Edit tour

Windows Analysis Report
http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

Overview

General Information

Sample URL:	http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html
Analysis ID:	1521718
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,7739660223475620164,14226692001371108217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: pub-0ae50a4c573c409f93585499aeac650f.r2.dev

Virustotal: Detection: 13%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

Virustotal: Detection: 15%

Perma Link

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

HTTP Parser: Number of links: 0

Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49733 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.7:49700 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cvbnmkjh.html HTTP/1.1Host: pub-0ae50a4c573c409f93585499aeac650f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-0ae50a4c573c409f93585499aeac650f.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-0ae50a4c573c409f93585499aeac650f.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cvbnmkjh.html HTTP/1.1Host: pub-0ae50a4c573c409f93585499aeac650f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cvbnmkjh.html HTTP/1.1Host: pub-0ae50a4c573c409f93585499aeac650f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cvbnmkjh.html HTTP/1.1Host: pub-0ae50a4c573c409f93585499aeac650f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-0ae50a4c573c409f93585499aeac650f.r2.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:44 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG61B24Y4EGPX2JGNPNY4Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:44 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG61R2K8H1S0RTB9KAS4WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:46 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG78RDTPKYPBE9MVYNNFDContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:46 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG79DBQBWSH9MEAA4F8EVContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:46 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG7FCT57X3KD3ZAPY0B9WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:46 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG7FHDKVPKNBWYVRF45J2Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:46 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG7FTQ5P7KH8DS6T0ZRNGContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 29 Sep 2024 00:39:48 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8XKG9EX6VVG7G4FFCGASVS6Content-Length: 50Connection: close

Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_69.4.dr, chromecache_55.4.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_61.4.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_61.4.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_61.4.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_61.4.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_61.4.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_61.4.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_56.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_61.4.dr	String found in binary or memory: https://managehomevsory.publicvm.com/fuc.php
Source: chromecache_61.4.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_70.4.dr, chromecache_63.4.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49733 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@17/36@16/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,7739660223475620164,14226692001371108217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,7739660223475620164,14226692001371108217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	16%	Virustotal		Browse
http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bestfilltype.netlify.app	0%	Virustotal	Browse
pub-0ae50a4c573c409f93585499aeac650f.r2.dev	14%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://github.com/eslint/eslint/issues/6125	0%	Virustotal		Browse
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Virustotal		Browse
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	1%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://github.com/jquery/jquery/pull/557)	0%	Virustotal		Browse
https://managehomevsory.publicvm.com/fuc.php	3%	Virustotal		Browse
https://github.com/eslint/eslint/issues/3229	0%	Virustotal		Browse
https://github.com/jquery/sizzle/pull/225	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
code.jquery.com	151.101.2.137	true	false	1%, Virustotal, Browse	unknown
pub-0ae50a4c573c409f93585499aeac650f.r2.dev	162.159.140.237	true	false	14%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
bestfilltype.netlify.app	18.192.94.96	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	false		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html	true		unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://jquery.org/license	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_70.4.dr, chromecache_63.4.dr	false	1%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://managehomevsory.publicvm.com/fuc.php	chromecache_61.4.dr	false	3%, Virustotal, Browse	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_69.4.dr, chromecache_55.4.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_61.4.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_61.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://promisesaplus.com/#point-54	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_70.4.dr, chromecache_63.4.dr	false	0%, Virustotal, Browse	unknown
https://sizzlejs.com/	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_70.4.dr, chromecache_63.4.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	United States	13335	CLOUDFLARENETUS	false
18.192.94.96	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
172.66.0.235	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521718
Start date and time:	2024-09-29 02:38:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@17/36@16/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.186.142, 172.253.62.84, 34.104.35.123, 142.250.184.234, 142.250.186.138, 142.250.185.234, 142.250.185.138, 216.58.212.138, 142.250.186.74, 142.250.74.202, 142.250.185.106, 216.58.206.42, 142.250.185.74, 142.250.185.170, 142.250.184.202, 142.250.186.170, 142.250.181.234, 142.250.185.202, 142.250.186.106, 142.250.186.42, 52.165.165.26, 93.184.221.240, 13.95.31.18, 40.69.42.241, 142.250.184.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"confirm", "text_input_field_labels":["icon", "eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Input

Output

URL: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html Model: jbxai

{
"brand":["MetaMask"],
"contains_trigger_text":true,
"trigger_text":"Access your wallet with your Secret Recovery Phrase",
"prominent_button_name":"confirm",
"text_input_field_labels":["icon",
"eye-close"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9JJwKL:ObPH/U2
MD5:	AB76F7963A4514FAF738C7FFA85F009D
SHA1:	AA113D04C389EE9305A1A820353CCEDF167A83B9
SHA-256:	EB465228525C97C5F5D6531016931DD41AB24E491BDFC4EC6E215807F6743967
SHA-512:	24423299F3647DCF709A04F9B24520F1BB95766DA92D6F186889B69EE3BDAD87A146698ECCD02402E818D852F0C01509EB49C3D0BEA96A9ED872CB64208F3C3B
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8XKG9EX6VVG7G4FFCGASVS6

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.846370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2d9hdjBciRy:ObPH/hdF3U
MD5:	8316F344B296FFECE4FD85887D1CDFAF
SHA1:	E43F0F8C7B1D1CFC9AE7B4A9711737FA7BD66D07
SHA-256:	61E0B6D67063686A3386E06D67B13B3C9A440CF5990FB850A1B987F041225A8A
SHA-512:	B2E023F23F74F41C5685E43830616C002802E4D94ABC365D086C5EA49430404369886D8C95261FF68291C1BE54DCEC613029A51E51C28EB3F0D796697B2BED02
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8XKG61R2K8H1S0RTB9KAS4W

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	62731
Entropy (8bit):	4.704176030406668
Encrypted:	false
SSDEEP:	384:i3kpGjqAdimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBW:i3ksjqA5kikTYXa1oGBR26t
MD5:	1E9F3CC6D54D9D1AF9BFB26390F1715A
SHA1:	75D6D4003AD8CC0AA327833FC57ABA36CF8956C5
SHA-256:	194288D2A1D159BF0755ABEDDAD5681D0F58E1D1667E9C57D1A17ED862F9C0E9
SHA-512:	E4561ABDF28EE5743A3A05E61C6D195E875BDF52058B86B97A613856D5D8EDB04959497ECA12F6C6BD0A3960B01C6F3B9F82BC997C72D89F58FDE9F7EE192EC6
Malicious:	false
Reputation:	low
URL:	https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.971663380285987
Encrypted:	false
SSDEEP:	3:ObynQA2d9mGQUWldn:ObPH/Xwld
MD5:	C933B51ACE00B39C404F848A66659D6C
SHA1:	E23EE349646F1BFF89A175FCCAC9DB2C8149309C
SHA-256:	FDDDAFBC3CA709BE84E6EF483345C3B9A52CFD29D00257BC3C96D7A5FCE6A0CF
SHA-512:	32C2BC448180618F8C8F3BA2E37B16C0EE5F078353C8609CF4C27AB1DBCDB7E9051046F4BF8FAE7BFD3317B67CC996362E4AB9D7904B71CBDDFA24D4C60245EE
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8XKG7FCT57X3KD3ZAPY0B9W

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSXQl5R-DKE1_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_N4bCtGW94EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.971663380285988
Encrypted:	false
SSDEEP:	3:ObynQA2d9fn0s9tRh2:ObPH/Ms9tRU
MD5:	1751BA212CE7170D33B1E88459DFF429
SHA1:	7172FCA99ADC6BCB94CB247FC51007C41367DE8E
SHA-256:	379F2893E3842C63B38D081BDB1EC1BDA4EF68AF86C7FDD7D2A78035BB283FB8
SHA-512:	2AC38F1ECC11C8A9031DA2C61C4A76FB2C618642FBD30495F762311ED35DAC76E42F704219E8F9D749D67CF9EB1E8B8648EB1D3222247BBE8D07716F9CA5E672
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8XKG79DBQBWSH9MEAA4F8EV

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.821467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2d9ahzz1ngE:ObPH/a1Znn
MD5:	E248BB324D734D79042EF3435A0973E1
SHA1:	6AC1532ADCB51077F7C142ADE95867A01F087896
SHA-256:	490293C8FB8007024C773DAE29286519255E8EE27D6F8A7A2F8D808369B248E2
SHA-512:	B20935CF489CB044C9152B7D4F7393F56F69B66E24669CE9E225F3BFBBB38B57D1B2F06E76FF2B55C7EE88EEA93664878CA2E504AD2D51C4C94B398086F19A30
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8XKG78RDTPKYPBE9MVYNNFD

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2d9miiq:ObPH/Iq
MD5:	781777A4F9F4B083F6FB1452B633EF9A
SHA1:	C309F1B39C86C37E4276222ABC38BB09FE987954
SHA-256:	AED9B6B0D92E4F4577B72602BC13AF6EE412D08DF64395F09E51E379CCF2CC21
SHA-512:	DA1663A5EFA62577DF59F174619FD2290F8392CF11D8E24B9D4E02E888FEC937E12785EF55C652D190B6097A47263BF38E9C5ED946633F9CCA1CA2C2FBDC4760
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8XKG7FHDKVPKNBWYVRF45J2

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:39:29.784254074 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:29.784421921 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:29.940457106 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:30.127984047 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 02:39:35.049844027 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 02:39:36.172801971 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:36.690510988 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:37.489370108 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:38.998790979 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:39.389466047 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:39.390697002 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:39.561558008 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:40.798835993 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:40.803731918 CEST	53	49700	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:40.803823948 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:40.805485964 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:40.805798054 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:40.810270071 CEST	53	49700	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:40.810550928 CEST	53	49700	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.246288061 CEST	53	49700	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.246974945 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.252121925 CEST	53	49700	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.252193928 CEST	49700	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.730803967 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:41.730844021 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:41.730916977 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:41.731563091 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:41.731580019 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:41.731914043 CEST	49706	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:41.732399940 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:41.736944914 CEST	80	49706	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:41.737025023 CEST	49706	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:41.737174988 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:41.737282991 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:41.970957041 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 29, 2024 02:39:41.971081972 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:42.060470104 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:42.090198994 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:42.435085058 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:43.048615932 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:43.058063984 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:43.058099985 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:43.058535099 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:43.063843966 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:43.064160109 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:43.064196110 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:43.065202951 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:43.065284967 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:43.066771984 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:43.066850901 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:43.114761114 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:43.114790916 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:43.158811092 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:43.162111044 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:43.175189972 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.175218105 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.175295115 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.175542116 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.175555944 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.208529949 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:43.643493891 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.644059896 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.644092083 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.645087004 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.645159006 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.646285057 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.646341085 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.646488905 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.691415071 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.694781065 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.694797993 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.740910053 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897161007 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897226095 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897257090 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897279024 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897294044 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897311926 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897335052 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897353888 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897370100 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897377968 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897387981 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897425890 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897433043 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897682905 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.897730112 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.897736073 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.941926003 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.941952944 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985543013 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985594034 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.985600948 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985680103 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985707045 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985717058 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.985724926 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.985761881 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.985770941 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.986476898 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.986521006 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.986521959 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.986531973 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.986569881 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.986577034 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.987304926 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.987343073 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.987351894 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.987359047 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.987400055 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.987410069 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988157988 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988199949 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.988203049 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988213062 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988248110 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.988255024 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988286972 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.988323927 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.988329887 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.989046097 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.989190102 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:43.989196062 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:43.993027925 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.993062019 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:43.993129015 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.993451118 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.993458986 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:43.993508101 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.994452000 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:43.994491100 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:43.994539022 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:43.995114088 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.995126963 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:43.996196032 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:43.996203899 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:43.996676922 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:43.996687889 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.030296087 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.030306101 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074379921 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074410915 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074439049 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074461937 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.074467897 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074480057 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074511051 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.074528933 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.074728012 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074836016 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074841976 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074873924 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074876070 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.074886084 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.074919939 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.074961901 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.075006962 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.076087952 CEST	49709	443	192.168.2.7	172.66.0.235
Sep 29, 2024 02:39:44.076106071 CEST	443	49709	172.66.0.235	192.168.2.7
Sep 29, 2024 02:39:44.090807915 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.090841055 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.090989113 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.091103077 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.091119051 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.091166019 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.091638088 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.091648102 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.092103004 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.092116117 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.470788956 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.472218037 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.476524115 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.478749990 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.478785038 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.479928017 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.479999065 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.481997967 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.482011080 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.482134104 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.482160091 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.483062029 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.483155012 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.483263969 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.483321905 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.571204901 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.571449041 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.574671984 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.574811935 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.575305939 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.575431108 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.576695919 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.576715946 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.576819897 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.576832056 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.576879978 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.576900959 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.629278898 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.629281044 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.629280090 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.650378942 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 02:39:44.684923887 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.684997082 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685038090 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.685065031 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685206890 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685240030 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685246944 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.685255051 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685298920 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.685306072 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685699940 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.685743093 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.685749054 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.686937094 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.686995983 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687022924 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687098980 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.687123060 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687190056 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.687437057 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687499046 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687529087 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687563896 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.687570095 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.687642097 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.687994003 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688041925 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688083887 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688095093 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.688126087 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688157082 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.688160896 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688169003 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.688179970 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688210964 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688224077 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.688230991 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688288927 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.688461065 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.688528061 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688533068 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.688540936 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.688585043 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.688633919 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.688640118 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.689706087 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.689738035 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.689745903 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.689753056 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.689796925 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.689801931 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.691612005 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.691678047 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.691685915 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.725455046 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.729140997 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.739202976 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.739222050 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.739250898 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.739270926 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.742924929 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.742932081 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.743366957 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.743377924 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.743978977 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.744046926 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.744385958 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.744445086 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.752693892 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.752744913 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.753814936 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.753870964 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.758610964 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.758618116 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.759027004 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.759033918 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:44.774673939 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774704933 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774724007 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774749994 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.774780989 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.774790049 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774808884 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774828911 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774841070 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.774856091 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.774866104 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.774897099 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.775636911 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.775682926 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.775711060 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.775724888 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.775753021 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.775769949 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.776720047 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.776757956 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.776789904 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.776794910 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.776844025 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.776874065 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.776926041 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:44.776982069 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:44.778898001 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.778911114 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.778984070 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.778985977 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.779020071 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.779047012 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.779057026 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.779067993 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.779067993 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.779160976 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.780761003 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.780770063 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.780821085 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.780864000 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.780872107 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.780913115 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.780913115 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.799568892 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.799575090 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:44.864569902 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.864598036 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.864687920 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.864739895 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.864800930 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.865323067 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.865345001 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.865431070 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.865447044 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.865509033 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.866313934 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.866333008 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.866413116 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.866426945 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.866492987 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.867567062 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.867590904 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.867641926 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.867656946 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.867702961 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.867702961 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.869743109 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.869767904 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.869957924 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.869971037 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.870028019 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.870347023 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.870363951 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.870450974 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.870455980 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.870507956 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.870507956 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.871174097 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.871262074 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.871287107 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.871577024 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.953917027 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.953960896 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954005957 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954024076 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954056978 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954076052 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954207897 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954226971 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954292059 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954303980 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954356909 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954679012 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954699039 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954756975 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954771996 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.954804897 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.954822063 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.957876921 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.957900047 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.957962990 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.957986116 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.958013058 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.958035946 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.958652020 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.958707094 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.958725929 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.958739042 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.958801985 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.958801985 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.959465027 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959490061 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959534883 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.959547997 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959573984 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.959592104 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.959816933 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959834099 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959891081 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:44.959918976 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:44.959968090 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.030462027 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.030673027 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.030728102 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.041348934 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.041388035 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.041423082 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.041433096 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.041462898 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.041475058 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.041925907 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.041946888 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.041984081 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.041991949 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.042021036 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.042033911 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.042066097 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.042139053 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.042187929 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.042221069 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.042264938 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.042273998 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.042282104 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.042318106 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.042323112 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.042366028 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.197231054 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.199632883 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.212418079 CEST	49714	443	192.168.2.7	104.17.25.14
Sep 29, 2024 02:39:45.212447882 CEST	443	49714	104.17.25.14	192.168.2.7
Sep 29, 2024 02:39:45.213618994 CEST	49717	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.213638067 CEST	443	49717	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.214068890 CEST	49716	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.214095116 CEST	443	49716	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.214540958 CEST	49712	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.214546919 CEST	443	49712	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.307647943 CEST	49713	443	192.168.2.7	151.101.2.137
Sep 29, 2024 02:39:45.307701111 CEST	443	49713	151.101.2.137	192.168.2.7
Sep 29, 2024 02:39:45.347763062 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.347805023 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.347893953 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.348871946 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.348931074 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.348989010 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.349431038 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.349447012 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.351545095 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.351560116 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.545284033 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.545351028 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.545413971 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.556725979 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.556760073 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.556824923 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.557893038 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.557910919 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.558052063 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.558060884 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.563817978 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.563864946 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.563930035 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.564378977 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.564390898 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.836724997 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:45.836766005 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:45.840763092 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:45.842427015 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:45.842439890 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:45.977644920 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.991573095 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.991600037 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.991966009 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.994973898 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.994973898 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:45.995043993 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:45.999471903 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.000535011 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.000552893 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.000869036 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.002058983 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.002058983 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.002093077 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.002146959 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.041196108 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.044533014 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.048382044 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.048429966 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.048790932 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.051917076 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.051937103 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.189992905 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.194813013 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.194837093 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.195118904 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.195885897 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.196182013 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.197310925 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.197316885 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.198383093 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.198383093 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.198412895 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.198421955 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.198470116 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.198529959 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.199156046 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.199156046 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.199166059 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.199229002 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.203237057 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.204994917 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.205030918 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.206037998 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.206250906 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.243046045 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.243216991 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.246682882 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.246701956 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.250260115 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.250260115 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.250281096 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.250292063 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.290430069 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.290513992 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.290951967 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.291544914 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.291544914 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.291629076 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.295336008 CEST	49720	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.295351982 CEST	443	49720	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.317291021 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.317370892 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.317491055 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.319473028 CEST	49719	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.319494963 CEST	443	49719	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.326498032 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.326498032 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.326549053 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.326565027 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.326735020 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.326735020 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.328862906 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.328862906 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.328881025 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.328897953 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.482395887 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:46.482614040 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:46.493966103 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:46.493977070 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:46.494306087 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:46.506158113 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.506340027 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.507422924 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.510608912 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.510677099 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.510847092 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.512600899 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.519716024 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.519783974 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.519920111 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.540302992 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:46.555741072 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.580959082 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.580987930 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.582293034 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.582412958 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.583401918 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.583401918 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.583468914 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.587023973 CEST	49721	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.587053061 CEST	443	49721	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.589605093 CEST	49722	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.589612007 CEST	443	49722	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.594753981 CEST	49723	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:46.594785929 CEST	443	49723	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:46.632687092 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.632714987 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.677493095 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.688997984 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689057112 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689086914 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689114094 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689141035 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689148903 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.689162970 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689199924 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.689390898 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.689400911 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689524889 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.689557076 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.691827059 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.691832066 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.691987991 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.693604946 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.741899967 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.741928101 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775638103 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775681019 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775712967 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.775732040 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775782108 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.775794029 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775840044 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.775841951 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:46.775890112 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:46.787811995 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.809381008 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:46.835565090 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:46.851589918 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.136096954 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.136133909 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.137306929 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.137378931 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.140971899 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.141047955 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.141473055 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.141486883 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.142543077 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.142610073 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.145617008 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.145626068 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.148369074 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.148422956 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.148844957 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.148854017 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.192409039 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.219744921 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.271941900 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272010088 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272056103 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.272061110 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272072077 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272135973 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.272239923 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272595882 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272638083 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272639990 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.272648096 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.272684097 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.272691965 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.273355961 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.273400068 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.273408890 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.273793936 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.273957014 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.273994923 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.274003983 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274069071 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274110079 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.274111032 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274125099 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274163008 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.274169922 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274895906 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.274939060 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.274945974 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.276815891 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.276868105 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.276878119 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.278513908 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.278558969 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.278565884 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.278614044 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.278650045 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.278657913 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.322240114 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.322240114 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.361311913 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361326933 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361475945 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361480951 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361512899 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.361556053 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361562014 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.361787081 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.361787081 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.362909079 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.362916946 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.362970114 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.362993002 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.363023996 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.363069057 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.363104105 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.367275953 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367289066 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367305040 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367326021 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.367330074 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367347002 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367360115 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.367360115 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.367403984 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.367403984 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.368129969 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.368151903 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.368230104 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.368240118 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.368313074 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.449335098 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.449358940 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.449409008 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.449446917 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.449465990 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.449495077 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.450022936 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.450038910 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.450078011 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.450088024 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.450119972 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.450138092 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.451689005 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.451711893 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.451778889 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.451788902 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.451839924 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.458951950 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.458977938 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.459031105 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.459042072 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.459080935 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.459095001 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.460202932 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.460231066 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.460272074 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.460294962 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.460304022 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.460338116 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.460355997 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.460371017 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.460407019 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.496942997 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.496963978 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.497040987 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.497056007 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.497109890 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.518008947 CEST	49727	443	192.168.2.7	104.17.24.14
Sep 29, 2024 02:39:47.518038988 CEST	443	49727	104.17.24.14	192.168.2.7
Sep 29, 2024 02:39:47.534143925 CEST	49730	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.534183025 CEST	443	49730	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.537148952 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.537173986 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.537220001 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.537235975 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.537271976 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.537288904 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.538002968 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.538017988 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.538074970 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.538084030 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.538139105 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.539017916 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.539037943 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.539091110 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.539099932 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.539146900 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.539942980 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.539958954 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.540004015 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.540010929 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.540045977 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.540057898 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.540227890 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.540241957 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.540290117 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.540297985 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.540324926 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.540350914 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.541166067 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.541182041 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.541214943 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.541223049 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.541258097 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.541270971 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.545402050 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.557593107 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:47.557627916 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:47.557693958 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:47.558119059 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:47.558130980 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:47.595685005 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.595700026 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.595747948 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.595761061 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.595798969 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.595830917 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.606533051 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.635706902 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.635734081 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.635812044 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.635829926 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.635876894 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636025906 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636042118 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636085033 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636097908 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636147976 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636342049 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636382103 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636396885 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636405945 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636420012 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.636447906 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636476994 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636614084 CEST	49729	443	192.168.2.7	151.101.194.137
Sep 29, 2024 02:39:47.636631012 CEST	443	49729	151.101.194.137	192.168.2.7
Sep 29, 2024 02:39:47.647408009 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.792336941 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.792423010 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.792516947 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.792592049 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.792592049 CEST	49724	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.792615891 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.792620897 CEST	443	49724	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.833400011 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.833462000 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:47.833549023 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.833894014 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:47.833909988 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.054488897 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:39:48.213187933 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.229054928 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:48.229095936 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.229486942 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.247740984 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:48.247829914 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.248593092 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:48.295394897 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.493566036 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.493659019 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.537604094 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.537807941 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.537983894 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:48.624860048 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.624897957 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.625247955 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.631433010 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.656483889 CEST	49732	443	192.168.2.7	18.192.94.96
Sep 29, 2024 02:39:48.656522989 CEST	443	49732	18.192.94.96	192.168.2.7
Sep 29, 2024 02:39:48.679406881 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.817415953 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.817480087 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.817634106 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.819947004 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.819996119 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:48.820019007 CEST	49733	443	192.168.2.7	184.28.90.27
Sep 29, 2024 02:39:48.820028067 CEST	443	49733	184.28.90.27	192.168.2.7
Sep 29, 2024 02:39:50.700536966 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:50.705466986 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 29, 2024 02:39:50.807797909 CEST	49736	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:50.807853937 CEST	443	49736	104.98.116.138	192.168.2.7
Sep 29, 2024 02:39:50.807921886 CEST	49736	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:50.809361935 CEST	49736	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:39:50.809374094 CEST	443	49736	104.98.116.138	192.168.2.7
Sep 29, 2024 02:39:52.286386967 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:52.286458969 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:52.286809921 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:52.534522057 CEST	49705	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:39:52.534543037 CEST	443	49705	142.250.186.164	192.168.2.7
Sep 29, 2024 02:39:57.095582008 CEST	80	49706	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:57.095664978 CEST	49706	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:57.538789034 CEST	49706	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:39:57.543737888 CEST	80	49706	162.159.140.237	192.168.2.7
Sep 29, 2024 02:39:59.957842112 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 02:40:28.174829006 CEST	49707	80	192.168.2.7	162.159.140.237
Sep 29, 2024 02:40:28.179794073 CEST	80	49707	162.159.140.237	192.168.2.7
Sep 29, 2024 02:40:33.577709913 CEST	443	49736	104.98.116.138	192.168.2.7
Sep 29, 2024 02:40:33.577770948 CEST	49736	443	192.168.2.7	104.98.116.138
Sep 29, 2024 02:40:41.758397102 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:41.758435011 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:41.758521080 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:41.759105921 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:41.759119987 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:42.422249079 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:42.422533989 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:42.422563076 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:42.422867060 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:42.423355103 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:42.423413038 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:42.471580029 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:52.334634066 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:52.334697008 CEST	443	49743	142.250.186.164	192.168.2.7
Sep 29, 2024 02:40:52.336800098 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:52.808435917 CEST	49743	443	192.168.2.7	142.250.186.164
Sep 29, 2024 02:40:52.808458090 CEST	443	49743	142.250.186.164	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:39:40.796293020 CEST	53	49214	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:40.796353102 CEST	53	63182	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:40.796382904 CEST	53	62973	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.661371946 CEST	57907	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.661542892 CEST	54507	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.670819044 CEST	53	57907	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.672451019 CEST	53	54507	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.691759109 CEST	54071	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.691932917 CEST	58923	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:41.698445082 CEST	53	54071	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:41.698467016 CEST	53	58923	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:42.335850954 CEST	123	123	192.168.2.7	40.119.6.228
Sep 29, 2024 02:39:43.059755087 CEST	53	54248	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.165786982 CEST	52923	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.165935040 CEST	64981	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.174288988 CEST	53	52923	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.174484015 CEST	53	64981	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.570657969 CEST	123	123	40.119.6.228	192.168.2.7
Sep 29, 2024 02:39:43.982521057 CEST	60498	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.983113050 CEST	50665	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.984175920 CEST	54225	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.984508038 CEST	62685	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:43.987411976 CEST	53	57032	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.989013910 CEST	53	60498	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.989630938 CEST	53	50665	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.990711927 CEST	53	54225	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.991272926 CEST	53	62685	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:43.992120028 CEST	53	60206	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:44.080847025 CEST	51141	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:44.081099987 CEST	65437	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:44.089346886 CEST	53	51141	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:44.090325117 CEST	53	65437	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.000524044 CEST	52330	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:46.001389027 CEST	54645	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:46.006294012 CEST	53	58476	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.007204056 CEST	53	52330	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.007874966 CEST	53	54645	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.314722061 CEST	56569	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:46.314722061 CEST	58392	53	192.168.2.7	1.1.1.1
Sep 29, 2024 02:39:46.321290970 CEST	53	56569	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.321343899 CEST	53	58392	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:46.416090012 CEST	53	62711	1.1.1.1	192.168.2.7
Sep 29, 2024 02:39:59.496498108 CEST	53	57925	1.1.1.1	192.168.2.7
Sep 29, 2024 02:40:18.248392105 CEST	53	59914	1.1.1.1	192.168.2.7
Sep 29, 2024 02:40:34.634027004 CEST	138	138	192.168.2.7	192.168.2.255
Sep 29, 2024 02:40:37.274602890 CEST	53	53858	1.1.1.1	192.168.2.7
Sep 29, 2024 02:40:40.845360994 CEST	53	56286	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:39:41.661371946 CEST	192.168.2.7	1.1.1.1	0x5335	Standard query (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:41.661542892 CEST	192.168.2.7	1.1.1.1	0xa531	Standard query (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:39:41.691759109 CEST	192.168.2.7	1.1.1.1	0x558e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:41.691932917 CEST	192.168.2.7	1.1.1.1	0xe708	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:39:43.165786982 CEST	192.168.2.7	1.1.1.1	0x3e19	Standard query (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.165935040 CEST	192.168.2.7	1.1.1.1	0x3ed1	Standard query (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	65	IN (0x0001)	false
Sep 29, 2024 02:39:43.982521057 CEST	192.168.2.7	1.1.1.1	0xf9a7	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.983113050 CEST	192.168.2.7	1.1.1.1	0xecae	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:39:43.984175920 CEST	192.168.2.7	1.1.1.1	0xc257	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.984508038 CEST	192.168.2.7	1.1.1.1	0x6afe	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:39:44.080847025 CEST	192.168.2.7	1.1.1.1	0x436	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:44.081099987 CEST	192.168.2.7	1.1.1.1	0xc8d9	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 29, 2024 02:39:46.000524044 CEST	192.168.2.7	1.1.1.1	0xfb27	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.001389027 CEST	192.168.2.7	1.1.1.1	0xe704	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:39:46.314722061 CEST	192.168.2.7	1.1.1.1	0x8f29	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.314722061 CEST	192.168.2.7	1.1.1.1	0x31a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:39:41.670819044 CEST	1.1.1.1	192.168.2.7	0x5335	No error (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:41.670819044 CEST	1.1.1.1	192.168.2.7	0x5335	No error (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:41.698445082 CEST	1.1.1.1	192.168.2.7	0x558e	No error (0)	www.google.com	142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:41.698467016 CEST	1.1.1.1	192.168.2.7	0xe708	No error (0)	www.google.com		65	IN (0x0001)	false
Sep 29, 2024 02:39:43.174288988 CEST	1.1.1.1	192.168.2.7	0x3e19	No error (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.174288988 CEST	1.1.1.1	192.168.2.7	0x3e19	No error (0)	pub-0ae50a4c573c409f93585499aeac650f.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.989013910 CEST	1.1.1.1	192.168.2.7	0xf9a7	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.989013910 CEST	1.1.1.1	192.168.2.7	0xf9a7	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.989013910 CEST	1.1.1.1	192.168.2.7	0xf9a7	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.989013910 CEST	1.1.1.1	192.168.2.7	0xf9a7	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.990711927 CEST	1.1.1.1	192.168.2.7	0xc257	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.990711927 CEST	1.1.1.1	192.168.2.7	0xc257	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:43.991272926 CEST	1.1.1.1	192.168.2.7	0x6afe	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Sep 29, 2024 02:39:44.089346886 CEST	1.1.1.1	192.168.2.7	0x436	No error (0)	bestfilltype.netlify.app	18.192.94.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:44.089346886 CEST	1.1.1.1	192.168.2.7	0x436	No error (0)	bestfilltype.netlify.app	52.58.254.253	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.007204056 CEST	1.1.1.1	192.168.2.7	0xfb27	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.007204056 CEST	1.1.1.1	192.168.2.7	0xfb27	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.007874966 CEST	1.1.1.1	192.168.2.7	0xe704	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Sep 29, 2024 02:39:46.321290970 CEST	1.1.1.1	192.168.2.7	0x8f29	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.321290970 CEST	1.1.1.1	192.168.2.7	0x8f29	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.321290970 CEST	1.1.1.1	192.168.2.7	0x8f29	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:39:46.321290970 CEST	1.1.1.1	192.168.2.7	0x8f29	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-0ae50a4c573c409f93585499aeac650f.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49707	162.159.140.237	80	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:39:42.060470104 CEST	471	OUT	GET /cvbnmkjh.html HTTP/1.1 Host: pub-0ae50a4c573c409f93585499aeac650f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:39:42.435085058 CEST	471	OUT	GET /cvbnmkjh.html HTTP/1.1 Host: pub-0ae50a4c573c409f93585499aeac650f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:39:43.048615932 CEST	471	OUT	GET /cvbnmkjh.html HTTP/1.1 Host: pub-0ae50a4c573c409f93585499aeac650f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:39:43.158811092 CEST	527	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 00:39:43 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 29 Sep 2024 01:39:43 GMT Location: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ca7eaee6bbc43d7-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 29, 2024 02:40:28.174829006 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49709	172.66.0.235	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:43 UTC	699	OUT	GET /cvbnmkjh.html HTTP/1.1 Host: pub-0ae50a4c573c409f93585499aeac650f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:43 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:39:43 GMT Content-Type: text/html Content-Length: 62731 Connection: close Accept-Ranges: bytes ETag: "1e9f3cc6d54d9d1af9bfb26390f1715a" Last-Modified: Thu, 11 Apr 2024 21:15:19 GMT Server: cloudflare CF-RAY: 8ca7eaf228148c51-EWR
2024-09-29 00:39:43 UTC	1086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2a 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 Data Ascii: 'https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');*{ margin: 0; padding: 0;}body{ box-sizing: border-box; font-family: 'Poppins', sans-serif;}button,input, select{ font-family: i
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 73 6c 61 74 65 59 28 2d 33 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0d 0a 20 20 67 72 69 64 2d 67 61 70 3a 20 32 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 7b 0d 0a 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d Data Ascii: slateY(-3px); margin-left: 4px;}.form-box-main{ display: grid; grid-template-columns: repeat(3, 1fr); grid-gap: 20px; margin: 20px 10px;}.input-form{ display: flex; align-items: center;}.input-form input{ width: 80%;
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 38 20 7b 0d 0a 20 20 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }}@keyframes load8 { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-trans
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 6e 2d 74 65 78 74 20 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 31 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 69 63 6f 6e 32 20 69 6d 67 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 2d 70 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 Data Ascii: n-text p{ font-size: 13px; } .icon1{ display: none; } .icon2 img{ width: 40px; } .head-text-p{ font-size: 13px; margin: 20px 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0;
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 67 22 3e d0 b1 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 62 6e 22 3e e0 a6 ac e0 a6 be e0 a6 82 e0 a6 b2 e0 a6 be 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 61 22 3e 43 61 74 61 6c c3 a0 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 63 73 22 3e c4 8c 65 c5 a1 74 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 Data Ascii: /option><option value="bg"></option><option value="bn"></option><option value="ca">Catal</option><option value="cs">etina</option><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 61 6c 75 65 3d 22 70 68 22 3e 50 69 6c 69 70 69 6e 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 6c 22 3e 50 6f 6c 73 6b 69 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 22 3e 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 42 52 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 42 72 61 7a 69 6c 6c 69 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e Data Ascii: alue="ph">Pilipino</option><option value="pl">Polskie</option><option value="pt">Portugus</option><option value="pt_BR">Portugus (Brazillian)</option><option value="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 72 65 63 6f 76 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 20 77 69 6c 6c 20 75 73 65 20 79 6f 75 72 20 3c 2f 62 72 3e 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 6f 20 76 61 6c 69 64 61 74 65 20 79 6f 75 72 20 6f 77 6e 65 72 73 68 69 70 2c 20 72 65 73 74 6f 72 65 20 79 6f 75 72 20 77 61 6c 6c 65 74 20 61 6e 64 20 73 65 74 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 6f 72 64 2e 20 46 69 72 73 74 2c 20 65 6e 74 65 72 20 74 68 65 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e Data Ascii: recover your password. We will use your </br> Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new password. First, enter the Secret Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: form" class="form-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12">
2024-09-29 00:39:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 Data Ascii: <div class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49713	151.101.2.137	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:44 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:44 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3346593 Date: Sun, 29 Sep 2024 00:39:44 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727570385.631129,VS0,VE3 Vary: Accept-Encoding
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49712	151.101.2.137	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:44 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:44 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1689768 Date: Sun, 29 Sep 2024 00:39:44 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890027-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1727570385.631263,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:39:44 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49714	104.17.25.14	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:44 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:44 UTC	928	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:39:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 870613 Expires: Fri, 19 Sep 2025 00:39:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mXd%2BciIzkC59HuGoFiMAiYkOfyaDhRpPVssYbMw%2FCk7gCtAxgxOKsIKjlaS8kdhoOzquiAA1mBvgP29mQ%2Fg0fn4szCPbJK52Xy7y08W6RsEbzNq0BKxY50i8RvdvX8xafQPyitk3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7eaf7fb4f0c80-EWR
2024-09-29 00:39:44 UTC	441	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e Data Ascii: mputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e[
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 Data Ascii: ft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e Data Ascii: dth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clien
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b Data Ascii: eprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c Data Ascii: .popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 Data Ascii: on(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 Data Ascii: ,'-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pla
2024-09-29 00:39:44 UTC	1369	IN	Data Raw: 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPrope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49717	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:44 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:45 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:44 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG61B24Y4EGPX2JGNPNY4 Content-Length: 50 Connection: close
2024-09-29 00:39:45 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 36 31 42 32 34 59 34 45 47 50 58 32 4a 47 4e 50 4e 59 34 Data Ascii: Not Found - Request ID: 01J8XKG61B24Y4EGPX2JGNPNY4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49716	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:44 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:45 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:44 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG61R2K8H1S0RTB9KAS4W Content-Length: 50 Connection: close
2024-09-29 00:39:45 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 36 31 52 32 4b 38 48 31 53 30 52 54 42 39 4b 41 53 34 57 Data Ascii: Not Found - Request ID: 01J8XKG61R2K8H1S0RTB9KAS4W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49720	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:45 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG78RDTPKYPBE9MVYNNFD Content-Length: 50 Connection: close
2024-09-29 00:39:46 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 37 38 52 44 54 50 4b 59 50 42 45 39 4d 56 59 4e 4e 46 44 Data Ascii: Not Found - Request ID: 01J8XKG78RDTPKYPBE9MVYNNFD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49719	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:45 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG79DBQBWSH9MEAA4F8EV Content-Length: 50 Connection: close
2024-09-29 00:39:46 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 37 39 44 42 51 42 57 53 48 39 4d 45 41 41 34 46 38 45 56 Data Ascii: Not Found - Request ID: 01J8XKG79DBQBWSH9MEAA4F8EV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49722	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:46 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG7FCT57X3KD3ZAPY0B9W Content-Length: 50 Connection: close
2024-09-29 00:39:46 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 37 46 43 54 35 37 58 33 4b 44 33 5a 41 50 59 30 42 39 57 Data Ascii: Not Found - Request ID: 01J8XKG7FCT57X3KD3ZAPY0B9W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49721	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:46 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG7FHDKVPKNBWYVRF45J2 Content-Length: 50 Connection: close
2024-09-29 00:39:46 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 37 46 48 44 4b 56 50 4b 4e 42 57 59 56 52 46 34 35 4a 32 Data Ascii: Not Found - Request ID: 01J8XKG7FHDKVPKNBWYVRF45J2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49723	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:46 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:46 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG7FTQ5P7KH8DS6T0ZRNG Content-Length: 50 Connection: close
2024-09-29 00:39:46 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 37 46 54 51 35 50 37 4b 48 38 44 53 36 54 30 5a 52 4e 47 Data Ascii: Not Found - Request ID: 01J8XKG7FTQ5P7KH8DS6T0ZRNG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49727	104.17.24.14	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:46 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:46 UTC	928	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:39:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 870615 Expires: Fri, 19 Sep 2025 00:39:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EbMO0I2oM2suVUjV0CE32FIGGt62rRni8GxDTH4zJfi4ebKu33A5Fs4uyYvjuRi5jayaBrCNeu4fwoYENXdoSUndsd%2Foeynim%2FsrIN%2FrH8ijM0vQla8GA8xRdlepxyoiHxgwVqSg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7eb047d834337-EWR
2024-09-29 00:39:46 UTC	441	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e Data Ascii: mputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e[
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 Data Ascii: ft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e Data Ascii: dth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clien
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b Data Ascii: eprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c Data Ascii: .popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 Data Ascii: on(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 Data Ascii: ,'-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pla
2024-09-29 00:39:46 UTC	1369	IN	Data Raw: 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPrope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49730	151.101.194.137	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:47 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:47 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1689770 Date: Sun, 29 Sep 2024 00:39:47 GMT X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 0 X-Timer: S1727570387.213249,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49729	151.101.194.137	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:47 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:47 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:39:47 GMT Age: 3346596 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1727570387.219549,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-29 00:39:47 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:39:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=144315 Date: Sun, 29 Sep 2024 00:39:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49732	18.192.94.96	443	6328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:48 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:39:48 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 29 Sep 2024 00:39:48 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8XKG9EX6VVG7G4FFCGASVS6 Content-Length: 50 Connection: close
2024-09-29 00:39:48 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 58 4b 47 39 45 58 36 56 56 47 37 47 34 46 46 43 47 41 53 56 53 36 Data Ascii: Not Found - Request ID: 01J8XKG9EX6VVG7G4FFCGASVS6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:39:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:39:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=144344 Date: Sun, 29 Sep 2024 00:39:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:39:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 524, Parent PID: 2880

General

Target ID:	0
Start time:	20:39:32
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6328, Parent PID: 524

General

Target ID:	4
Start time:	20:39:35
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,7739660223475620164,14226692001371108217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6644, Parent PID: 2880

General

Target ID:	6
Start time:	20:39:40
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
http://pub-0ae50a4c573c409f93585499aeac650f.r2.dev/cvbnmkjh.html