079160929 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079164982 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079257965 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079288960 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079305887 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079341888 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079341888 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079354048 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079370022 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079376936 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079432011 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.079435110 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079453945 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.079485893 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081404924 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081425905 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081469059 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081475019 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081507921 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081532001 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081578970 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081578970 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081888914 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081897020 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081927061 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.081953049 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.081959009 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.082019091 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.085732937 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.085834026 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.085886002 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.085901976 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.085942030 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.085997105 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.092915058 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.092950106 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.125543118 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.125591993 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.125649929 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.126144886 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.126163006 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.135015965 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:02.135086060 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:02.161257982 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.161287069 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.161317110 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.161325932 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.161366940 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.163809061 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.163825035 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.163873911 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.163878918 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.163887978 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.163907051 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.163938046 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.163940907 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.163976908 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.163985968 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.164026022 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.166454077 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.166471958 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.166531086 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.166558981 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.166583061 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.166610003 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.169327021 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.169339895 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170476913 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170494080 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170550108 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.170564890 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170615911 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.170754910 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170772076 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170831919 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.170845985 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.170892000 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.216756105 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.216773987 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.216825962 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.216872931 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.216901064 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.216919899 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.242963076 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.242997885 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.243056059 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.243686914 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.243695974 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.254837036 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.254854918 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.254915953 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.254941940 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.255009890 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.255718946 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.255734921 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.255798101 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.255812883 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.255873919 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265427113 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265444040 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265497923 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265521049 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265537977 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265572071 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265773058 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265789032 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265822887 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265855074 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.265867949 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.265902042 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.266132116 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.266159058 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.266192913 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.266205072 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.266222000 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.266266108 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.305205107 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.305249929 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.305275917 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.305293083 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.305310965 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.305330992 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348179102 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348197937 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348231077 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348268986 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348283052 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348340988 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348844051 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348859072 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348898888 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348917961 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.348931074 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.348983049 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.349781036 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.349798918 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.349838972 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.349852085 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.349884987 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.349920034 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.351191044 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.351223946 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.351263046 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.351273060 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.351285934 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.351356030 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.359455109 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 01:45:02.359486103 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 01:45:02.383635044 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.383677006 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.383740902 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.384371042 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.384388924 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.581845045 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.581887960 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.581952095 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.582353115 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.582429886 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.582489014 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.582577944 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.582592010 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.582871914 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.582900047 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.592675924 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.592761993 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.592832088 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.593102932 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.593137026 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.595151901 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.595191002 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.595247030 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.595416069 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.595432043 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.598656893 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.598846912 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.598870039 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.600238085 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.600298882 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.600936890 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.600997925 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.601264954 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.601274967 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.601600885 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:02.601618052 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:02.601676941 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:02.601917982 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:02.601937056 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:02.628484964 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:02.628890038 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:02.628911018 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:02.629894018 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:02.629992962 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:02.642554998 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.659168959 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.659501076 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.659512997 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.660399914 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.660460949 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.676978111 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.678579092 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.678628922 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.680159092 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:02.680229902 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:02.702203035 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.706321955 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.706334114 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.707217932 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.707283974 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.714554071 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.714615107 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.723823071 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.723834991 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.748433113 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748476982 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748507977 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748526096 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.748533010 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748545885 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748581886 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.748593092 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748619080 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748635054 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.748646975 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.748689890 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.748955011 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.749635935 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.749663115 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.749701023 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.749712944 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.749756098 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.769885063 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.819830894 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.819892883 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.819917917 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.819964886 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.819978952 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.819989920 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820003986 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.820046902 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820117950 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.820123911 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820568085 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820595980 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820655107 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.820660114 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.820760012 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.821186066 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.827255964 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.827306986 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.827312946 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.838876009 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.838948965 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.838998079 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.839020967 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.839236021 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.839289904 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.848510981 CEST	49722	443	192.168.2.5	104.17.25.14
Sep 29, 2024 01:45:02.848534107 CEST	443	49722	104.17.25.14	192.168.2.5
Sep 29, 2024 01:45:02.851100922 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.852505922 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.852520943 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.855750084 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.855824947 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.856463909 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.856532097 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.856606007 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.856616020 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.877074003 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908267975 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908303976 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908350945 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908360958 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908370972 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908371925 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908390999 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908396959 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908421040 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.908463955 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908463955 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.908464909 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.909418106 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.909802914 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.909848928 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.909884930 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.909889936 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.909929991 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.909929991 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.950721025 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:02.950761080 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:02.950823069 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:02.952663898 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:02.952687025 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:02.954092026 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954277992 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954341888 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.954355001 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954452991 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954500914 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.954509020 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954607964 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954655886 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.954663038 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954840899 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.954895973 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.954902887 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.955594063 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.955643892 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.955655098 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.961697102 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.961754084 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.961766958 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.994014025 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.994091034 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.994131088 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.994162083 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.994173050 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.994203091 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.995488882 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995534897 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995573997 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.995579004 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995621920 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.995621920 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.995697975 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995820999 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.995825052 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995873928 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:02.995935917 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.996227980 CEST	49724	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:02.996244907 CEST	443	49724	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.005542994 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.044012070 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044044971 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044061899 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044107914 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044111013 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.044111013 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.044130087 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044147015 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.044162035 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044186115 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.044188976 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.044188976 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.045072079 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.045919895 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.045958996 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.045996904 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.046020985 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.046030998 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.046045065 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.046050072 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.046062946 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.046149969 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.088649035 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.089076996 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.089107037 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.090106010 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.090270996 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.132009029 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.132056952 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.132172108 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.132172108 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.132195950 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.132323980 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.133049965 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.133090973 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.133184910 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.133192062 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.133222103 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.133315086 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.134779930 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.134819984 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.134860039 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.134866953 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.134897947 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.134960890 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.171701908 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.171749115 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.171843052 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.171843052 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.171864033 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.171926022 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.220017910 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220062017 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220108986 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.220127106 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220159054 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.220180035 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.220590115 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220647097 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220689058 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.220696926 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.220725060 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.221019983 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.221287966 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.221648932 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.221657038 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.221688032 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.221694946 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.221729040 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.221735954 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.221769094 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.221834898 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.221854925 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.222469091 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.222521067 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.222522974 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.222546101 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.222562075 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.222568035 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.222580910 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.222590923 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.222632885 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.222657919 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.223438025 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.223478079 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.223479986 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.223516941 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.223524094 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.223566055 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.223567963 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.223654032 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.224390984 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.224428892 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.224473000 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.224478960 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.224510908 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.224575996 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.243940115 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.244272947 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.244353056 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.245896101 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.246011019 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.250701904 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.250924110 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.250935078 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.254174948 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.254260063 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.260159969 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.260184050 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.260289907 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.260289907 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.260310888 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.260442019 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308206081 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308248043 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308289051 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308307886 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308406115 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308557987 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308598995 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308640957 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308648109 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308676004 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308917999 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308934927 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.308942080 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.308971882 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.309004068 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.309010983 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.309098959 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.309201002 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.309577942 CEST	49725	443	192.168.2.5	151.101.66.137
Sep 29, 2024 01:45:03.309593916 CEST	443	49725	151.101.66.137	192.168.2.5
Sep 29, 2024 01:45:03.373043060 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:03.373205900 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:03.377083063 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.377259970 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.377631903 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.377640963 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.377834082 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.378161907 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.378182888 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.378262997 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.378448963 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.378577948 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.378750086 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.379616022 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.382911921 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.382914066 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.382927895 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.383188009 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.383301020 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.383332014 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.383451939 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.383500099 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.383626938 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.383635998 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.384083033 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.384092093 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.384098053 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.384121895 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.385860920 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.385873079 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.421272039 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:03.421295881 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:03.423492908 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.423515081 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.423526049 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.428530931 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.428623915 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.428623915 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.439002037 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.470267057 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:03.500608921 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.500871897 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.503345966 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.556265116 CEST	49730	443	192.168.2.5	185.199.110.153
Sep 29, 2024 01:45:03.556303024 CEST	443	49730	185.199.110.153	192.168.2.5
Sep 29, 2024 01:45:03.565205097 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.565270901 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.565653086 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.566773891 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.567193985 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.568145990 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.568208933 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.568239927 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.569756031 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.571696997 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.571741104 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.571777105 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.571986914 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.572062016 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.572062016 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.573725939 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.573894024 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.574017048 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.614438057 CEST	49721	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.614439964 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.614456892 CEST	443	49721	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.614494085 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.616166115 CEST	49729	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.616172075 CEST	443	49729	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.616846085 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.616861105 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.617352962 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.617405891 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.618992090 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:03.619016886 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:03.620923996 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:03.621040106 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:03.666990042 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:03.667016983 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:03.667320013 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:03.710994959 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:03.810579062 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:03.851402044 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:03.968494892 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:03.968543053 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:03.968655109 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:03.969161034 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:03.969172955 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.000875950 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:04.000941038 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:04.001116991 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:04.396454096 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:04.396481991 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:04.422753096 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.423119068 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.423131943 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.424591064 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.424637079 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.428456068 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.428606033 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.428843975 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.428849936 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.472409964 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.538357019 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.538500071 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.538553953 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.626224995 CEST	49737	443	192.168.2.5	185.199.111.153
Sep 29, 2024 01:45:04.626247883 CEST	443	49737	185.199.111.153	192.168.2.5
Sep 29, 2024 01:45:04.705847025 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:04.705885887 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:04.705939054 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:04.709939003 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:04.710009098 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:04.710088968 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:04.710320950 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:04.710330009 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:04.712057114 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:04.712069988 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.350337982 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.360017061 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:05.360047102 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.360405922 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.361309052 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:05.361372948 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.361612082 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:05.369987965 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.370089054 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.378724098 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.378734112 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.379146099 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.381068945 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.403403997 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.427429914 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.650259018 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.650415897 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.650528908 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.669485092 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.669569969 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.669675112 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:05.685761929 CEST	49738	443	192.168.2.5	35.156.224.161
Sep 29, 2024 01:45:05.685786009 CEST	443	49738	35.156.224.161	192.168.2.5
Sep 29, 2024 01:45:05.761991024 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.762022972 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:05.762033939 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 01:45:05.762042046 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 01:45:12.519673109 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:12.519767046 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:12.519819021 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:12.841898918 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:12.842112064 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:12.843271971 CEST	49746	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:12.843317032 CEST	443	49746	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:12.843447924 CEST	49746	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:12.846808910 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:12.846836090 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:12.862798929 CEST	49746	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:12.862821102 CEST	443	49746	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:13.447473049 CEST	443	49746	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:13.447647095 CEST	49746	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:14.426882029 CEST	49719	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:45:14.426902056 CEST	443	49719	142.250.185.68	192.168.2.5
Sep 29, 2024 01:45:15.173080921 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 01:45:15.173135996 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:45:16.331535101 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:45:16.336493969 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 01:45:32.598745108 CEST	443	49746	23.1.237.91	192.168.2.5
Sep 29, 2024 01:45:32.599061966 CEST	49746	443	192.168.2.5	23.1.237.91
Sep 29, 2024 01:45:45.268131971 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 01:45:45.273027897 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 01:46:02.018945932 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:02.019002914 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.019088984 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:02.019325972 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:02.019345999 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.668267012 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.668618917 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:02.668642998 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.668987036 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.669424057 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:02.669485092 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:02.720591068 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:12.563364983 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:12.563450098 CEST	443	49750	142.250.185.68	192.168.2.5
Sep 29, 2024 01:46:12.563571930 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:14.496275902 CEST	49750	443	192.168.2.5	142.250.185.68
Sep 29, 2024 01:46:14.496350050 CEST	443	49750	142.250.185.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:44:58.140177011 CEST	53	51153	1.1.1.1	192.168.2.5
Sep 29, 2024 01:44:58.212059975 CEST	53	58625	1.1.1.1	192.168.2.5
Sep 29, 2024 01:44:59.357017040 CEST	53	49170	1.1.1.1	192.168.2.5
Sep 29, 2024 01:44:59.764971972 CEST	55019	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:44:59.765099049 CEST	54603	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:44:59.773619890 CEST	53	55019	1.1.1.1	192.168.2.5
Sep 29, 2024 01:44:59.774923086 CEST	53	54603	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:00.260123014 CEST	58000	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:00.260945082 CEST	50120	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:00.267745972 CEST	53	50120	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:00.268347979 CEST	53	58000	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.198937893 CEST	59460	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.199254036 CEST	59349	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.200172901 CEST	50436	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.200485945 CEST	52774	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.205748081 CEST	53	59349	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.205760002 CEST	53	59460	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.205935955 CEST	53	64088	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.206670046 CEST	53	50436	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.207099915 CEST	53	52774	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.207752943 CEST	53	52754	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.960757017 CEST	54571	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.961241007 CEST	50391	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.967686892 CEST	53	54571	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.968028069 CEST	53	50391	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:01.998061895 CEST	63457	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:01.998586893 CEST	51087	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.008296967 CEST	53	63457	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.116925955 CEST	60734	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.117116928 CEST	54475	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.124526024 CEST	53	60734	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.124537945 CEST	53	54475	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.125993967 CEST	53	51087	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.234605074 CEST	57278	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.234910965 CEST	57383	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.241652012 CEST	53	57383	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.242017031 CEST	53	57278	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.592072010 CEST	51549	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.592282057 CEST	55629	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:02.599015951 CEST	53	51549	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:02.601120949 CEST	53	55629	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:03.411252022 CEST	53	57590	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:03.616818905 CEST	53	62062	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:03.885525942 CEST	54540	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:03.885838985 CEST	52197	53	192.168.2.5	1.1.1.1
Sep 29, 2024 01:45:03.894180059 CEST	53	52197	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:03.894300938 CEST	53	54540	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:16.339020967 CEST	53	52098	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:35.431989908 CEST	53	55485	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:57.480601072 CEST	53	61871	1.1.1.1	192.168.2.5
Sep 29, 2024 01:45:57.854286909 CEST	53	60094	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 01:45:02.126035929 CEST	192.168.2.5	1.1.1.1	c230	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 01:44:59.764971972 CEST	192.168.2.5	1.1.1.1	0x8b5	Standard query (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:59.765099049 CEST	192.168.2.5	1.1.1.1	0xe793	Standard query (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:45:00.260123014 CEST	192.168.2.5	1.1.1.1	0x3be5	Standard query (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:00.260945082 CEST	192.168.2.5	1.1.1.1	0xb06f	Standard query (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 01:45:01.198937893 CEST	192.168.2.5	1.1.1.1	0x8db4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.199254036 CEST	192.168.2.5	1.1.1.1	0x1483	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:45:01.200172901 CEST	192.168.2.5	1.1.1.1	0xdc63	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.200485945 CEST	192.168.2.5	1.1.1.1	0xbd41	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:45:01.960757017 CEST	192.168.2.5	1.1.1.1	0xccde	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.961241007 CEST	192.168.2.5	1.1.1.1	0x3546	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 01:45:01.998061895 CEST	192.168.2.5	1.1.1.1	0xaeae	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.998586893 CEST	192.168.2.5	1.1.1.1	0xf0e1	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 01:45:02.116925955 CEST	192.168.2.5	1.1.1.1	0xd04	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.117116928 CEST	192.168.2.5	1.1.1.1	0x772c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 01:45:02.234605074 CEST	192.168.2.5	1.1.1.1	0x8a9d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.234910965 CEST	192.168.2.5	1.1.1.1	0x12c5	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:45:02.592072010 CEST	192.168.2.5	1.1.1.1	0xb48b	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.592282057 CEST	192.168.2.5	1.1.1.1	0x9a29	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 01:45:03.885525942 CEST	192.168.2.5	1.1.1.1	0xa261	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:03.885838985 CEST	192.168.2.5	1.1.1.1	0x1428	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 01:44:59.773619890 CEST	1.1.1.1	192.168.2.5	0x8b5	No error (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:59.773619890 CEST	1.1.1.1	192.168.2.5	0x8b5	No error (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:00.268347979 CEST	1.1.1.1	192.168.2.5	0x3be5	No error (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:00.268347979 CEST	1.1.1.1	192.168.2.5	0x3be5	No error (0)	pub-72f4175190054b068a6db1f116f55ca9.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.205760002 CEST	1.1.1.1	192.168.2.5	0x8db4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.205760002 CEST	1.1.1.1	192.168.2.5	0x8db4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.205760002 CEST	1.1.1.1	192.168.2.5	0x8db4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.205760002 CEST	1.1.1.1	192.168.2.5	0x8db4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.206670046 CEST	1.1.1.1	192.168.2.5	0xdc63	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.206670046 CEST	1.1.1.1	192.168.2.5	0xdc63	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.207099915 CEST	1.1.1.1	192.168.2.5	0xbd41	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:45:01.967686892 CEST	1.1.1.1	192.168.2.5	0xccde	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:01.968028069 CEST	1.1.1.1	192.168.2.5	0x3546	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 01:45:02.008296967 CEST	1.1.1.1	192.168.2.5	0xaeae	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.008296967 CEST	1.1.1.1	192.168.2.5	0xaeae	No error (0)	bestfilltype.netlify.app		18.192.231.252	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.124526024 CEST	1.1.1.1	192.168.2.5	0xd04	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.124526024 CEST	1.1.1.1	192.168.2.5	0xd04	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.124537945 CEST	1.1.1.1	192.168.2.5	0x772c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 01:45:02.242017031 CEST	1.1.1.1	192.168.2.5	0x8a9d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.242017031 CEST	1.1.1.1	192.168.2.5	0x8a9d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.242017031 CEST	1.1.1.1	192.168.2.5	0x8a9d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.242017031 CEST	1.1.1.1	192.168.2.5	0x8a9d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.599015951 CEST	1.1.1.1	192.168.2.5	0xb48b	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.599015951 CEST	1.1.1.1	192.168.2.5	0xb48b	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.599015951 CEST	1.1.1.1	192.168.2.5	0xb48b	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:02.599015951 CEST	1.1.1.1	192.168.2.5	0xb48b	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:03.894300938 CEST	1.1.1.1	192.168.2.5	0xa261	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:03.894300938 CEST	1.1.1.1	192.168.2.5	0xa261	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:03.894300938 CEST	1.1.1.1	192.168.2.5	0xa261	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:03.894300938 CEST	1.1.1.1	192.168.2.5	0xa261	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:11.600052118 CEST	1.1.1.1	192.168.2.5	0x1e32	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:11.600052118 CEST	1.1.1.1	192.168.2.5	0x1e32	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:12.100411892 CEST	1.1.1.1	192.168.2.5	0x5ccf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:45:12.100411892 CEST	1.1.1.1	192.168.2.5	0x5ccf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:25.669208050 CEST	1.1.1.1	192.168.2.5	0xf8dd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:45:25.669208050 CEST	1.1.1.1	192.168.2.5	0xf8dd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:45:50.527657986 CEST	1.1.1.1	192.168.2.5	0xf26d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:45:50.527657986 CEST	1.1.1.1	192.168.2.5	0xf26d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:46:10.666749001 CEST	1.1.1.1	192.168.2.5	0x6911	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:46:10.666749001 CEST	1.1.1.1	192.168.2.5	0x6911	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:46:13.530165911 CEST	1.1.1.1	192.168.2.5	0xb75b	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:46:13.530165911 CEST	1.1.1.1	192.168.2.5	0xb75b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:46:13.530165911 CEST	1.1.1.1	192.168.2.5	0xb75b	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-72f4175190054b068a6db1f116f55ca9.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	162.159.140.237	80	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 01:44:59.781279087 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-72f4175190054b068a6db1f116f55ca9.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 01:45:00.254302979 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 28 Sep 2024 23:45:00 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 00:45:00 GMT Location: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca79ac839de4333-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 01:45:45.268131971 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	172.66.0.235	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:00 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-72f4175190054b068a6db1f116f55ca9.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:01 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:45:01 GMT Content-Type: text/html Content-Length: 65293 Connection: close Accept-Ranges: bytes ETag: "3e8088adb077f900a816aed7823f97cc" Last-Modified: Sun, 02 Jun 2024 09:16:17 GMT Server: cloudflare CF-RAY: 8ca79acc09ca5e67-EWR
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	151.101.194.137	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:01 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:01 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1686485 Date: Sat, 28 Sep 2024 23:45:01 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890077-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1727567102.938812,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	104.17.25.14	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:01 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:01 UTC	936	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:45:01 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 867330 Expires: Thu, 18 Sep 2025 23:45:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dYDFO%2FdwZbvFW2nRlYMhlC4MNWkU%2FKicqLpxjtf9kdjyJE2%2BjWoztQMl%2FXobL9nG6gsMBl%2FIcB7dYBwsE5LoruMR5oMut49Ys4CtLeYXc3FG%2BHNO%2FcKoawM5kyBy2yj7Dmz6bzIV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca79ad32d3742f8-EWR
2024-09-28 23:45:01 UTC	433	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 Data Ascii: o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 Data Ascii: h&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parse
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 Data Ascii: eft-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e Data Ascii: dth:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 Data Ascii: on` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrow
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 Data Ascii: oy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parent
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 Data Ascii: e(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'st
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 Data Ascii: 1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset
2024-09-28 23:45:01 UTC	1369	IN	Data Raw: 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 Data Ascii: i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.has

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	151.101.194.137	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:01 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:01 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 993059 Date: Sat, 28 Sep 2024 23:45:01 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890097-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1727567102.940557,VS0,VE3 Vary: Accept-Encoding
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 23:45:01 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	104.17.25.14	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:02 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:02 UTC	924	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 23:45:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 867331 Expires: Thu, 18 Sep 2025 23:45:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENclMzdgIZWxqzAyeZkYYuECbszFxcicNgk%2FbCWJBEVBSpBUU3UjSKpXJiqXeOLc8yJLFJ1L4gLQDAfHgQpz19jlLMzSHMLdHbzzrw03ZvGzAokPCymrbsUAa77rJQ2V8TCAsdEz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca79ad7d85043af-EWR
2024-09-28 23:45:02 UTC	445	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 65 72 Data Ascii: edStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.over
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['bor
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d 64 2e Data Ascii: ,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==d.
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 Data Ascii: height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientWid
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 Data Ascii: cated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},at
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 Data Ascii: per.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,i)
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e Data Ascii: ){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'en
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 6d 65 Data Ascii: ].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.placeme
2024-09-28 23:45:02 UTC	1369	IN	Data Raw: 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e Data Ascii: }(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProperty.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	151.101.66.137	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:02 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:02 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:45:02 GMT Age: 1686486 X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890034-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 1 X-Timer: S1727567103.776221,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	151.101.66.137	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:02 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:02 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:45:02 GMT Age: 993060 X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890093-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 1 X-Timer: S1727567103.908403,VS0,VE1 Vary: Accept-Encoding
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 23:45:02 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FQJB4T6K4NV855XKJR Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 51 4a 42 34 54 36 4b 34 4e 56 38 35 35 58 4b 4a 52 Data Ascii: Not Found - Request ID: 01J8XGC1FQJB4T6K4NV855XKJR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FRPZ4MQWPASSWEZXQ4 Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 52 50 5a 34 4d 51 57 50 41 53 53 57 45 5a 58 51 34 Data Ascii: Not Found - Request ID: 01J8XGC1FRPZ4MQWPASSWEZXQ4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FH1RTXZD5EX1PWTHX7 Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 48 31 52 54 58 5a 44 35 45 58 31 50 57 54 48 58 37 Data Ascii: Not Found - Request ID: 01J8XGC1FH1RTXZD5EX1PWTHX7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49729	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FN0H17ERDDA17XQCE2 Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 4e 30 48 31 37 45 52 44 44 41 31 37 58 51 43 45 32 Data Ascii: Not Found - Request ID: 01J8XGC1FN0H17ERDDA17XQCE2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FJYC0QT5AM0J9ATKV2 Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 4a 59 43 30 51 54 35 41 4d 30 4a 39 41 54 4b 56 32 Data Ascii: Not Found - Request ID: 01J8XGC1FJYC0QT5AM0J9ATKV2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC1FJZNVPBS183ADP8NDS Content-Length: 50 Connection: close
2024-09-28 23:45:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 31 46 4a 5a 4e 56 50 42 53 31 38 33 41 44 50 38 4e 44 53 Data Ascii: Not Found - Request ID: 01J8XGC1FJZNVPBS183ADP8NDS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49730	185.199.110.153	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:03 UTC	699	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 23:45:03 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740058-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727567103.438211,VS0,VE15 Vary: Accept-Encoding X-Fastly-Request-ID: 8166db2c9770f9ebd07080a4822691bde5ff0b11
2024-09-28 23:45:03 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49731	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:45:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=147599 Date: Sat, 28 Sep 2024 23:45:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	185.199.111.153	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:04 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:04 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 01:23:55 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2E9C:1D391E:15C0A09:180509F:66F7584D Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 23:45:04 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890058-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727567104.481811,VS0,VE13 Vary: Accept-Encoding X-Fastly-Request-ID: 3a4315b0fb678deeaace6de397bb8cd14a2667ae
2024-09-28 23:45:04 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49738	35.156.224.161	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:05 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:45:05 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 23:45:05 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XGC3H6KKR787P73V2KGFX4 Content-Length: 50 Connection: close
2024-09-28 23:45:05 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 47 43 33 48 36 4b 4b 52 37 38 37 50 37 33 56 32 4b 47 46 58 34 Data Ascii: Not Found - Request ID: 01J8XGC3H6KKR787P73V2KGFX4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:45:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=147627 Date: Sat, 28 Sep 2024 23:45:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 23:45:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2788, Parent PID: 5528

General

Target ID:	0
Start time:	19:44:53
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3032, Parent PID: 2788

General

Target ID:	2
Start time:	19:44:56
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2224,i,7493216822298213626,653781551684278391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6148, Parent PID: 5528

General

Target ID:	3
Start time:	19:44:59
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
http://pub-72f4175190054b068a6db1f116f55ca9.r2.dev/index.html