Edit tour

Windows Analysis Report
http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

Overview

General Information

Sample URL:	http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html
Analysis ID:	1521683
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2212,i,12326774807931181574,8110689988382216111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: pub-d2dba8f127424f0cb0341658081256fa.r2.dev

Virustotal: Detection: 12%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

Virustotal: Detection: 14%

Perma Link

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

HTTP Parser: Number of links: 0

Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49748 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:58292 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49748 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /kjhdishs.html HTTP/1.1Host: pub-d2dba8f127424f0cb0341658081256fa.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-d2dba8f127424f0cb0341658081256fa.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-d2dba8f127424f0cb0341658081256fa.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /kjhdishs.html HTTP/1.1Host: pub-d2dba8f127424f0cb0341658081256fa.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-d2dba8f127424f0cb0341658081256fa.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:16 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMQ072MKDCYQP58V4CFFGContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:16 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMQ0W58RKVZMR21D8HVE7Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:17 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMRG44GPSAZAQAF1T9T9PContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:17 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMRGJAGBFNBA32FZ45DYHContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:17 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMRGEQ87J1XKAVHHYNBV6Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:17 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMRGRZJ7176V78BE04725Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:17 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMRHD7VC1HEXGN70CMWA7Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:07:20 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHMV9SPZW4JH9Q309W46B4Content-Length: 50Connection: close

Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_89.2.dr, chromecache_88.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_73.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_73.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_73.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_73.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_73.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_73.2.dr	String found in binary or memory: https://managehomevsory.publicvm.com/fuc.php
Source: chromecache_73.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_82.2.dr, chromecache_81.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@17/42@18/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2212,i,12326774807931181574,8110689988382216111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2212,i,12326774807931181574,8110689988382216111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	15%	Virustotal		Browse
http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
code.jquery.com	1%	Virustotal	Browse
bestfilltype.netlify.app	0%	Virustotal	Browse
pub-d2dba8f127424f0cb0341658081256fa.r2.dev	12%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
15.164.165.52.in-addr.arpa	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://github.com/eslint/eslint/issues/6125	0%	Virustotal		Browse
https://github.com/jquery/jquery/pull/557)	0%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Virustotal		Browse
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	1%	Virustotal		Browse
https://managehomevsory.publicvm.com/fuc.php	3%	Virustotal		Browse
https://github.com/eslint/eslint/issues/3229	0%	Virustotal		Browse
https://github.com/jquery/sizzle/pull/225	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
code.jquery.com	151.101.130.137	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.132	true	false	0%, Virustotal, Browse	unknown
bestfilltype.netlify.app	35.156.224.161	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
pub-d2dba8f127424f0cb0341658081256fa.r2.dev	162.159.140.237	true	false	12%, Virustotal, Browse	unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	true		unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html	false		unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://jquery.org/license	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_82.2.dr, chromecache_81.2.dr	false	1%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://managehomevsory.publicvm.com/fuc.php	chromecache_73.2.dr	false	3%, Virustotal, Browse	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_89.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_73.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_73.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-54	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_82.2.dr, chromecache_81.2.dr	false	0%, Virustotal, Browse	unknown
https://sizzlejs.com/	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_82.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	pub-d2dba8f127424f0cb0341658081256fa.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.156.224.161	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521683
Start date and time:	2024-09-29 02:06:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@17/42@18/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.78, 64.233.184.84, 34.104.35.123, 172.217.16.202, 142.250.185.234, 142.250.186.67, 216.58.212.170, 172.217.16.138, 142.250.186.106, 142.250.184.202, 142.250.184.234, 142.250.186.74, 142.250.186.42, 142.250.186.170, 142.250.181.234, 142.250.74.202, 216.58.206.42, 142.250.186.138, 172.217.18.10, 216.58.206.74, 142.250.185.138, 4.245.163.56, 93.184.221.240, 192.229.221.95, 13.85.23.206, 13.95.31.18, 52.165.164.15, 52.165.165.26, 131.107.255.255, 20.12.23.50, 20.114.59.183, 142.250.186.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:07:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9646118229252787
Encrypted:	false
SSDEEP:	48:8ddKT2KewKH9idAKZdA19ehwiZUklqehay+3:8an09y
MD5:	F9CF2555D610757B2EDEDE6EA7FF3982
SHA1:	1EFF92E26CD7DE8916935B83F3B9EDA1E111D065
SHA-256:	325A1ED9BA6504595B454A64D0F6E345A9359E27420F335EFF16A3748EE4159D
SHA-512:	DD62BFB7715719A2631A1BBF0A9BFDAE84C211938A96D54DCF99A86CE0F5DB837579772A6812F915CB0896FBA6F13FDB3C0DA039B64233527983962313FA613D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:07:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.979842284724074
Encrypted:	false
SSDEEP:	48:8hdKT2KewKH9idAKZdA1weh/iZUkAQkqehty+2:8enG9Qgy
MD5:	AEF59FEFA352BA09C537020089E3FDA0
SHA1:	DA3B1E9745F48B5944C1E096BB38A0133073A718
SHA-256:	56A2369512A86388CC387EEA7AD39222B825F86FF30018A8EFA75AE83820780D
SHA-512:	05F4253A0DBE8F48E9E8DB37EDDFF0F06A5EE70C5F14771831A6738028CA427AFD1B10A220B58998F1C14FC82E666872A176D94D167B72FF3764EC26390CCE7C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9947896296374488
Encrypted:	false
SSDEEP:	48:8xXdKT2KewsH9idAKZdA14tseh7sFiZUkmgqeh7sDy+BX:8xknInxy
MD5:	4B88341B0CF58D8DCF5186993809C5A7
SHA1:	1B509750D01664D7C0ABCBD32A7FE2F3C2024834
SHA-256:	7296085DFF543AC7720C165FBE47A4FE8BFD41610C1E30A27034F78BFB984F54
SHA-512:	3CE1A2AC62DDF48861E8FAD6011F1CA4E1A66E458F1B8E2C2C10376125D2DC0D76B763D692688FA1CA43A100CE02A97788A5572D8472099C5947E08A914002E4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:07:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9801445056520843
Encrypted:	false
SSDEEP:	48:8KdKT2KewKH9idAKZdA1vehDiZUkwqehpy+R:8TnN7y
MD5:	76DE007AB0AB92E64377A011965B641E
SHA1:	0AEE993B025EA0E4FE5A710765E2ECD164EAE49E
SHA-256:	E4B5990F684A0C35E0FF8976B87B6D981D7BB9DD1E9848E0DB59554AAE81CB30
SHA-512:	071244588D6BA91FEF695950F2EB263823664BDCC728210735CBE99E8818FC173A57FF850A054E18F0209FEBA138E1E728691C36E6572E4EF96F42992E7138D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:07:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9681140342209424
Encrypted:	false
SSDEEP:	48:8IdKT2KewKH9idAKZdA1hehBiZUk1W1qehHy+C:85nN9ny
MD5:	2A59D80B4E2C9F299F1BF0A6D9AFFFAB
SHA1:	854BBD6B5C9B51A55E68B4439F131CD816D71A18
SHA-256:	2474191939E66A8C07FBEC5A64FA3B6484F590FB747D5755E5C3F6B65B107C5D
SHA-512:	038FEF1AE4C12337D4A4069ED855F032512DB9EDE404402172AEC1205AADEEAD3D4F2D6D717EF168D57CD0072FCD155FBD8503A4327D2851A86DECC0E06BAFD9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....%.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:07:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9769037210097533
Encrypted:	false
SSDEEP:	48:8kXdKT2KewKH9idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxy+yT+:8kknRT/TbxWOvTbxy7T
MD5:	470D76911E371244E24A97B6587DA8F6
SHA1:	2C3E1639126389FEF28EDB9E78624A86F849CC1C
SHA-256:	14DD1A323F1C0344219C3B79C4CC7BE4C2A86FBCB00FCCB6C465D932F09AD572
SHA-512:	7E771ED31A9C800956601552C8EA5EAC7C2E90B0C722C80DF120CE8A8DB28633A354DE364859417D76EA970A334BED92DBB5F1A7CD719C8AED495613ACEF0E1B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......v.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.901467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9RU0W2QnR:ObPH/RU06R
MD5:	043055E5D16247AC8ED0A2C0B5441F25
SHA1:	662F9D4863D027C422A044EB357FE49EE1AF17A5
SHA-256:	49FC1407C5F5E8C0548AA81520DE43252C521245036DEFC1C4C9B32F1F48D743
SHA-512:	167ED3FED616BB779309A98FFE2A8E58CB79648C50B8651210CE863007049C5195C827EB484BE6EE9F4D6D3F0C64E9CA6E80B52FA3420AB1222806B1E5CC4CA0
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XHMV9SPZW4JH9Q309W46B4

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242717
Encrypted:	false
SSDEEP:	3:ObynQA2d93rBi:ObPH/3I
MD5:	552C9155E3A3DABBB8BC8F8075835F34
SHA1:	2D09FA4AF8003FB1CAAA375C1F444B6850FAEED4
SHA-256:	571031EC0B261DE827B1C2F0E8C7AD989E19DE977A23DD5F7387776861E17ABE
SHA-512:	1148312373A898119210971841C79463D9049D86B5D85701BADDBC6A8BB169A0E06C10D2EEF69BD540BEC693DA400A622D0616CE42A3368792B538CB1C495B72
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XHMRGEQ87J1XKAVHHYNBV6

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	62731
Entropy (8bit):	4.704176030406668
Encrypted:	false
SSDEEP:	384:i3kpGjqAdimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBW:i3ksjqA5kikTYXa1oGBR26t
MD5:	1E9F3CC6D54D9D1AF9BFB26390F1715A
SHA1:	75D6D4003AD8CC0AA327833FC57ABA36CF8956C5
SHA-256:	194288D2A1D159BF0755ABEDDAD5681D0F58E1D1667E9C57D1A17ED862F9C0E9
SHA-512:	E4561ABDF28EE5743A3A05E61C6D195E875BDF52058B86B97A613856D5D8EDB04959497ECA12F6C6BD0A3960B01C6F3B9F82BC997C72D89F58FDE9F7EE192EC6
Malicious:	false
Reputation:	low
URL:	https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.821467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9H33ozXn:ObPH/noT
MD5:	E43DCCCC48441F30B7C75E77133A6069
SHA1:	3761E8628B120D4A1A8946EB659D4B6792AE6D83
SHA-256:	4A983F1792ED81564C28439D5D26D3535F4C5E52A4DD9F5CBEA5C1D5E439F4DD
SHA-512:	96CF9426643CFB6AB7784F364A388AA554C8CB8715360C4C824B70A6E75AFCE5D01356357447B1771BC11DFD489F34723443EF593629CBDE9B9BF5DE6255887D
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XHMQ0W58RKVZMR21D8HVE7

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9zV0qocxE:ObPH/50qoAE
MD5:	FC8C09A76000756218BBA7D3341992AB
SHA1:	7CC85A7B686BC3BA60499D0440707C7CFCC7C8F2
SHA-256:	A198B02C4959A3AC550185D841506FEE921670D861A11EC758C6715F3FD8C737
SHA-512:	F09ADAD919F0D2EF8796BE7B4A3CC7A2622BD8D8B229C26013BB0960F54577D135183FD24800FB4132E21BC127E484C5D9E604734A10BE5EB237CE7DE76A2DA9
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XHMRG44GPSAZAQAF1T9T9P

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9jS/ogV0A:ObPH/j2oQf
MD5:	28A22D8D867ED8D14686726172E13E63
SHA1:	0ECE6285EC3445BB7EC1674678423B7F1696B19B
SHA-256:	29404F405CC0D3323F18CF4BCF8E0F197795CD80D7C3847FE1AD8EE23239A431
SHA-512:	A78AD37D512E6B03532D658788BB065DB5AFFF3221E00BF8A88573A280D66D5F35C81FBAB906E041DC8511282F8866E6DB366ED46BA0B3A20C5637DB7DF14CC4
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XHMRGRZJ7176V78BE04725

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9/3kYR08t:ObPH//3rR08t
MD5:	AF28606F18142E86D0CC66634E23AF08
SHA1:	F3414DDF039650D19E44279757F3B96AE7269482
SHA-256:	58CFB1507766C4A292417CDDEA64A3F2A7339DC577FB4EEAC8B3163D8024EA92
SHA-512:	D76B99E99A72651008E76C740E350170EB0891223414F2C19CAF80B687C527DB845FCFF2F17B77A6792E444864638879F8B299F804EEE48BF3E734DBCDDA472B
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XHMRGJAGBFNBA32FZ45DYH

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQljVcL8U0-UyBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCUZrZ78hyLqYEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCcyvF9pr4EeyEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCVJoOtinm4dGEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCVtoagg-D7mzEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:07:07.810018063 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:07.810018063 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:07.919375896 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:13.860475063 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:13.860594988 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:13.865330935 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:13.865341902 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:13.865427971 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:13.865428925 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:13.865573883 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:13.870326042 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.326937914 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.375730991 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.410664082 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.410722017 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.410775900 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.412328005 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.412341118 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.910154104 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.910571098 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.910636902 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.911645889 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.911722898 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.912686110 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.912760973 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.912872076 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:14.912889004 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:14.954185963 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.171237946 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171287060 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171324015 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171375990 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171406031 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171469927 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.171469927 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.171504974 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171547890 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.171554089 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171586037 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.171618938 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.171623945 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.176104069 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.176135063 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.176158905 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.176165104 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.176219940 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264065027 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264132977 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264177084 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264205933 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264215946 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264236927 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264290094 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264329910 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264348030 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264353991 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264365911 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264419079 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264681101 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264744997 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264796019 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264799118 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264811039 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264859915 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.264867067 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264874935 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.264924049 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.265567064 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265621901 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265665054 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265686035 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.265697956 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265743017 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265748978 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.265760899 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.265809059 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.266432047 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.298829079 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.298863888 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.298914909 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.299011946 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.299124002 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.299184084 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.299721003 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.299793005 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.299861908 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.301561117 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.301569939 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.301862001 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.301887989 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.302201986 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.302234888 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.307415009 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.311517954 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.354449034 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.354468107 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356230974 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356268883 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356297016 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356301069 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356312037 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356353998 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356367111 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356403112 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356406927 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356417894 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356455088 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356466055 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356501102 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356507063 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356551886 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356558084 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356575966 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.356601954 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.356625080 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.358721972 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:15.358737946 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:15.373908043 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.373951912 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:15.374027014 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.374115944 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.374150991 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:15.374209881 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.374488115 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.374497890 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:15.374635935 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:15.374650002 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:15.586941957 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:15.587038994 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:15.587112904 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:15.587625027 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:15.587654114 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:15.792001963 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.793365955 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.793399096 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.794902086 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.794998884 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.797868967 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.798206091 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.798475027 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.798490047 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.800851107 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.801263094 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.801270008 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.802299023 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.802347898 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.803894997 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.803937912 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.804364920 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.804371119 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.842725039 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.845613956 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.879812002 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.894788027 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.894860029 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.898752928 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.898829937 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.899683952 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.899863005 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.900057077 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.900073051 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907337904 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907427073 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907468081 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.907474995 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907691002 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907718897 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907738924 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.907742977 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.907787085 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.907790899 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.908206940 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.908237934 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.908266068 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.908272982 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.908312082 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.912094116 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.919420958 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.919496059 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.919501066 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:15.936115980 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936249971 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936305046 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.936341047 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936451912 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936499119 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.936508894 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936614990 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.936660051 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.936667919 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.937014103 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.937057972 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.937066078 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.937155962 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.937211037 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.937216997 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:15.941915989 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.964922905 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:15.980092049 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:15.980113983 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.005672932 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005683899 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005718946 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005738974 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005753994 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005768061 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.005776882 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.005805969 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.005806923 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.005831003 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.006983042 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.006999016 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.007057905 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.007071018 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.007107973 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.012578964 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.015248060 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.015273094 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.015371084 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015459061 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015492916 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015505075 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.015517950 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015552044 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.015556097 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015842915 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.015882015 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.015887022 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.016073942 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.016119003 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.016123056 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.016309023 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.016376019 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.016927958 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.016969919 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.016973019 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.020812035 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.020937920 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.021326065 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.021334887 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.022463083 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.022510052 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.022514105 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.024786949 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.025043011 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.025068045 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.026082993 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.026139975 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.027697086 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.027751923 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.027873039 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:16.028100014 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.028440952 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.028493881 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:16.028507948 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.028690100 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.028898954 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:16.031125069 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.031135082 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.035659075 CEST	49717	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:07:16.035706997 CEST	443	49717	104.17.25.14	192.168.2.5
Sep 29, 2024 02:07:16.063167095 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.063196898 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.063283920 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.064116001 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.064127922 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.073218107 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.073231936 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.073232889 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.092609882 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.092628002 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.092680931 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.092685938 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.092736006 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.092736006 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.094234943 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.094250917 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.094294071 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.094322920 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.094329119 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.094378948 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.094408989 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.094420910 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.097229004 CEST	49715	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.097246885 CEST	443	49715	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.105966091 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106180906 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106234074 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.106246948 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106388092 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106434107 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.106445074 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106554985 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106637955 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.106647968 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.106986046 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.107026100 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.107036114 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.107136965 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.107187033 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.107196093 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108045101 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108093023 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.108103991 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108233929 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108282089 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.108294010 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108699083 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108755112 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.108763933 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108901024 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.108948946 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.108983040 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.109102011 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.109149933 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.109160900 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.113046885 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.113095999 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.113107920 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.113257885 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.113301992 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.113313913 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.152946949 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.152975082 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.200577974 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.200669050 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.200685024 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.200809002 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.200855970 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.200867891 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201019049 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201081038 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.201091051 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201200008 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201244116 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.201252937 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201396942 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201448917 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.201458931 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201900959 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201922894 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201958895 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.201963902 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.201980114 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.202013969 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.202013969 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.202069998 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.202133894 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.202146053 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.203645945 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.203690052 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.203731060 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.203752995 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.203768015 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.203807116 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.203829050 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.205193996 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.205303907 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.205333948 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.205353975 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.205378056 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.240212917 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:16.240519047 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:16.240564108 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:16.241539001 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:16.241600037 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:16.257883072 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.291507959 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.291532040 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.291584015 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.291610003 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.291625023 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.291646957 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.291682959 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.291707993 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.292267084 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.292315006 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.292356014 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.292372942 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.292397022 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.292416096 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.293206930 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.293248892 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.293287992 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.293304920 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.293322086 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.293369055 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.294285059 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.294332027 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.294353962 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.294364929 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.294392109 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.294405937 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.325392962 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.325464964 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.325522900 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.325998068 CEST	49720	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.326015949 CEST	443	49720	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.344290972 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.344356060 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.344434977 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.344769001 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.344785929 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.381876945 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.381930113 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.381962061 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.381983042 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382009029 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382042885 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382312059 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382354975 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382385969 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382395983 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382452011 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382452011 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382824898 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382890940 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382905960 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382922888 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.382951975 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.382972956 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383126974 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.383194923 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383217096 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.383280039 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383667946 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.383723974 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.383760929 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383783102 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383794069 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.383856058 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.383949995 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.384002924 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.384018898 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.384036064 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.384078979 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.384181976 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.384231091 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.384294033 CEST	49716	443	192.168.2.5	151.101.130.137
Sep 29, 2024 02:07:16.384342909 CEST	443	49716	151.101.130.137	192.168.2.5
Sep 29, 2024 02:07:16.523334980 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.523724079 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.523735046 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.525163889 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.525223017 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.525829077 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.525912046 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.526191950 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.526199102 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.581454992 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.645102024 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645164013 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645203114 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645240068 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645241976 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.645257950 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645319939 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.645356894 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.645356894 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.645365000 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.646337986 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.646486044 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.646496058 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.646691084 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.647022009 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.647028923 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.649717093 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.649795055 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.649806023 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.702840090 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.733026981 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733186960 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733246088 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733294964 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.733309984 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733381033 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.733386993 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733478069 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:16.733526945 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.814908981 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:16.815367937 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:16.857773066 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:16.857808113 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:16.900259018 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.900342941 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.900424957 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.900702953 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.900742054 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.900796890 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.901087046 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:16.901664019 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.901671886 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.901844978 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.902620077 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.902642965 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.902731895 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.903687000 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.903718948 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.903950930 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.903965950 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.904453993 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.904468060 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.904670000 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.904706001 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.907835007 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.907881021 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.908014059 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.930382967 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:16.930427074 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:16.930545092 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:16.945089102 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:16.945111990 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:16.945732117 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:16.945749044 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:16.946585894 CEST	49722	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:07:16.946607113 CEST	443	49722	104.17.24.14	192.168.2.5
Sep 29, 2024 02:07:17.401031971 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.417789936 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:17.417933941 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:17.431143999 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.431157112 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.432287931 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.432377100 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.453327894 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.453402042 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.454425097 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.454438925 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.498749018 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.530272961 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:17.539876938 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.548957109 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.548970938 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.551594019 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551677942 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551708937 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551734924 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551757097 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.551773071 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551801920 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.551812887 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.551866055 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.551870108 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.552541971 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.552576065 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.552594900 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.552615881 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.552726030 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.552730083 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.553158998 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.553235054 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.553848982 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.554138899 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.555813074 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.555999994 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.556180000 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.556195021 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.556576014 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.556647062 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.556654930 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.557029009 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.557123899 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.557179928 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.557498932 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.557507992 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.557683945 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.557689905 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.557941914 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.558063030 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.558182955 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.558245897 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.559019089 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.559190989 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.559201956 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.577043056 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.588161945 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.588359118 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.588845968 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.589081049 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.589102983 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.589167118 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.590111971 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.590167046 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.590529919 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.593983889 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.594042063 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.594289064 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.594304085 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.594485044 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.594491005 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.599422932 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.608931065 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.608994961 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.635401011 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.635653973 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.635746002 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.643688917 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643701077 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643731117 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643743038 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643759012 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643785000 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.643790007 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.643829107 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.643862009 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.646930933 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.646948099 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.647038937 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.647051096 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.647089005 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.730561972 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.730582952 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.730675936 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.730689049 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.730743885 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.730928898 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.731230021 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.731246948 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.731296062 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.731302977 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.731343985 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.731405020 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.731637001 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.731713057 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.731755972 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.731756926 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.789398909 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.853388071 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.853594065 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.853672981 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.868935108 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.869122028 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.869247913 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.871660948 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.871742964 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.871820927 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.876126051 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.876211882 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.876265049 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.893557072 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.893615961 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.893779993 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.897690058 CEST	49729	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:17.897716045 CEST	443	49729	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:17.949436903 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.949443102 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.949688911 CEST	49727	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.949755907 CEST	443	49727	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.949979067 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.949994087 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.950268030 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.950273991 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:17.970434904 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:17.970454931 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:18.091582060 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:18.091615915 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:18.091685057 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:18.093647003 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:18.093658924 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:18.764635086 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:18.764719963 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.174015999 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:19.174971104 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:19.336834908 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.336869001 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.337213039 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.356964111 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:19.357057095 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:19.357145071 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:19.357801914 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:19.357836008 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:19.387743950 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.572676897 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.599792957 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:19.599848032 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:19.599975109 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:19.600474119 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:19.600487947 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:19.619400024 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.761960983 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.762026072 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.762295008 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.765065908 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.765099049 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.765110016 CEST	49733	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.765116930 CEST	443	49733	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.834009886 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.834057093 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:19.834136009 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.834784985 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:19.834798098 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.055425882 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.055774927 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.055803061 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.056148052 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.056504965 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.056575060 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.056766033 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.099410057 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.158828020 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.174308062 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.174329996 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.174396992 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.174422026 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.174473047 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.246016979 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.246046066 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.246119022 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.246143103 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.246182919 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.247720003 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.247740030 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.247816086 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.247823000 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.247863054 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.331854105 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.331877947 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.331921101 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.331933975 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.331971884 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.331993103 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.332932949 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.332952023 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.333005905 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.333014011 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.333055973 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.334722042 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.334759951 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.334784985 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.334791899 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.334835052 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.334845066 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.378356934 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.378376007 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.378417015 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.378426075 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.378458977 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.378472090 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.416296959 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.416783094 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:20.416815042 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.417103052 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.418989897 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.419008970 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.419055939 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.419065952 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.419111013 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.419883013 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:20.419934034 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.419953108 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.419956923 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.419991016 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.419996977 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.420030117 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.420053005 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.420259953 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:20.420711994 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.420730114 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.420766115 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.420772076 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.420802116 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.420815945 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.421633005 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.421670914 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.421686888 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.421693087 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.421756029 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.422457933 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.422491074 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.422525883 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.422532082 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.422560930 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.422574043 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.423352003 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.423361063 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.423427105 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.423433065 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.423471928 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.428595066 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.463406086 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.465933084 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.465956926 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.465995073 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.466003895 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.466052055 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.472733021 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.472806931 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.488734007 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.488749981 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.488975048 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.490555048 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.506241083 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506263018 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506329060 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.506339073 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506381989 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.506484985 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506539106 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.506545067 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506587982 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.506926060 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506980896 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.506985903 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.506999969 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.507046938 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.535391092 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.542306900 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:07:20.542321920 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:07:20.734267950 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.734361887 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.734411001 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:20.751017094 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.751090050 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.751252890 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.816907883 CEST	49736	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:07:20.816936970 CEST	443	49736	35.156.224.161	192.168.2.5
Sep 29, 2024 02:07:20.818658113 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.818658113 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:07:20.818670034 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:20.818679094 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:07:26.169943094 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:26.170104027 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:26.170186043 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:26.512172937 CEST	49721	443	192.168.2.5	142.250.186.132
Sep 29, 2024 02:07:26.512218952 CEST	443	49721	142.250.186.132	192.168.2.5
Sep 29, 2024 02:07:29.226006985 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:29.226099968 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:30.513986111 CEST	49709	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:30.518838882 CEST	80	49709	162.159.140.237	192.168.2.5
Sep 29, 2024 02:07:30.655335903 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:30.655474901 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:30.655797005 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:30.655888081 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:30.655977964 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:30.656296015 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:30.656327963 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:30.660136938 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:30.660164118 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:31.246248960 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:31.246335030 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:42.190594912 CEST	58292	53	192.168.2.5	162.159.36.2
Sep 29, 2024 02:07:42.195436954 CEST	53	58292	162.159.36.2	192.168.2.5
Sep 29, 2024 02:07:42.195657969 CEST	58292	53	192.168.2.5	162.159.36.2
Sep 29, 2024 02:07:42.195657969 CEST	58292	53	192.168.2.5	162.159.36.2
Sep 29, 2024 02:07:42.200536013 CEST	53	58292	162.159.36.2	192.168.2.5
Sep 29, 2024 02:07:42.648811102 CEST	53	58292	162.159.36.2	192.168.2.5
Sep 29, 2024 02:07:42.680337906 CEST	58292	53	192.168.2.5	162.159.36.2
Sep 29, 2024 02:07:42.685544014 CEST	53	58292	162.159.36.2	192.168.2.5
Sep 29, 2024 02:07:42.687985897 CEST	58292	53	192.168.2.5	162.159.36.2
Sep 29, 2024 02:07:50.398344040 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:07:50.398416042 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:07:59.339396000 CEST	49710	80	192.168.2.5	162.159.140.237
Sep 29, 2024 02:07:59.344153881 CEST	80	49710	162.159.140.237	192.168.2.5
Sep 29, 2024 02:08:15.648340940 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:15.648371935 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:15.648430109 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:15.648837090 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:15.648849964 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:16.468868017 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:16.469136953 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:16.469150066 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:16.469475031 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:16.469810009 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:16.469875097 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:16.511643887 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:26.365159988 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:26.365259886 CEST	443	58298	216.58.206.68	192.168.2.5
Sep 29, 2024 02:08:26.365546942 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:26.514584064 CEST	58298	443	192.168.2.5	216.58.206.68
Sep 29, 2024 02:08:26.514616966 CEST	443	58298	216.58.206.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:07:12.218497038 CEST	53	52419	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:12.238138914 CEST	53	49997	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:13.239025116 CEST	53	52143	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:13.849409103 CEST	56300	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:13.849561930 CEST	53141	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:13.858138084 CEST	53	56300	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:13.858916044 CEST	53	53141	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:14.398597002 CEST	55373	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:14.398752928 CEST	55537	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:14.407051086 CEST	53	55373	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:14.407434940 CEST	53	55537	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.288682938 CEST	60200	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.289058924 CEST	57675	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.290316105 CEST	54879	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.290623903 CEST	58463	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.294373989 CEST	53	60370	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.295408964 CEST	53	60200	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.295576096 CEST	53	57675	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.297133923 CEST	53	58463	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.297166109 CEST	53	54879	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.298150063 CEST	53	52201	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.364227057 CEST	65060	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.364535093 CEST	61655	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.373081923 CEST	53	61655	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.373486042 CEST	53	65060	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.578062057 CEST	58514	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.578665972 CEST	57060	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:15.584908009 CEST	53	58514	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:15.585264921 CEST	53	57060	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:16.054754019 CEST	50057	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:16.055102110 CEST	56545	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:16.061568022 CEST	53	50057	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:16.062339067 CEST	53	56545	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:16.898783922 CEST	54796	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:16.899121046 CEST	58770	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:16.905580997 CEST	53	54796	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:16.905896902 CEST	53	58770	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:17.456969976 CEST	53	64834	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:19.611151934 CEST	53	52861	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:30.566456079 CEST	53	60742	1.1.1.1	192.168.2.5
Sep 29, 2024 02:07:42.190023899 CEST	53	56500	162.159.36.2	192.168.2.5
Sep 29, 2024 02:07:42.829926968 CEST	55480	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:07:42.837389946 CEST	53	55480	1.1.1.1	192.168.2.5
Sep 29, 2024 02:08:15.640508890 CEST	58601	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:08:15.647069931 CEST	53	58601	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:07:13.849409103 CEST	192.168.2.5	1.1.1.1	0x6704	Standard query (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:13.849561930 CEST	192.168.2.5	1.1.1.1	0x758a	Standard query (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:07:14.398597002 CEST	192.168.2.5	1.1.1.1	0x7b95	Standard query (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:14.398752928 CEST	192.168.2.5	1.1.1.1	0x34e1	Standard query (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:07:15.288682938 CEST	192.168.2.5	1.1.1.1	0x5d32	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.289058924 CEST	192.168.2.5	1.1.1.1	0x6425	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:07:15.290316105 CEST	192.168.2.5	1.1.1.1	0x257c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.290623903 CEST	192.168.2.5	1.1.1.1	0x2ef3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:07:15.364227057 CEST	192.168.2.5	1.1.1.1	0x917b	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.364535093 CEST	192.168.2.5	1.1.1.1	0x1aa0	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 02:07:15.578062057 CEST	192.168.2.5	1.1.1.1	0x56dc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.578665972 CEST	192.168.2.5	1.1.1.1	0x14ad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:07:16.054754019 CEST	192.168.2.5	1.1.1.1	0x73a1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.055102110 CEST	192.168.2.5	1.1.1.1	0x5a14	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:07:16.898783922 CEST	192.168.2.5	1.1.1.1	0x782c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.899121046 CEST	192.168.2.5	1.1.1.1	0xca95	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:07:42.829926968 CEST	192.168.2.5	1.1.1.1	0xa7b7	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 02:08:15.640508890 CEST	192.168.2.5	1.1.1.1	0xfb79	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:07:13.858138084 CEST	1.1.1.1	192.168.2.5	0x6704	No error (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:13.858138084 CEST	1.1.1.1	192.168.2.5	0x6704	No error (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:14.407051086 CEST	1.1.1.1	192.168.2.5	0x7b95	No error (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:14.407051086 CEST	1.1.1.1	192.168.2.5	0x7b95	No error (0)	pub-d2dba8f127424f0cb0341658081256fa.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.295408964 CEST	1.1.1.1	192.168.2.5	0x5d32	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.295408964 CEST	1.1.1.1	192.168.2.5	0x5d32	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.295408964 CEST	1.1.1.1	192.168.2.5	0x5d32	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.295408964 CEST	1.1.1.1	192.168.2.5	0x5d32	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.297133923 CEST	1.1.1.1	192.168.2.5	0x2ef3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:07:15.297166109 CEST	1.1.1.1	192.168.2.5	0x257c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.297166109 CEST	1.1.1.1	192.168.2.5	0x257c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.373486042 CEST	1.1.1.1	192.168.2.5	0x917b	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.373486042 CEST	1.1.1.1	192.168.2.5	0x917b	No error (0)	bestfilltype.netlify.app		52.58.254.253	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.584908009 CEST	1.1.1.1	192.168.2.5	0x56dc	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:15.585264921 CEST	1.1.1.1	192.168.2.5	0x14ad	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:07:16.061568022 CEST	1.1.1.1	192.168.2.5	0x73a1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.061568022 CEST	1.1.1.1	192.168.2.5	0x73a1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.062339067 CEST	1.1.1.1	192.168.2.5	0x5a14	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:07:16.905580997 CEST	1.1.1.1	192.168.2.5	0x782c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.905580997 CEST	1.1.1.1	192.168.2.5	0x782c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.905580997 CEST	1.1.1.1	192.168.2.5	0x782c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:16.905580997 CEST	1.1.1.1	192.168.2.5	0x782c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:28.143250942 CEST	1.1.1.1	192.168.2.5	0x79ff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:07:28.143250942 CEST	1.1.1.1	192.168.2.5	0x79ff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:41.190658092 CEST	1.1.1.1	192.168.2.5	0xfb08	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:07:41.190658092 CEST	1.1.1.1	192.168.2.5	0xfb08	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:07:42.837389946 CEST	1.1.1.1	192.168.2.5	0xa7b7	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 02:08:15.647069931 CEST	1.1.1.1	192.168.2.5	0xfb79	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-d2dba8f127424f0cb0341658081256fa.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

bestfilltype.netlify.app

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	162.159.140.237	80	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:07:13.865573883 CEST	471	OUT	GET /kjhdishs.html HTTP/1.1 Host: pub-d2dba8f127424f0cb0341658081256fa.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:07:14.326937914 CEST	527	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 00:07:14 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 01:07:14 GMT Location: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7bb5a38cf1865-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 02:07:59.339396000 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	162.159.140.237	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:14 UTC	699	OUT	GET /kjhdishs.html HTTP/1.1 Host: pub-d2dba8f127424f0cb0341658081256fa.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:15 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:07:15 GMT Content-Type: text/html Content-Length: 62731 Connection: close Accept-Ranges: bytes ETag: "1e9f3cc6d54d9d1af9bfb26390f1715a" Last-Modified: Thu, 11 Apr 2024 23:50:10 GMT Server: cloudflare CF-RAY: 8ca7bb5eaf632395-EWR
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 70 72 65 6c 6f 61 64 65 72 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 Data Ascii: ransform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{ transform: translateX(-50px); }}.preloader{ position: fixed; width: 100%;
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 0d 0a 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 Data Ascii: width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; } .form-box-main{ display: block; text-align: center; }} </style></head><body>
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 74 22 3e 45 73 74 6f 6e 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 61 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 22 3e 53 75 6f 6d 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 6c 22 3e 46 69 6c Data Ascii: ption value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value="et">Estonian</option><option value="fa"></option><option value="fi">Suomi</option><option value="fil">Fil
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 76 22 3e 53 76 65 6e 73 6b 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 77 22 3e 53 77 61 68 69 6c 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 74 61 22 3e e0 ae a4 e0 ae ae e0 ae bf e0 ae b4 e0 af 8d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 Data Ascii: option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option value="sv">Svenska</option><option value="sw">Swahili</option><option value="ta"></option><option value="
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 2d 62 6f 78 20 62 6f 78 2d 73 65 6c 65 63 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 69 64 3d 22 77 6f 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 22 Data Ascii: /div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4> <div class="select-box box-selec"> <select id="word"> <option value="12"
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 32 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 Data Ascii: type.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div> <div class="input-form"> <label for="">2. </label> <input type="password" class="word-12">
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 36 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e Data Ascii: </div> <div class="input-form"> <label for="">6. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	104.17.25.14	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:15 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:15 UTC	926	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:07:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 868664 Expires: Fri, 19 Sep 2025 00:07:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZZBbGIZTH62xByra7X5GB59fpEwAdqb7Mx78tpeLZ9JBRqGhLdVVywcQjaAMsKxGR2Jtjxhthf7WBnsn%2BijdRwoDzjZcJpe9dkpKzhdYpbO9vn2Jw0%2BRT6VLzbTy6WijM4CFqG2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7bb643f074233-EWR
2024-09-29 00:07:15 UTC	443	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 Data Ascii: utedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.ov
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['b
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d Data Ascii: -m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 Data Ascii: h,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientW
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c Data Ascii: recated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c Data Ascii: opper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 Data Ascii: (e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 Data Ascii: -'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.place
2024-09-29 00:07:15 UTC	1369	IN	Data Raw: 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPropert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	151.101.130.137	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:15 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:15 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:07:15 GMT Age: 1687819 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 6 X-Timer: S1727568436.858815,VS0,VE0 Vary: Accept-Encoding
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:07:15 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	151.101.130.137	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:15 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:16 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3344645 Date: Sun, 29 Sep 2024 00:07:15 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727568436.951480,VS0,VE17 Vary: Accept-Encoding
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:07:16 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:16 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:16 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:16 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMQ072MKDCYQP58V4CFFG Content-Length: 50 Connection: close
2024-09-29 00:07:16 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 51 30 37 32 4d 4b 44 43 59 51 50 35 38 56 34 43 46 46 47 Data Ascii: Not Found - Request ID: 01J8XHMQ072MKDCYQP58V4CFFG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:16 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:16 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:16 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMQ0W58RKVZMR21D8HVE7 Content-Length: 50 Connection: close
2024-09-29 00:07:16 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 51 30 57 35 38 52 4b 56 5a 4d 52 32 31 44 38 48 56 45 37 Data Ascii: Not Found - Request ID: 01J8XHMQ0W58RKVZMR21D8HVE7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	104.17.24.14	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:16 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:16 UTC	924	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:07:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 868665 Expires: Fri, 19 Sep 2025 00:07:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uBTHf17h0Ir21GbYaTqAdJ7fXdCAfGz1OduFE6Dnktz1BMD0QCssL8bosyR0RFNshnfLIT7hdCGVafsiKAUL6T2zQh8CvoxfzMF%2FmFDxyzMfQw16bJGAeFeIOHctZs5INqUi2XQe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7bb68b997c454-EWR
2024-09-29 00:07:16 UTC	445	IN	Data Raw: 33 39 37 62 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 397b/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 65 72 Data Ascii: edStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.over
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['bor
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d 64 2e Data Ascii: ,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==d.
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 Data Ascii: height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientWid
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 Data Ascii: cated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},at
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 Data Ascii: per.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,i)
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e Data Ascii: ){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'en
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 6d 65 Data Ascii: ].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.placeme
2024-09-29 00:07:16 UTC	1369	IN	Data Raw: 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e Data Ascii: }(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProperty.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49729	151.101.194.137	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1687821 Date: Sun, 29 Sep 2024 00:07:17 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890026-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1727568438.506567,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:07:17 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:17 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMRG44GPSAZAQAF1T9T9P Content-Length: 50 Connection: close
2024-09-29 00:07:17 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 52 47 34 34 47 50 53 41 5a 41 51 41 46 31 54 39 54 39 50 Data Ascii: Not Found - Request ID: 01J8XHMRG44GPSAZAQAF1T9T9P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:17 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMRGEQ87J1XKAVHHYNBV6 Content-Length: 50 Connection: close
2024-09-29 00:07:17 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 52 47 45 51 38 37 4a 31 58 4b 41 56 48 48 59 4e 42 56 36 Data Ascii: Not Found - Request ID: 01J8XHMRGEQ87J1XKAVHHYNBV6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:17 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMRGRZJ7176V78BE04725 Content-Length: 50 Connection: close
2024-09-29 00:07:17 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 52 47 52 5a 4a 37 31 37 36 56 37 38 42 45 30 34 37 32 35 Data Ascii: Not Found - Request ID: 01J8XHMRGRZJ7176V78BE04725

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49727	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:17 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMRGJAGBFNBA32FZ45DYH Content-Length: 50 Connection: close
2024-09-29 00:07:17 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 52 47 4a 41 47 42 46 4e 42 41 33 32 46 5a 34 35 44 59 48 Data Ascii: Not Found - Request ID: 01J8XHMRGJAGBFNBA32FZ45DYH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:17 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:17 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:17 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMRHD7VC1HEXGN70CMWA7 Content-Length: 50 Connection: close
2024-09-29 00:07:17 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 52 48 44 37 56 43 31 48 45 58 47 4e 37 30 43 4d 57 41 37 Data Ascii: Not Found - Request ID: 01J8XHMRHD7VC1HEXGN70CMWA7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:07:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=146263 Date: Sun, 29 Sep 2024 00:07:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49737	151.101.194.137	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:20 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:20 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:07:20 GMT Age: 3344649 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1727568440.110773,VS0,VE2 Vary: Accept-Encoding
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-09-29 00:07:20 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49736	35.156.224.161	443	2848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:20 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:07:20 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:07:20 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHMV9SPZW4JH9Q309W46B4 Content-Length: 50 Connection: close
2024-09-29 00:07:20 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 4d 56 39 53 50 5a 57 34 4a 48 39 51 33 30 39 57 34 36 42 34 Data Ascii: Not Found - Request ID: 01J8XHMV9SPZW4JH9Q309W46B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:07:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:07:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=146292 Date: Sun, 29 Sep 2024 00:07:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:07:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3012, Parent PID: 5376

General

Target ID:	0
Start time:	20:07:08
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2848, Parent PID: 3012

General

Target ID:	2
Start time:	20:07:09
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2212,i,12326774807931181574,8110689988382216111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5352, Parent PID: 5376

General

Target ID:	3
Start time:	20:07:13
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
http://pub-d2dba8f127424f0cb0341658081256fa.r2.dev/kjhdishs.html