Edit tour

Windows Analysis Report
http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html
Analysis ID:	1521699
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,629292695956927927,3019262032975829470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for submitted file

Source: http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

Virustotal: Detection: 18%

Perma Link

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-350a846a0e7e4389a5b4fd3d333108f4.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-350a846a0e7e4389a5b4fd3d333108f4.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGJWB8D1AZ0ESQ3YA13W1Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGJWMWQZ561381FD0K8D5Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGK2Y6FGY22EQE5Z6QAD6Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGK3K9P5REHZ3XDD5A5B2Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGK3R1J64GSHWYQZB73AGContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:29 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGK3RBW71X0VH9WWDPPXRContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:22:31 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJGMV3XND971E957JZZTPSContent-Length: 50Connection: close

Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_57.2.dr, chromecache_68.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_58.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_58.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_58.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_58.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_58.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_58.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_55.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_58.2.dr	String found in binary or memory: https://ikulopinawaeniyan.publicvm.com/newes.php
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_58.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_62.2.dr, chromecache_63.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@17/36@16/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,629292695956927927,3019262032975829470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,629292695956927927,3019262032975829470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering
http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	19%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://github.com/jquery/jquery/pull/557)	0%	Virustotal		Browse
https://github.com/eslint/eslint/issues/3229	0%	Virustotal		Browse
https://github.com/eslint/eslint/issues/6125	0%	Virustotal		Browse
https://github.com/jquery/sizzle/pull/225	0%	Virustotal		Browse
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	1%	Virustotal		Browse
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://ikulopinawaeniyan.publicvm.com/newes.php	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	172.66.0.235	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
bestfilltype.netlify.app	18.192.231.252	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	true		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html	false		unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://jquery.org/license	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_62.2.dr, chromecache_63.2.dr	false	1%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_57.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://ikulopinawaeniyan.publicvm.com/newes.php	chromecache_58.2.dr	false	2%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-61	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_58.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_58.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-54	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_62.2.dr, chromecache_63.2.dr	false	0%, Virustotal, Browse	unknown
https://sizzlejs.com/	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_62.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
18.192.231.252	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.66.0.235	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521699
Start date and time:	2024-09-29 02:21:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@17/36@16/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.110.84, 142.250.184.206, 34.104.35.123, 142.250.184.202, 142.250.185.170, 142.250.185.227, 142.250.186.170, 142.250.185.74, 142.250.181.234, 172.217.18.10, 216.58.212.170, 172.217.16.138, 142.250.185.106, 216.58.206.42, 142.250.186.74, 142.250.186.42, 216.58.206.74, 142.250.186.138, 172.217.18.106, 142.250.186.106, 172.217.16.202, 52.165.165.26, 217.20.57.34, 192.229.221.95, 20.242.39.171, 13.95.31.18
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Type your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"confirm", "text_input_field_labels":["eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close", "eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2d9FppiKGZX:ObPH/PpRGp
MD5:	A3E7AA3E28B28351B30B4383BD31BF01
SHA1:	D161FC04259FE39E31ACFE6A45AAF8740FE7AA0C
SHA-256:	80DB7AD5561A91B4AAF2AFBF98096BD917146E3A7DD02B61C14D9E57474AC779
SHA-512:	DD064676AC66D0E2AD6126B3411FD8E6EA623A6652C647EEDD35B5E580332CC08999A34E5495FEE3AEAF6E34E84CEF6E2B6402AFCE606E5C50E7C4C6E37713BD
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XJGK3K9P5REHZ3XDD5A5B2

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.941467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9FwU4SGnd:ObPH/sSGnd
MD5:	DAC2FF3C53CABCA570901594E536D9F3
SHA1:	56323C3828232007830A39159EB48643AFFBD634
SHA-256:	DF16EA65025A489F3FFD8D44507AA9BAB44CA6E73C939BDE691CB50F95DE4336
SHA-512:	9894303157632B882B3F6C0EE68A2996A9016D24AED2904CF471E0BFF2E3D75738DF4ACEB76EB493CC3440329DD2370C1CFC0B5E8749EAD078E7AF8CA0C76505
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XJGK3R1J64GSHWYQZB73AG

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQne_aka4vk_wRIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCftku7Yz33-KEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCaBgrde_9C-QEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCaYdIkBX1prMEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCZ6me4590d4CEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	62735
Entropy (8bit):	4.704169604558637
Encrypted:	false
SSDEEP:	384:i3kpGjqAdimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBN:i3ksjqA5kikTYXa1oGBRf6t
MD5:	AB81CDC34E712E9F3FD75310F962FFEF
SHA1:	42904F427450D17438EFF772B7A45F79103139A8
SHA-256:	70DF829F6FB0654778E3FBE61DBFD735F280C8E5C45A5701A88285AC36135015
SHA-512:	402E768B5C243EC5860E7B173A6790F888F9308305CB56FF2FFEF687F86595A368A9906CE6CB13554F9B2F12C8AA6BAD3B537883D2AD26C27819FD0FE299AABB
Malicious:	false
Reputation:	low
URL:	https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9Fs3gDO:ObPH/GQO
MD5:	6D1358A9464BAFA3AE552A35F4ABDD4D
SHA1:	67133FDE074291F0C868F6E6F465E73EE39F686D
SHA-256:	98B17DAA4A5F8678C9962555F039FDACBB1A2E77AB71D612336428C8359CDFEC
SHA-512:	0DCC424FA4C68296409A1DFE5C7085A77DF1D984684010D2CA5E86A8B7127B29C8668754F878BBACC0FB2A63C657C60DFEAF2C4C1B3665A58AC1447C1E9E3984
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XJGK2Y6FGY22EQE5Z6QAD6

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.711272380112909
Encrypted:	false
SSDEEP:	3:ObynQA2d9Eyon/Q7oVudhQn:ObPH/EyoYMEs
MD5:	0DFB013E37A638990BFB6463AA832E32
SHA1:	6D7757DFFD293ACC45D21635A9CE88B62B1AC0EA
SHA-256:	5E911B2C413F46ED6D53FAF546327941159C231698B454B1C3F08BF202867233
SHA-512:	B1A758F957CA3723065B47979831C841235B7056D97201594DD0F549C3E57C683BC76052EFD806B4AF428C5498CD2B4D04B720241E0A822EDA0A1DB8EF013638
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XJGJWMWQZ561381FD0K8D5

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.766370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2d9FweZuyy1193n:ObPH/g33n
MD5:	895042DE5DE5A55687A3ADD028CF58AA
SHA1:	662F0EDA8085B28F354E930836C00E2996000F21
SHA-256:	9690945918E8CDDE1AF026C6036674C2EF14F469218DD6EDFD0003D3681593BB
SHA-512:	C9D81CB834B9B9B8D317969066EAE7B3A7CB920C2B4AEAD756A993C0FFBC53FCD24F772E415DF5B1F0AAA938656D7E047F3AFA9EF1335AADFEE7E7E758AAD2B0
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XJGK3RBW71X0VH9WWDPPXR

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2d9D6vcSUgoi:ObPH/dS5h
MD5:	9BB50BAEE4AA569C174F1440B0F13865
SHA1:	A217B1DBAC3F3C342591074CC0FC41D30B5B3586
SHA-256:	FF5209F9C142F0793C799AA92679111C58C1B23F517DB211CF491D1233112DB5
SHA-512:	AD45971D85F7A966779DF97E11CF58447E480952271E3A20357A157958F7021ACB615F4080152BEE7B62CFBE517C327CA75CE79974204C62C87567517850A10E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XJGMV3XND971E957JZZTPS

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:22:21.442827940 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 02:22:24.981112003 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:24.981168985 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:24.981249094 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:24.981414080 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:24.981434107 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.517339945 CEST	49736	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:25.517663002 CEST	49737	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:25.522192955 CEST	80	49736	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:25.522281885 CEST	49736	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:25.522366047 CEST	80	49737	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:25.522542953 CEST	49736	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:25.522545099 CEST	49737	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:25.527260065 CEST	80	49736	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:25.642718077 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.642998934 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:25.643050909 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.644042015 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.644109964 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:25.648566961 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:25.648644924 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.693356037 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:25.693382025 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:25.739772081 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:25.984047890 CEST	80	49736	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.007447958 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.007493973 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.007564068 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.007728100 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.007740974 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.036060095 CEST	49736	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.481749058 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.482234001 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.482271910 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.483984947 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.484074116 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.485239983 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.485326052 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.485589027 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.485605001 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.535382032 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.698561907 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698678017 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698721886 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698726892 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.698760986 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698805094 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698807001 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.698832989 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.698870897 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.698880911 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.699376106 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.699421883 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.699429989 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.703339100 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.703376055 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.703411102 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.703433990 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.703473091 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.789304018 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.789395094 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.789431095 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.789452076 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.789480925 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.789494038 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.789524078 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.789958000 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790002108 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790007114 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.790044069 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790098906 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.790112972 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790728092 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790771008 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790779114 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.790796041 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790843964 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790872097 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.790883064 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.790920019 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.791546106 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.791691065 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.791726112 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.791749001 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.791760921 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.791812897 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.792346001 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.792422056 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.792463064 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.792475939 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.794034004 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.794174910 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.794195890 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.836041927 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.881311893 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881427050 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881479025 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881505013 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.881534100 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881602049 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881635904 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.881678104 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881735086 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.881750107 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881922960 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.881978035 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.881989002 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.882030964 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:26.882050037 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.882075071 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.931859016 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.931931019 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:26.931992054 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.932837009 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.932873011 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:26.932925940 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.934861898 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:26.934968948 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:26.935048103 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:26.936786890 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.936836958 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:26.937275887 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:26.937289000 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:26.937844038 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:26.937880039 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:26.943182945 CEST	49740	443	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:26.943209887 CEST	443	49740	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:27.396791935 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.397270918 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.397285938 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.398169041 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.398185015 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:27.398266077 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.398323059 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.398387909 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.398420095 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.398608923 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:27.398669958 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:27.399467945 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.399574041 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.399807930 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:27.399868011 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:27.988935947 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.989119053 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.989288092 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:27.989475012 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:27.989665031 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:27.989960909 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.007114887 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.007134914 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.007291079 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.007324934 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.007436991 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.007460117 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.056809902 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.058815002 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.058886051 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.102040052 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102118015 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102147102 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102159023 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.102169037 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102205038 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102226019 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.102226019 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102232933 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102276087 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.102595091 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102622032 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102649927 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.102704048 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.102704048 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.102792978 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.106154919 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.106834888 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.106899023 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.106905937 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110131025 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110155106 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110194921 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110198975 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110215902 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110246897 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110255957 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110292912 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.110311985 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110323906 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110342979 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110363007 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.110372066 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110393047 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110404015 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110405922 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110439062 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110443115 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110476017 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110488892 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.110508919 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110711098 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110733032 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110754013 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110768080 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.110821962 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110846043 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.110874891 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.110965967 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.110976934 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.111016035 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.113009930 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.114846945 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.118094921 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.161441088 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.161585093 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.161628962 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.161664963 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.189052105 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189126968 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189160109 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189177990 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.189184904 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189193964 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189233065 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189234018 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.189243078 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.189270973 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.189929962 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190006018 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190048933 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190078020 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190103054 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190109015 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190119028 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190128088 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190155029 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190192938 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190387964 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190440893 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190459013 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190820932 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190855026 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190879107 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190886021 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190898895 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.190948009 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.190962076 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.191133976 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.191565037 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.191622972 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.191674948 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.191689014 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.192958117 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.193001032 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.193006992 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.193140030 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.193165064 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.193172932 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.193176985 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.193212986 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.193218946 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.196850061 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.196880102 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.196906090 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.196932077 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.196999073 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.197057962 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.197072983 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.197138071 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.197334051 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197391033 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197417974 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197421074 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.197427034 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197475910 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.197479963 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197511911 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.197541952 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197877884 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197907925 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197932959 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197952986 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.197973967 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.197999954 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.198488951 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.198513985 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.198539972 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.198550940 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.198569059 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.198597908 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.199222088 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.199259043 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.199289083 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.199307919 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.199369907 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.241292000 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.242631912 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.247303009 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275701046 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275755882 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.275759935 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275772095 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275813103 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.275818110 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275825977 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.275871038 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.275881052 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.276459932 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.276485920 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.276571035 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.276577950 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.276947975 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.276993036 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.276997089 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.277034044 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.278599024 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278608084 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278637886 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278651953 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.278659105 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278667927 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278695107 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.278700113 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.278731108 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.284905910 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.284941912 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.284982920 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.284991980 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285007000 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285033941 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285053968 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285084009 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285089970 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285105944 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285118103 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285119057 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285140991 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285154104 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285178900 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285183907 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285248041 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285310030 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.285352945 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.285360098 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287251949 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287281036 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287292004 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287318945 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.287327051 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287350893 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287370920 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.287415028 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.287424088 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287465096 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.287467003 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.287513971 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.329433918 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.329457045 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.329499960 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.329514027 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.329552889 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.363306046 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.363327026 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.363395929 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.363410950 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.363431931 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.364125967 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.364140034 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.364170074 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.364196062 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.364200115 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.364228010 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.365753889 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.365767956 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.365814924 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.365819931 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.365854025 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.367083073 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.367096901 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.367147923 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.367152929 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.367902040 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.367918015 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.367985010 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.367990017 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.374182940 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.374197960 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.374259949 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.374267101 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.414340019 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.416253090 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.416269064 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.416304111 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.416342020 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.416349888 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.416392088 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.433603048 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.447722912 CEST	49742	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.447752953 CEST	443	49742	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449517965 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449539900 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449584961 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.449593067 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449641943 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.449908018 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449923992 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449959040 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.449963093 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.449992895 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.450006008 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.450187922 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.450225115 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.450251102 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.450254917 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.450284004 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.450294018 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.450329065 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.455319881 CEST	49744	443	192.168.2.4	104.17.25.14
Sep 29, 2024 02:22:28.455353975 CEST	443	49744	104.17.25.14	192.168.2.4
Sep 29, 2024 02:22:28.465148926 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.483186960 CEST	49743	443	192.168.2.4	151.101.194.137
Sep 29, 2024 02:22:28.483197927 CEST	443	49743	151.101.194.137	192.168.2.4
Sep 29, 2024 02:22:28.652506113 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.652560949 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.652617931 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.653085947 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.653129101 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.653255939 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.655280113 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.655292034 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.655767918 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.655777931 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.755450010 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.755507946 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.755619049 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.757164955 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.757185936 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.757292032 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.759104967 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.759144068 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.759540081 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.759871960 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.759912968 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.759999990 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.767924070 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.767954111 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.888552904 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.888583899 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.889497042 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.889539957 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:28.889661074 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:28.889674902 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.058254957 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.058284998 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:29.058815956 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.060544968 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.060559988 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:29.296472073 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.296727896 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.296752930 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.297708035 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.297772884 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.301212072 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.301460028 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.301479101 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.302490950 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.302556038 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.412148952 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.412287951 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.412416935 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.412435055 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.412595034 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.412709951 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.413271904 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.413285017 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.447895050 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.447926998 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:29.448049068 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.448318958 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.448327065 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:29.448466063 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.448683023 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.448692083 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:29.449090958 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:29.449121952 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:29.449177980 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:29.449397087 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:29.449404001 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:29.449843884 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:29.449852943 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:29.456794977 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.456794977 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.498930931 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.502712011 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.502760887 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.503854990 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.503922939 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.509443045 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.509516954 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.510051012 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.510062933 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.521653891 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.521861076 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.521895885 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.522550106 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.522907019 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.522981882 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.524353981 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.524379015 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.524966002 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.525033951 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.525106907 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.525494099 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.525561094 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.526335001 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.526562929 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.526571989 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.527309895 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.527548075 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.527558088 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.528028965 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.528582096 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.528671980 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.529289007 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.529361010 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.530277967 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.530287027 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.553523064 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.568880081 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.568881989 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.568900108 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.568905115 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.583851099 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.604269981 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.604357004 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.604401112 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.609613895 CEST	49748	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.609631062 CEST	443	49748	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.615824938 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.615907907 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.616133928 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.618946075 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.618953943 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.698824883 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:29.698894024 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.718616962 CEST	49747	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.718648911 CEST	443	49747	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.766944885 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.766961098 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:29.767348051 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:29.818769932 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:29.848759890 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.848856926 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.848932981 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.883313894 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.883382082 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.883435011 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.888164997 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.888237000 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.888294935 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.889713049 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.889772892 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:29.893277884 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:29.969218969 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:29.970010996 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:29.971712112 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.023127079 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.023492098 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.024424076 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.399491072 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.399519920 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.399765015 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.399796009 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.400090933 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.400104046 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.400978088 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.400990009 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.401019096 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.401036978 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.401056051 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.401102066 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.401196003 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.401211023 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.401247025 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.402715921 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.402776957 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.403851032 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.403928041 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.405741930 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.405797958 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.418571949 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.418586969 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.418627024 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.418637037 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.419034004 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.419043064 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.459722042 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.460169077 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.460180044 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.493897915 CEST	49752	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.493978977 CEST	443	49752	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.496984005 CEST	49750	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.497035980 CEST	443	49750	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.497528076 CEST	49751	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.497549057 CEST	443	49751	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.498225927 CEST	49749	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.498254061 CEST	443	49749	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.512034893 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515319109 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515379906 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515413046 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515428066 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.515436888 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515471935 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.515762091 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.515990973 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.516017914 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.516041040 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.516047001 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.516051054 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.516083002 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.516768932 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.516817093 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.520035028 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.524173021 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524211884 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524240971 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524265051 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524282932 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.524293900 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524306059 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.524317026 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.524342060 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.524718046 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.525049925 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.525078058 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.525103092 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.525130033 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.525140047 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.525156021 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.527198076 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.527240038 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.527256966 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537046909 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537055969 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537081957 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537092924 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537102938 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537111044 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.537117004 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537137032 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.537166119 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.537182093 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.557610035 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.568837881 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.568840027 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.568849087 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.600424051 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.600435972 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.600478888 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.600505114 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.600516081 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.600522995 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.600573063 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.601322889 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.601330042 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.601350069 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.601377010 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.601382971 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.601412058 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.601428986 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.603396893 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.603811026 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603821993 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603851080 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603862047 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603868008 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.603878975 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603892088 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.603923082 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.603945017 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.605493069 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.605501890 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.605515957 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.605556011 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.605561018 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.605608940 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.611021042 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.611094952 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.611104012 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.611241102 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.611278057 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.611284018 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.611326933 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.611520052 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.639487028 CEST	49759	443	192.168.2.4	104.17.24.14
Sep 29, 2024 02:22:30.639503002 CEST	443	49759	104.17.24.14	192.168.2.4
Sep 29, 2024 02:22:30.663703918 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.663738966 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.663898945 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.664195061 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:30.664203882 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:30.686152935 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.686176062 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.686261892 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.686274052 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.686319113 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.687480927 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.687498093 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.687539101 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.687570095 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.687573910 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.687607050 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.687611103 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.688570976 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.690840006 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.690861940 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.690908909 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.690913916 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.690958023 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.690974951 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.691401958 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.691418886 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.691466093 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.691473007 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.691508055 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.691523075 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.693197012 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.693212986 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.693278074 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.693283081 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.693327904 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.694143057 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.694158077 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.694221020 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.694226027 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.694273949 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.716110945 CEST	49758	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.716124058 CEST	443	49758	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.741863966 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.742125988 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.742188931 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.744079113 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.744079113 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.744091988 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.744101048 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.778031111 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778068066 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778126001 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.778136015 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778166056 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.778179884 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.778559923 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778578997 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778625965 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.778630018 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.778659105 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.778676033 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.779328108 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.779345036 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.779398918 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.779402971 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.779438019 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.779453039 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.780194998 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.780210972 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.780252934 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.780256987 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.780281067 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.780293941 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.781084061 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.781099081 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.781156063 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.781161070 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.781189919 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.782078028 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.782097101 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.782160997 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.782166004 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.782198906 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.782938004 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.782953024 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.783006907 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.783010960 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.783050060 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.828049898 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.828083992 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.828257084 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.828948975 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:30.828959942 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:30.865372896 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865391970 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865451097 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.865462065 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865499973 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.865731955 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865746021 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865788937 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.865793943 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.865830898 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.866204023 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.866239071 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.866254091 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.866260052 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.866275072 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:30.866293907 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.866316080 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.868468046 CEST	49757	443	192.168.2.4	151.101.130.137
Sep 29, 2024 02:22:30.868475914 CEST	443	49757	151.101.130.137	192.168.2.4
Sep 29, 2024 02:22:31.299396038 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.299737930 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:31.299751043 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.300082922 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.300533056 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:31.300622940 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.301145077 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:31.347393990 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.469335079 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.469404936 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:31.470645905 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:31.470657110 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.470876932 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.471937895 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:31.515398026 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.611563921 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.611651897 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.611709118 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:31.631824017 CEST	49761	443	192.168.2.4	18.192.231.252
Sep 29, 2024 02:22:31.631844044 CEST	443	49761	18.192.231.252	192.168.2.4
Sep 29, 2024 02:22:31.745270967 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.745347023 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:31.745415926 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:32.005907059 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:32.005938053 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:32.005951881 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:22:32.005959034 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 29, 2024 02:22:35.533828020 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:35.533888102 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:35.533947945 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:35.691258907 CEST	49735	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:22:35.691297054 CEST	443	49735	142.250.186.36	192.168.2.4
Sep 29, 2024 02:22:39.216941118 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 29, 2024 02:22:39.222174883 CEST	80	49723	199.232.214.172	192.168.2.4
Sep 29, 2024 02:22:39.222528934 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 29, 2024 02:22:40.879578114 CEST	80	49737	172.66.0.235	192.168.2.4
Sep 29, 2024 02:22:40.879658937 CEST	49737	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:41.696271896 CEST	49737	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:22:41.701710939 CEST	80	49737	172.66.0.235	192.168.2.4
Sep 29, 2024 02:23:10.988212109 CEST	49736	80	192.168.2.4	172.66.0.235
Sep 29, 2024 02:23:10.993128061 CEST	80	49736	172.66.0.235	192.168.2.4
Sep 29, 2024 02:23:25.037141085 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:25.037164927 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.037287951 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:25.037545919 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:25.037555933 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.681961060 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.682226896 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:25.682235956 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.682554007 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.683192015 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:25.683254004 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:25.723501921 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:27.927402020 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 29, 2024 02:23:27.932466984 CEST	80	49724	199.232.214.172	192.168.2.4
Sep 29, 2024 02:23:27.932529926 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 29, 2024 02:23:35.602792978 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:35.602854013 CEST	443	49772	142.250.186.36	192.168.2.4
Sep 29, 2024 02:23:35.602909088 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:35.694984913 CEST	49772	443	192.168.2.4	142.250.186.36
Sep 29, 2024 02:23:35.695014954 CEST	443	49772	142.250.186.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:22:23.496504068 CEST	53	50262	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:23.555875063 CEST	53	49190	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:24.632937908 CEST	53	55613	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:24.973429918 CEST	51956	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:24.973577976 CEST	52568	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:24.980118036 CEST	53	51956	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:24.980129957 CEST	53	52568	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:25.496380091 CEST	62557	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:25.496617079 CEST	55600	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:25.506321907 CEST	53	62557	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:25.552244902 CEST	53	55600	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:25.991015911 CEST	60923	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:25.991230965 CEST	64786	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:25.999669075 CEST	53	60923	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.038609982 CEST	53	64786	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.916188955 CEST	59909	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:26.918123007 CEST	57270	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:26.922040939 CEST	53	53462	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.922741890 CEST	53	59909	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.923122883 CEST	61896	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:26.923424006 CEST	61742	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:26.924650908 CEST	53	57270	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.929507971 CEST	53	61896	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.930077076 CEST	53	61742	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:26.931313992 CEST	53	63908	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:28.477797031 CEST	54753	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:28.478084087 CEST	58097	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:28.486716986 CEST	53	58097	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:28.488576889 CEST	53	54753	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.412415981 CEST	53	62716	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.438888073 CEST	63990	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:29.439249992 CEST	58050	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:29.439951897 CEST	49691	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:29.440182924 CEST	58838	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:22:29.445852995 CEST	53	58050	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.445866108 CEST	53	63990	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.446971893 CEST	53	49691	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.447443962 CEST	53	58838	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:29.454375029 CEST	53	63314	1.1.1.1	192.168.2.4
Sep 29, 2024 02:22:39.521900892 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 02:22:42.838356972 CEST	53	61844	1.1.1.1	192.168.2.4
Sep 29, 2024 02:23:02.066217899 CEST	53	54946	1.1.1.1	192.168.2.4
Sep 29, 2024 02:23:23.110248089 CEST	53	58202	1.1.1.1	192.168.2.4
Sep 29, 2024 02:23:24.466247082 CEST	53	58943	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 02:22:25.552325964 CEST	192.168.2.4	1.1.1.1	c241	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:22:24.973429918 CEST	192.168.2.4	1.1.1.1	0xe068	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:24.973577976 CEST	192.168.2.4	1.1.1.1	0xefb1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:22:25.496380091 CEST	192.168.2.4	1.1.1.1	0x4865	Standard query (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:25.496617079 CEST	192.168.2.4	1.1.1.1	0x54bf	Standard query (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:22:25.991015911 CEST	192.168.2.4	1.1.1.1	0xd093	Standard query (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:25.991230965 CEST	192.168.2.4	1.1.1.1	0xcecf	Standard query (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:22:26.916188955 CEST	192.168.2.4	1.1.1.1	0xc3c2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.918123007 CEST	192.168.2.4	1.1.1.1	0x5a4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:22:26.923122883 CEST	192.168.2.4	1.1.1.1	0xb7ed	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.923424006 CEST	192.168.2.4	1.1.1.1	0xbc40	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:22:28.477797031 CEST	192.168.2.4	1.1.1.1	0x9a16	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:28.478084087 CEST	192.168.2.4	1.1.1.1	0x48eb	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 02:22:29.438888073 CEST	192.168.2.4	1.1.1.1	0xa871	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.439249992 CEST	192.168.2.4	1.1.1.1	0x5114	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:22:29.439951897 CEST	192.168.2.4	1.1.1.1	0x6e5b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.440182924 CEST	192.168.2.4	1.1.1.1	0x377e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:22:24.980118036 CEST	1.1.1.1	192.168.2.4	0xe068	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:24.980129957 CEST	1.1.1.1	192.168.2.4	0xefb1	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:22:25.506321907 CEST	1.1.1.1	192.168.2.4	0x4865	No error (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:25.506321907 CEST	1.1.1.1	192.168.2.4	0x4865	No error (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:25.999669075 CEST	1.1.1.1	192.168.2.4	0xd093	No error (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:25.999669075 CEST	1.1.1.1	192.168.2.4	0xd093	No error (0)	pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.922741890 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.922741890 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.922741890 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.922741890 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.929507971 CEST	1.1.1.1	192.168.2.4	0xb7ed	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.929507971 CEST	1.1.1.1	192.168.2.4	0xb7ed	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:26.930077076 CEST	1.1.1.1	192.168.2.4	0xbc40	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:22:28.488576889 CEST	1.1.1.1	192.168.2.4	0x9a16	No error (0)	bestfilltype.netlify.app		18.192.231.252	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:28.488576889 CEST	1.1.1.1	192.168.2.4	0x9a16	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.445866108 CEST	1.1.1.1	192.168.2.4	0xa871	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.445866108 CEST	1.1.1.1	192.168.2.4	0xa871	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.445866108 CEST	1.1.1.1	192.168.2.4	0xa871	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.445866108 CEST	1.1.1.1	192.168.2.4	0xa871	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.446971893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.446971893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:29.447443962 CEST	1.1.1.1	192.168.2.4	0x377e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:22:35.021486044 CEST	1.1.1.1	192.168.2.4	0xaef0	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:22:35.021486044 CEST	1.1.1.1	192.168.2.4	0xaef0	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:35.021486044 CEST	1.1.1.1	192.168.2.4	0xaef0	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:37.893291950 CEST	1.1.1.1	192.168.2.4	0x88b6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:22:37.893291950 CEST	1.1.1.1	192.168.2.4	0x88b6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:22:50.147373915 CEST	1.1.1.1	192.168.2.4	0xd03f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:22:50.147373915 CEST	1.1.1.1	192.168.2.4	0xd03f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:23:17.168574095 CEST	1.1.1.1	192.168.2.4	0x500a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:23:17.168574095 CEST	1.1.1.1	192.168.2.4	0x500a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:23:36.402674913 CEST	1.1.1.1	192.168.2.4	0x5bbf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:23:36.402674913 CEST	1.1.1.1	192.168.2.4	0x5bbf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.66.0.235	80	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:22:25.522542953 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:22:25.984047890 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 00:22:25 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 01:22:25 GMT Location: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7d19c0b3e426a-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 02:23:10.988212109 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	172.66.0.235	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:26 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:26 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:22:26 GMT Content-Type: text/html Content-Length: 62735 Connection: close Accept-Ranges: bytes ETag: "ab81cdc34e712e9f3fd75310f962ffef" Last-Modified: Tue, 30 Jul 2024 02:55:03 GMT Server: cloudflare CF-RAY: 8ca7d19fe81c8ce3-EWR
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 70 72 65 6c 6f 61 64 65 72 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 Data Ascii: ransform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{ transform: translateX(-50px); }}.preloader{ position: fixed; width: 100%;
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 0d 0a 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 Data Ascii: width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; } .form-box-main{ display: block; text-align: center; }} </style></head><body>
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 74 22 3e 45 73 74 6f 6e 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 61 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 22 3e 53 75 6f 6d 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 6c 22 3e 46 69 6c Data Ascii: ption value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value="et">Estonian</option><option value="fa"></option><option value="fi">Suomi</option><option value="fil">Fil
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 76 22 3e 53 76 65 6e 73 6b 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 77 22 3e 53 77 61 68 69 6c 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 74 61 22 3e e0 ae a4 e0 ae ae e0 ae bf e0 ae b4 e0 af 8d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 Data Ascii: option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option value="sv">Svenska</option><option value="sw">Swahili</option><option value="ta"></option><option value="
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 2d 62 6f 78 20 62 6f 78 2d 73 65 6c 65 63 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 69 64 3d 22 77 6f 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 22 Data Ascii: /div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4> <div class="select-box box-selec"> <select id="word"> <option value="12"
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 32 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 Data Ascii: type.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div> <div class="input-form"> <label for="">2. </label> <input type="password" class="word-12">
2024-09-29 00:22:26 UTC	1369	IN	Data Raw: 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 36 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e Data Ascii: </div> <div class="input-form"> <label for="">6. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	151.101.194.137	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:28 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:28 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 995305 Date: Sun, 29 Sep 2024 00:22:28 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890053-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1727569348.058034,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	151.101.194.137	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:28 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:28 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1688731 Date: Sun, 29 Sep 2024 00:22:28 GMT X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 0 X-Timer: S1727569348.057896,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:22:28 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	104.17.25.14	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:28 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:28 UTC	934	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:22:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 869577 Expires: Fri, 19 Sep 2025 00:22:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8z%2BlEcaMRkRk889mSb7l4db3v0aj5OJWiXg%2FOZ5e1rqsTodBf2tPiWtX%2BptAf%2FriQ7yTsxqYQOgutTWqqgxltCjW3ldsOITVYKb9ED6yKq86JOg%2FUIhBUbHCRSjhbjTbN%2BGVA7h"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7d1a95dc74228-EWR
2024-09-29 00:22:28 UTC	435	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 Data Ascii: =getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c Data Ascii: &void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFl
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 Data Ascii: t-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f Data Ascii: h:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 Data Ascii: ` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowSt
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f Data Ascii: &&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNo
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 Data Ascii: function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'star
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e Data Ascii: ==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n
2024-09-29 00:22:28 UTC	1369	IN	Data Raw: 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: &e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGJWB8D1AZ0ESQ3YA13W1 Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4a 57 42 38 44 31 41 5a 30 45 53 51 33 59 41 31 33 57 31 Data Ascii: Not Found - Request ID: 01J8XJGJWB8D1AZ0ESQ3YA13W1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGJWMWQZ561381FD0K8D5 Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4a 57 4d 57 51 5a 35 36 31 33 38 31 46 44 30 4b 38 44 35 Data Ascii: Not Found - Request ID: 01J8XJGJWMWQZ561381FD0K8D5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGK2Y6FGY22EQE5Z6QAD6 Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4b 32 59 36 46 47 59 32 32 45 51 45 35 5a 36 51 41 44 36 Data Ascii: Not Found - Request ID: 01J8XJGK2Y6FGY22EQE5Z6QAD6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGK3K9P5REHZ3XDD5A5B2 Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4b 33 4b 39 50 35 52 45 48 5a 33 58 44 44 35 41 35 42 32 Data Ascii: Not Found - Request ID: 01J8XJGK3K9P5REHZ3XDD5A5B2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGK3R1J64GSHWYQZB73AG Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4b 33 52 31 4a 36 34 47 53 48 57 59 51 5a 42 37 33 41 47 Data Ascii: Not Found - Request ID: 01J8XJGK3R1J64GSHWYQZB73AG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:29 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:29 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:29 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGK3RBW71X0VH9WWDPPXR Content-Length: 50 Connection: close
2024-09-29 00:22:29 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4b 33 52 42 57 37 31 58 30 56 48 39 57 57 44 50 50 58 52 Data Ascii: Not Found - Request ID: 01J8XJGK3RBW71X0VH9WWDPPXR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49758	151.101.130.137	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:30 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:30 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:22:30 GMT Age: 1688733 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 3 X-Timer: S1727569350.469164,VS0,VE0 Vary: Accept-Encoding
2024-09-29 00:22:30 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:22:30 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-29 00:22:30 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-29 00:22:30 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-29 00:22:30 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-29 00:22:30 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	104.17.24.14	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:30 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:30 UTC	924	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:22:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 869579 Expires: Fri, 19 Sep 2025 00:22:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aSv1zqHx3iobihAeDNrShnELbnaDkvywjtQtVMHsyaPnVrDLj3a9Df3Fj64YVdwP2AXRhWXILHlCnm9cLp8DBU6SwG3to7tmOy5Rck%2BZ6tly7TmNmBmR0Jo190EwZ7Zi4MXUD5C5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7d1b86d364201-EWR
2024-09-29 00:22:30 UTC	445	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 65 72 Data Ascii: edStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.over
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['bor
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d 64 2e Data Ascii: ,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==d.
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 69 64 Data Ascii: height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientWid
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c 61 74 Data Ascii: cated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},at
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 Data Ascii: per.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,i)
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 65 6e Data Ascii: ){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'en
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 6d 65 Data Ascii: ].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.placeme
2024-09-29 00:22:30 UTC	1369	IN	Data Raw: 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e Data Ascii: }(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnProperty.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	151.101.130.137	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:30 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:30 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:22:30 GMT Age: 995308 X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890034-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 1 X-Timer: S1727569350.469956,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:22:30 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:22:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=145352 Date: Sun, 29 Sep 2024 00:22:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	18.192.231.252	443	5572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:31 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:22:31 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:22:31 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJGMV3XND971E957JZZTPS Content-Length: 50 Connection: close
2024-09-29 00:22:31 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 47 4d 56 33 58 4e 44 39 37 31 45 39 35 37 4a 5a 5a 54 50 53 Data Ascii: Not Found - Request ID: 01J8XJGMV3XND971E957JZZTPS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:22:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:22:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=145381 Date: Sun, 29 Sep 2024 00:22:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:22:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2472, Parent PID: 6108

General

Target ID:	0
Start time:	20:22:17
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5572, Parent PID: 2472

General

Target ID:	2
Start time:	20:22:19
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2008,i,629292695956927927,3019262032975829470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6364, Parent PID: 6108

General

Target ID:	3
Start time:	20:22:24
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

Windows Analysis Report
http://pub-350a846a0e7e4389a5b4fd3d333108f4.r2.dev/index.html