Edit tour

Windows Analysis Report
http://kralkenloges.gitbook.io/

Overview

General Information

Sample URL:	http://kralkenloges.gitbook.io/
Analysis ID:	1521843
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2032,i,16033519083695758320,12931109988703200801,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kralkenloges.gitbook.io/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /v1/orgs/JTSZcrNCWQNZhv4Yyx5F/sites/site_jzA5b/insights/track_view HTTP/1.1Host: api.gitbook.comConnection: keep-aliveContent-Length: 347sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://kralkenloges.gitbook.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kralkenloges.gitbook.io/usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://kralkenloges.gitbook.io/us	HTTP Parser: No <meta name="author".. found
Source: https://kralkenloges.gitbook.io/us	HTTP Parser: No <meta name="author".. found

Source: https://kralkenloges.gitbook.io/us	HTTP Parser: No <meta name="copyright".. found
Source: https://kralkenloges.gitbook.io/us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50404 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49905 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49971 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: var fb_track_src = "https://www.facebook.com/tr/?id=1569494633287964" + equals www.facebook.com (Facebook)
Source: chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_630.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_453.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_717.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_717.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_717.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_630.2.dr, chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: kralkenloges.gitbook.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.gitbook.com
Source: global traffic	DNS traffic detected: DNS query: 4145015377-files.gitbook.io
Source: global traffic	DNS traffic detected: DNS query: app.gitbook.com
Source: global traffic	DNS traffic detected: DNS query: www.gitbook.com
Source: global traffic	DNS traffic detected: DNS query: framerusercontent.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.adroll.com
Source: global traffic	DNS traffic detected: DNS query: assets.apollo.io
Source: global traffic	DNS traffic detected: DNS query: events.framer.com
Source: global traffic	DNS traffic detected: DNS query: js.hsleadflows.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: aplo-evnt.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: d.adroll.com
Source: global traffic	DNS traffic detected: DNS query: x.adroll.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: ipv4.d.adroll.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.taboola.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: forms.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic	DNS traffic detected: DNS query: content.gitbook.com
Source: global traffic	DNS traffic detected: DNS query: cdn.iframe.ly

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Sun, 29 Sep 2024 02:35:59 GMTx-amz-apigw-id: e2J6iFUiIAMEQIw=x-amzn-RequestId: b3aca274-a835-4608-b052-cffd1183289cx-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 88fd4dc311317996718ed4ed98e5cbda.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: b0Krz02ygHu0CcXCNIbASDuVXkFGOgmOM7vIMKp7gAfSna6innK-cQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Sun, 29 Sep 2024 02:37:09 GMTx-amz-apigw-id: e2KFcFmKIAMEktw=x-amzn-RequestId: f760b64a-6667-4565-96e0-534b0516d0a5x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 d8006f736d3dc32a20a91813f2f50fa2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: A63bVUA75R10apdyagtuI_9rOgaw1axvaR6RB5JCC4_wTsuU5htqtA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Sun, 29 Sep 2024 02:37:16 GMTx-amz-apigw-id: e2KGgGI8oAMEBig=x-amzn-RequestId: 35440edf-d106-4a4a-a91e-fe5e14026b39x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 12dba18ae3d66aa7dad74e664431ae9a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: mjaFEKbCxCAkHlH8bUUkVpR3nfLMF7GdFrS2-7h5yzWk2SwoKdzIjQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Sun, 29 Sep 2024 02:37:23 GMTx-amz-apigw-id: e2KHmFcSIAMEbmg=x-amzn-RequestId: bbe01553-7276-4c8c-aeef-7d21e4833dd7x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 6f4aa26c09fb9bb4d152519f44256a4c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P7X-Amz-Cf-Id: pmqr3LlRx0IeyGzBkW3I-kZiqlVhY6B4ttkX6xOtBb9ttJt-PXJGAA==

Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: http://a.adroll.com
Source: chromecache_437.2.dr, chromecache_602.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_259.2.dr, chromecache_623.2.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_259.2.dr, chromecache_623.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://www.ibm.comhttp://www.boldmonday.comMike
Source: chromecache_678.2.dr, chromecache_509.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_354.2.dr, chromecache_384.2.dr, chromecache_649.2.dr, chromecache_531.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_672.2.dr	String found in binary or memory: https://4145015377-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVrOLF8IVae5p5
Source: chromecache_416.2.dr	String found in binary or memory: https://abcdinamo.com/information
Source: chromecache_458.2.dr	String found in binary or memory: https://abcdinamo.com/informationABCFavoritVariableWeightSlantLightABCFavoritVariable-LightBookABCFa
Source: chromecache_416.2.dr	String found in binary or memory: https://abcdinamo.com/informationAlt
Source: chromecache_561.2.dr	String found in binary or memory: https://abcdinamo.com/informationCircled
Source: chromecache_416.2.dr	String found in binary or memory: https://abcdinamo.com/informationCopyright
Source: chromecache_416.2.dr, chromecache_458.2.dr	String found in binary or memory: https://abcdinamo.comLawful
Source: chromecache_561.2.dr, chromecache_458.2.dr	String found in binary or memory: https://abcdinamo.comhttps://abcdinamo.com/information
Source: chromecache_561.2.dr, chromecache_458.2.dr	String found in binary or memory: https://abcdinamo.comhttps://abcdinamo.com/informationCopyright
Source: chromecache_453.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_540.2.dr, chromecache_672.2.dr	String found in binary or memory: https://api.gitbook.com
Source: chromecache_444.2.dr, chromecache_578.2.dr	String found in binary or memory: https://aplo-evnt.com/api/v1/intent_pixel/track_request
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://app.gitbook.com/public/amp-5.8.0-gitbook1.10.1.min.js
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://assets.apollo.io/micro/website-tracker/tracker.iife.js?nocache=
Source: chromecache_431.2.dr, chromecache_339.2.dr	String found in binary or memory: https://assets.mixkit.co/videos/preview/mixkit-shining-sun-in-the-sky-surrounded-by-moving-clouds-31
Source: chromecache_630.2.dr, chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_540.2.dr	String found in binary or memory: https://cdn.iframe.ly/embed.js
Source: chromecache_318.2.dr, chromecache_360.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/katex
Source: chromecache_318.2.dr, chromecache_360.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.4/MathJax.js?config=TeX-MML-AM_CHTML
Source: chromecache_607.2.dr, chromecache_717.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_607.2.dr, chromecache_717.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_540.2.dr	String found in binary or memory: https://content.gitbook.com
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://d.adroll.com/p
Source: chromecache_672.2.dr	String found in binary or memory: https://docs.gitbook.com/published-documentation/custom-domain/configure-dns#are-you-using-cloudflar
Source: chromecache_372.2.dr	String found in binary or memory: https://events.framer.com/script
Source: chromecache_437.2.dr, chromecache_602.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_319.2.dr, chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/fragmentmono/v4/4iCr6K5wfMRRjxp0DA6-2CLnN4FNh4UI_1U.woff2
Source: chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://framerusercontent.com/assets/93a6peqhbHQaWP67zttmrKDazq4.png
Source: chromecache_321.2.dr, chromecache_667.2.dr	String found in binary or memory: https://framerusercontent.com/assets/EOelatdZnoUpUknlft6k01PCdw.ttf
Source: chromecache_257.2.dr, chromecache_694.2.dr, chromecache_742.2.dr, chromecache_619.2.dr, chromecache_461.2.dr, chromecache_348.2.dr	String found in binary or memory: https://framerusercontent.com/assets/QvC7elxYMNGK5EgZdtl8Bqevw.otf
Source: chromecache_319.2.dr, chromecache_480.2.dr	String found in binary or memory: https://framerusercontent.com/assets/W8a3dfvGM3NpHDSLEUaoVi842zk.woff2
Source: chromecache_412.2.dr, chromecache_280.2.dr, chromecache_374.2.dr, chromecache_242.2.dr	String found in binary or memory: https://framerusercontent.com/assets/YWayyt1Iml0BqgKTFrny98dORY.otf
Source: chromecache_713.2.dr, chromecache_363.2.dr	String found in binary or memory: https://framerusercontent.com/assets/cCZCKIjQNSwXu8OS9iKdomHDPk.ttf
Source: chromecache_412.2.dr, chromecache_242.2.dr	String found in binary or memory: https://framerusercontent.com/assets/wyZX6S9AIS0ZkvmBApXFphsTU.otf
Source: chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://framerusercontent.com/assets/zlGUDsxOhDseDbUkyYaNkpCbM.png
Source: chromecache_372.2.dr	String found in binary or memory: https://framerusercontent.com/images/93a6peqhbHQaWP67zttmrKDazq4.png
Source: chromecache_372.2.dr	String found in binary or memory: https://framerusercontent.com/images/RgkZ9HNeBdlHzM9VUP5lrbUXoA.png
Source: chromecache_372.2.dr	String found in binary or memory: https://framerusercontent.com/images/zlGUDsxOhDseDbUkyYaNkpCbM.png
Source: chromecache_372.2.dr	String found in binary or memory: https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/script_main.JFJZOETE.mjs
Source: chromecache_372.2.dr	String found in binary or memory: https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/searchIndex-1y5Jynsg3BwC.json
Source: chromecache_540.2.dr	String found in binary or memory: https://gitbook.slack.com/archives/C07AQA4256G/p1721923712258389
Source: chromecache_444.2.dr, chromecache_578.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_525.2.dr	String found in binary or memory: https://google.com
Source: chromecache_525.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_384.2.dr, chromecache_531.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/8443689.js
Source: chromecache_375.2.dr, chromecache_724.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1727577300000/8443689.js
Source: chromecache_354.2.dr, chromecache_649.2.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_375.2.dr, chromecache_724.2.dr	String found in binary or memory: https://js.hs-banner.com/v2/8443689/banner.js
Source: chromecache_375.2.dr, chromecache_724.2.dr	String found in binary or memory: https://js.hsleadflows.net/leadflows.js
Source: chromecache_710.2.dr, chromecache_666.2.dr	String found in binary or memory: https://js.stripe.com/v3
Source: chromecache_672.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/releases/v6.6.0/svgs/regular/bars.svg?v=2&token=a463935e93);mask-re
Source: chromecache_672.2.dr	String found in binary or memory: https://kralkenloges.gitbook.io/us/
Source: chromecache_672.2.dr	String found in binary or memory: https://kralkenloges.gitbook.io/us/~gitbook/ogimage/FpMTv4CsjAqIvrE3aeVO
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://lex.33across.com/ps/v1/pubtoken/?pid=115&event=rtg&us_privacy=&rnd=
Source: chromecache_453.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_630.2.dr, chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_290.2.dr	String found in binary or memory: https://s.adroll.com
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://s.adroll.com/j/
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://s.adroll.com/j/nrpa.js
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://s.adroll.com/j/pre/
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_397.2.dr	String found in binary or memory: https://tailwindcss.com
Source: chromecache_630.2.dr, chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_241.2.dr	String found in binary or memory: https://tinyurl.com/y2uuvskb
Source: chromecache_253.2.dr	String found in binary or memory: https://unpkg.com/
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://widget.intercom.io/widget/
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://www.clarity.ms/s/0.7.34/clarity.js
Source: chromecache_372.2.dr	String found in binary or memory: https://www.framer.com/
Source: chromecache_672.2.dr	String found in binary or memory: https://www.gitbook.com/?utm_source=content&utm_medium=trademark&utm_campaign=VrOLF8IVae5p5N
Source: chromecache_453.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_369.2.dr, chromecache_624.2.dr, chromecache_639.2.dr, chromecache_451.2.dr, chromecache_687.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11226840316/?random
Source: chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_453.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-11226840316
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-XDQWKTB16G
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PVD2ZHVC
Source: chromecache_300.2.dr, chromecache_490.2.dr, chromecache_448.2.dr, chromecache_336.2.dr, chromecache_291.2.dr, chromecache_525.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_514.2.dr, chromecache_290.2.dr	String found in binary or memory: https://x.adroll.com/pxl/iframe_content.html?advertisable=
Source: chromecache_567.2.dr, chromecache_496.2.dr	String found in binary or memory: https://youtu.be/WdMR737ptFs).

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2032,i,16033519083695758320,12931109988703200801,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kralkenloges.gitbook.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2032,i,16033519083695758320,12931109988703200801,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://kralkenloges.gitbook.io/	11%	Virustotal		Browse
http://kralkenloges.gitbook.io/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Source	Detection	Scanner	Link
framerusercontent.com	1%	Virustotal	Browse
events.framer.com	0%	Virustotal	Browse
user-data-eu.bidswitch.net	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
eu-eb2.3lift.com	0%	Virustotal	Browse
forms.hubspot.com	0%	Virustotal	Browse
www.gitbook.com	0%	Virustotal	Browse
js.hs-analytics.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
track.hubspot.com	0%	Virustotal	Browse
script.hotjar.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
js.hs-scripts.com	0%	Virustotal	Browse
nexus-websocket-a.intercom.io	0%	Virustotal	Browse
idsync.rlcdn.com	0%	Virustotal	Browse
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
cdn.iframe.ly	0%	Virustotal	Browse
static-cdn.hotjar.com	0%	Virustotal	Browse
js.intercomcdn.com	0%	Virustotal	Browse
am-vip001.taboola.com	0%	Virustotal	Browse
api.gitbook.com	0%	Virustotal	Browse
aplo-evnt.com	0%	Virustotal	Browse
js.hs-banner.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://tailwindcss.com	0%	URL Reputation	safe
https://assets.mixkit.co/videos/preview/mixkit-shining-sun-in-the-sky-surrounded-by-moving-clouds-31	0%	URL Reputation	safe
https://assets.apollo.io/micro/website-tracker/tracker.iife.js?nocache=	0%	URL Reputation	safe
https://s.adroll.com	0%	URL Reputation	safe
https://x.adroll.com/.well-known/attribution-reporting/debug/verbose	0%	URL Reputation	safe
https://aplo-evnt.com/api/v1/intent_pixel/track_request?app_id=66322172849d9e0a5aefb67a	0%	URL Reputation	safe
https://widget.intercom.io/widget/artlvye9	0%	URL Reputation	safe
https://abcdinamo.com/information	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://api-iam.intercom.io/messenger/web/ping	0%	URL Reputation	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
framerusercontent.com	108.138.7.13	true	false	1%, Virustotal, Browse	unknown
forms.hubspot.com	104.16.117.116	true	false	0%, Virustotal, Browse	unknown
events.framer.com	3.160.150.112	true	false	0%, Virustotal, Browse	unknown
js.hs-analytics.net	104.16.160.168	true	false	0%, Virustotal, Browse	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	0%, Virustotal, Browse	unknown
www.gitbook.com	104.18.41.89	true	false	0%, Virustotal, Browse	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	0%, Virustotal, Browse	unknown
idsync.rlcdn.com	35.244.174.68	true	false	0%, Virustotal, Browse	unknown
track.hubspot.com	104.16.117.116	true	false	0%, Virustotal, Browse	unknown
script.hotjar.com	13.33.187.109	true	false	0%, Virustotal, Browse	unknown
adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com	54.195.105.7	true	false	0%, Virustotal, Browse	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false	0%, Virustotal, Browse	unknown
js.hs-scripts.com	104.16.140.209	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	172.217.16.194	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
aplo-evnt.com	34.107.133.146	true	false	0%, Virustotal, Browse	unknown
nexus-websocket-a.intercom.io	34.237.73.95	true	false	0%, Virustotal, Browse	unknown
cdn.iframe.ly	108.138.7.8	true	false	0%, Virustotal, Browse	unknown
api.gitbook.com	104.18.41.89	true	false	0%, Virustotal, Browse	unknown
static-cdn.hotjar.com	18.66.102.51	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	3.33.220.150	true	false	0%, Virustotal, Browse	unknown
am-vip001.taboola.com	141.226.228.48	true	false	0%, Virustotal, Browse	unknown
js.intercomcdn.com	18.245.46.20	true	false	0%, Virustotal, Browse	unknown
js.hs-banner.com	172.64.147.16	true	false	0%, Virustotal, Browse	unknown
pixel.tapad.com	34.111.113.62	true	false		unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false		unknown
pippio.com	107.178.254.65	true	false		unknown
d1qug1xf2dk5z6.cloudfront.net	18.245.86.47	true	false		unknown
us-u.openx.net	35.244.159.8	true	false		unknown
nydc1.outbrain.org	70.42.32.255	true	false		unknown
ads-vpc-alb-1-euwest1.r53.adroll.com	52.49.10.119	true	false		unknown
widget.intercom.io	13.224.189.49	true	false		unknown
api-iam.intercom.io	44.212.157.166	true	false		unknown
content.gitbook.com	104.18.41.89	true	false		unknown
sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com	99.81.156.147	true	false		unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false		unknown
js.hsleadflows.net	104.18.139.17	true	false		unknown
kralkenloges.gitbook.io	172.64.147.209	true	false		unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false		unknown
4145015377-files.gitbook.io	172.64.147.209	true	false		unknown
googleads.g.doubleclick.net	142.250.74.194	true	false		unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false		unknown
assets.apollo.io	104.20.39.213	true	false		unknown
td.doubleclick.net	142.250.186.34	true	false		unknown
app.gitbook.com	104.18.41.89	true	false		unknown
ib.anycast.adnxs.com	37.252.171.21	true	false		unknown
d.adroll.com	unknown	unknown	false		unknown
static.hotjar.com	unknown	unknown	false		unknown
pixel.rubiconproject.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
connect.facebook.net	unknown	unknown	false		unknown
x.adroll.com	unknown	unknown	false		unknown
ups.analytics.yahoo.com	unknown	unknown	false		unknown
image2.pubmatic.com	unknown	unknown	false		unknown
ipv4.d.adroll.com	unknown	unknown	false		unknown
sync.outbrain.com	unknown	unknown	false		unknown
sync.taboola.com	unknown	unknown	false		unknown
x.bidswitch.net	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		unknown
s.adroll.com	unknown	unknown	false		unknown
snap.licdn.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
eb2.3lift.com	unknown	unknown	false		unknown

Name	Malicious	Antivirus Detection	Reputation
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-C77EJYGA.mjs	false		unknown
https://d.adroll.com/cm/l/out?adroll_fpc=1453fd5ce870bdc6a246ff1d87d6ac9c-1727577355603&flg=1&pv=58477291140.725266&arrfrr=https%3A%2F%2Fwww.gitbook.com%2F%3Futm_source%3Dcontent%26utm_medium%3Dtrademark%26utm_campaign%3DVrOLF8IVae5p5NS2CGGp&advertisable=ORXINTUUJZD77C3B2PJAOG	false		unknown
https://framerusercontent.com/images/BBT0LKo4h9TLuhQGwnF0gSnvA.svg	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-TUQKMTTT.min.js	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-7QJBZ3JU.mjs	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-OPXIRAJJ.min.js	false		unknown
https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=1453fd5ce870bdc6a246ff1d87d6ac9c-1727577355603&flg=1&pv=58477291140.725266&arrfrr=https%3A%2F%2Fwww.gitbook.com%2F%3Futm_source%3Dcontent%26utm_medium%3Dtrademark%26utm_campaign%3DVrOLF8IVae5p5NS2CGGp&advertisable=ORXINTUUJZD77C3B2PJAOG	false		unknown
https://framerusercontent.com/assets/e0jnKwFezEZusbq3uF8evNM43Y.mp4	false		unknown
https://framerusercontent.com/images/8VcHvzX8C0lxnacCAMoYbMKV1IA.svg	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-BA4MRJJO.mjs	false		unknown
https://framerusercontent.com/images/Y8sDyJNMZZadDmja6CB0QJVPY.svg	false		unknown
https://d.adroll.com/cm/triplelift/out?adroll_fpc=1453fd5ce870bdc6a246ff1d87d6ac9c-1727577355603&flg=1&pv=58477291140.725266&arrfrr=https%3A%2F%2Fwww.gitbook.com%2F%3Futm_source%3Dcontent%26utm_medium%3Dtrademark%26utm_campaign%3DVrOLF8IVae5p5NS2CGGp&advertisable=ORXINTUUJZD77C3B2PJAOG	false		unknown
https://kralkenloges.gitbook.io/us/	false		unknown
https://framerusercontent.com/assets/GEdz9JUWAYrjRqGDnbtUl11Hok.json	false		unknown
https://kralkenloges.gitbook.io/_next/static/chunks/main-app-7fe2ade0fc9c0065.js	false		unknown
https://ups.analytics.yahoo.com/ups/55980/sync?_origin=1&uid=YWMzY2Y3NGExNTNmMDc5MWI0Nzg0YzdkNGVmMTczZDQ&gdpr=0&gdpr_consent=BOOla_OOOla_OA2ABBENAkwAAAAXyACAAyAIIA&verify=true	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-AMZKE3VI.mjs	false		unknown
https://framerusercontent.com/images/BNPaoOMnGYSuxWAbHMCsLR0G50.svg	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-3XBA4EIZ.mjs	false		unknown
https://framerusercontent.com/images/NUyVoHzle626Z5iDieKCikDjw.svg	false		unknown
https://idsync.rlcdn.com/1000.gif?memo=CMiIFxIrCicIARDqIhogYWMzY2Y3NGExNTNmMDc5MWI0Nzg0YzdkNGVmMTczZDQQABoNCI764rcGEgUI6AcQAEIASgA	false		unknown
https://sync.taboola.com/sg/adroll-network/1/rtb-h?taboola_hm=YWMzY2Y3NGExNTNmMDc5MWI0Nzg0YzdkNGVmMTczZDQ	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/script_main.JFJZOETE.mjs	false		unknown
https://framerusercontent.com/images/13RJiyGmM7VY7YyN0DXHmPfH6g.svg	false		unknown
https://framerusercontent.com/images/yRwUqKLsLuM5QqhibTsJu2vj9A.svg	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-QCFHWVRO.min.js	false		unknown
https://framerusercontent.com/assets/OrGbBW4KZNpizSyEO3Jh1VvucSk.mp4	false		unknown
https://framerusercontent.com/images/vjeJUtP3EqpwG46WI66qgPsxw.svg	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-7YWHTNBW.min.js	false		unknown
https://x.adroll.com/.well-known/attribution-reporting/debug/verbose	false	URL Reputation: safe	unknown
https://app.gitbook.com/public/dist/chunks/chunk-3J3X2ZCX.min.js	false		unknown
https://kralkenloges.gitbook.io/	false		unknown
https://kralkenloges.gitbook.io/_next/static/css/bf7df5d7c6de54ec.css	false		unknown
https://aplo-evnt.com/api/v1/intent_pixel/track_request?app_id=66322172849d9e0a5aefb67a	false	URL Reputation: safe	unknown
https://cdn.iframe.ly/embed.js	false		unknown
https://widget.intercom.io/widget/artlvye9	false	URL Reputation: safe	unknown
https://app.gitbook.com/public/dist/chunks/chunk-4S3DWK4B.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-BJE7VXXC.min.js	false		unknown
https://kralkenloges.gitbook.io/_next/static/css/0f891de5863d7182.css	false		unknown
https://framerusercontent.com/images/gZONBZCFttEpxKRkeklmIBgK9c.svg	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-CGUCE5C2.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-HZIB4XCQ.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-4GRYB3TH.min.js	false		unknown
https://d.adroll.com/cm/n/out?adroll_fpc=1453fd5ce870bdc6a246ff1d87d6ac9c-1727577355603&flg=1&pv=58477291140.725266&arrfrr=https%3A%2F%2Fwww.gitbook.com%2F%3Futm_source%3Dcontent%26utm_medium%3Dtrademark%26utm_campaign%3DVrOLF8IVae5p5NS2CGGp&advertisable=ORXINTUUJZD77C3B2PJAOG	false		unknown
https://js.intercomcdn.com/frame.8ba9274b.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-Y4EQQS6S.min.js	false		unknown
https://kralkenloges.gitbook.io/_next/static/chunks/app/(space)/(content)/layout-e6c9e9cb143d3791.js	false		unknown
https://framerusercontent.com/assets/IH3qEgN5Xhe3P5Oc38wUsUzD48.mp4	false		unknown
https://framerusercontent.com/assets/VNDf6HLkZaMX9RmUmDNyCldh40.json	false		unknown
https://match.adsrvr.org/track/cmb/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=b0288ac6-597e-46c4-aef6-3af5203447ac%252C%252C&gdpr=0&gdpr_consent=	false		unknown
https://kralkenloges.gitbook.io/_next/static/chunks/8381-2f754da8e779eeab.js	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-VPHHRKQN.mjs	false		unknown
https://framerusercontent.com/assets/H87PsNhWy8cFz4gFDswOyZ0wI.mp4	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-DMBAXWIX.min.js	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-ANNUZAY6.mjs	false		unknown
https://framerusercontent.com/assets/vyyY2wuDHQQOUPZEn7IfT6l1k.mp4	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-K3NYPXBX.mjs	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-RV3CQIE5.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-UR2AEEBZ.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-QRYBBMJY.min.js	false		unknown
https://framerusercontent.com/images/owl1Ry3nFCuIDLfRWz8DY6TZg.svg	false		unknown
https://framerusercontent.com/assets/vchUKhH5jId4BM2Ky01vWEOpyQk.json	false		unknown
https://framerusercontent.com/assets/vQyevYAyHtARFwPqUzQGpnDs.woff2	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-VCVBXU25.min.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-V2XYJEYR.min.js	false		unknown
https://kralkenloges.gitbook.io/_next/static/chunks/2632-58a8169263096f76.js	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-TDE6SQPC.min.js	false		unknown
https://framerusercontent.com/images/i8DLGHTg5fCqkRzC0QYp0dHFGg.svg	false		unknown
https://api-iam.intercom.io/messenger/web/ping	false	URL Reputation: safe	unknown
https://d.adroll.com/cm/o/out?adroll_fpc=1453fd5ce870bdc6a246ff1d87d6ac9c-1727577355603&flg=1&pv=58477291140.725266&arrfrr=https%3A%2F%2Fwww.gitbook.com%2F%3Futm_source%3Dcontent%26utm_medium%3Dtrademark%26utm_campaign%3DVrOLF8IVae5p5NS2CGGp&advertisable=ORXINTUUJZD77C3B2PJAOG	false		unknown
https://framerusercontent.com/images/t7whzgDoFFtmnUQdF9zDYs2ZNU.svg	false		unknown
https://kralkenloges.gitbook.io/us	false		unknown
https://framerusercontent.com/images/nPiG7esJaITHCKACCbnE4wRWeM.svg	false		unknown
https://js.hs-scripts.com/8443689.js	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-TCAKZ7ED.mjs	false		unknown
https://framerusercontent.com/assets/YHmX9xMC7bkSEruKkUXCDIIkHE.json	false		unknown
https://framerusercontent.com/images/C77S9QIVWPrJ5ogXNcQxB5zaQ.svg	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/chunk-34P67EG2.mjs	false		unknown
https://framerusercontent.com/images/M0yZ8i7x0fPIPMpO6mtuuo.svg	false		unknown
https://kralkenloges.gitbook.io/_next/static/chunks/8731-301749ee030e10bf.js	false		unknown
https://framerusercontent.com/images/iOsOpg9EsU7DuEoZ9aNk1pCFSbc.svg	false		unknown
https://framerusercontent.com/images/beEcY14cP9UEdgRX6ort8DRSbZ4.svg	false		unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDYmdGw9MTI5NjAw&piggybackCookie=YWMzY2Y3NGExNTNmMDc5MWI0Nzg0YzdkNGVmMTczZDQ&gdpr=0&gdpr_consent=BOOoKswOOoKswA2ABBENAkwAAAAXyACACYAIIA	false		unknown
https://framerusercontent.com/images/DOgagyjQ5g2yS9tcEdx68Y7Zeo.svg	false		unknown
https://app.gitbook.com/public/dist/chunks/chunk-LHBY663R.min.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://kralkenloges.gitbook.io/us/~gitbook/ogimage/FpMTv4CsjAqIvrE3aeVO	chromecache_672.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_630.2.dr, chromecache_719.2.dr, chromecache_434.2.dr, chromecache_453.2.dr	false	URL Reputation: safe	unknown
https://tailwindcss.com	chromecache_397.2.dr	false	URL Reputation: safe	unknown
https://assets.mixkit.co/videos/preview/mixkit-shining-sun-in-the-sky-surrounded-by-moving-clouds-31	chromecache_431.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://assets.apollo.io/micro/website-tracker/tracker.iife.js?nocache=	chromecache_372.2.dr, chromecache_481.2.dr, chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://s.adroll.com	chromecache_290.2.dr	false	URL Reputation: safe	unknown
https://abcdinamo.comhttps://abcdinamo.com/informationCopyright	chromecache_561.2.dr, chromecache_458.2.dr	false		unknown
https://tinyurl.com/y2uuvskb	chromecache_241.2.dr	false		unknown
https://js-na1.hs-scripts.com/8443689.js	chromecache_384.2.dr, chromecache_531.2.dr	false		unknown
https://abcdinamo.com/information	chromecache_416.2.dr	false	URL Reputation: safe	unknown
https://www.gitbook.com/?utm_source=content&utm_medium=trademark&utm_campaign=VrOLF8IVae5p5N	chromecache_672.2.dr	false		unknown
https://connect.facebook.net/	chromecache_607.2.dr, chromecache_717.2.dr	false	URL Reputation: safe	unknown
https://gitbook.slack.com/archives/C07AQA4256G/p1721923712258389	chromecache_540.2.dr	false		unknown
https://framerusercontent.com/sites/nNji44mQfYtH9VMKskPg2/searchIndex-1y5Jynsg3BwC.json	chromecache_372.2.dr	false		unknown
http://www.hubspot.com	chromecache_354.2.dr, chromecache_384.2.dr, chromecache_649.2.dr, chromecache_531.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.7.34	unknown	United States	16509	AMAZON-02US	false
70.42.32.255	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
104.18.40.47	unknown	United States	13335	CLOUDFLARENETUS	false
34.254.236.192	unknown	United States	16509	AMAZON-02US	false
108.138.7.8	cdn.iframe.ly	United States	16509	AMAZON-02US	false
44.212.157.166	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
34.237.73.95	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
54.195.105.7	adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
104.16.140.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
52.49.10.119	ads-vpc-alb-1-euwest1.r53.adroll.com	United States	16509	AMAZON-02US	false
3.75.62.37	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
13.224.189.49	widget.intercom.io	United States	16509	AMAZON-02US	false
104.20.40.213	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
104.17.175.201	unknown	United States	13335	CLOUDFLARENETUS	false
99.81.156.147	sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.16.141.209	unknown	United States	13335	CLOUDFLARENETUS	false
34.107.133.146	aplo-evnt.com	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
13.33.187.109	script.hotjar.com	United States	16509	AMAZON-02US	false
18.66.102.51	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
54.78.5.192	unknown	United States	16509	AMAZON-02US	false
104.18.141.17	unknown	United States	13335	CLOUDFLARENETUS	false
108.138.7.13	framerusercontent.com	United States	16509	AMAZON-02US	false
104.18.139.17	js.hsleadflows.net	United States	13335	CLOUDFLARENETUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
13.224.189.35	unknown	United States	16509	AMAZON-02US	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
172.64.147.16	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.160.168	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
142.250.74.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.147.209	kralkenloges.gitbook.io	United States	13335	CLOUDFLARENETUS	false
18.245.46.20	js.intercomcdn.com	United States	16509	AMAZON-02US	false
18.245.86.47	d1qug1xf2dk5z6.cloudfront.net	United States	16509	AMAZON-02US	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
54.81.238.62	unknown	United States	14618	AMAZON-AESUS	false
3.160.150.112	events.framer.com	United States	16509	AMAZON-02US	false
18.245.86.120	unknown	United States	16509	AMAZON-02US	false
3.160.150.114	unknown	United States	16509	AMAZON-02US	false
104.18.41.89	www.gitbook.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
185.89.210.90	unknown	Germany	29990	ASN-APPNEXUS	false
172.64.146.167	unknown	United States	13335	CLOUDFLARENETUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
108.138.7.90	unknown	United States	16509	AMAZON-02US	false
104.20.39.213	assets.apollo.io	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
104.16.117.116	forms.hubspot.com	United States	13335	CLOUDFLARENETUS	false
18.245.46.55	unknown	United States	16509	AMAZON-02US	false
37.252.171.21	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521843
Start date and time:	2024-09-29 04:34:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://kralkenloges.gitbook.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@21/802@194/69
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.gitbook.com/?utm_source=content&utm_medium=trademark&utm_campaign=VrOLF8IVae5p5NS2CGGp Browse: https://app.gitbook.com/join?auth=github

Input	Output
URL: https://kralkenloges.gitbook.io/us Model: jbxai	{ "brand":["Kraken"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.gitbook.com/?utm_source=content&utm_medium=trademark&utm_campaign=VrOLF8IVae5p5NS2CGGp Model: jbxai	{ "brand":["GitBook"], "contains_trigger_text":true, "trigger_text":"Product documentation your users will love", "prominent_button_name":"Start for free", "text_input_field_labels":["GitBook editor", "Headquarters", "Ask or search", "Home", "Docs sites"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.gitbook.com/?utm_source=content&utm_medium=trademark&utm_campaign=VrOLF8IVae5p5NS2CGGp Model: jbxai	{ "brand":["GitHub", "FedEx", "Red Hat", "Linear", "Qualcomm", "IBM", "CISCO"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Start for free", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57328)
Category:	downloaded
Size (bytes):	57396
Entropy (8bit):	5.230131726609843
Encrypted:	false
SSDEEP:	768:aMEpqG3P2CywXaqGOUCY7apChms7TYfgfr55x3r1xM1nV+DCR0z42nMCOLR61:3EoaPbGOUCY7ap8miTCnSCR0zOCOLR61
MD5:	9C7A1629BA881971AC9B681B8B1F97A8
SHA1:	EB6B3E69EE84DE756A9DBEDF710E8B33FA6DB92C
SHA-256:	D0C58CBE7A4CC1628A9DF96613303BC688C978DC2D284AFB1E829B71A9B4E0BB
SHA-512:	FB3992ABECE76800F660E1C9C2279D80DF64309EE34EEB98169DF9876CF7ACB122039577B903A6DA11749F3AD8CEBFC999F0FF3756853FB47C75137F016D08F0
Malicious:	false
Reputation:	low
URL:	https://app.gitbook.com/public/dist/chunks/chunk-OPXIRAJJ.min.js
Preview:	import{f as F}from"/public/dist/chunks/chunk-YFNJ7WVR.min.js";F();var g;(function(r){r.assertEqual=n=>n;function e(n){}r.assertIs=e;function t(n){throw new Error}r.assertNever=t,r.arrayToEnum=n=>{let a={};for(let i of n)a[i]=i;return a},r.getValidEnumValues=n=>{let a=r.objectKeys(n).filter(o=>typeof n[n[o]]!="number"),i={};for(let o of a)i[o]=n[o];return r.objectValues(i)},r.objectValues=n=>r.objectKeys(n).map(function(a){return n[a]}),r.objectKeys=typeof Object.keys=="function"?n=>Object.keys(n):n=>{let a=[];for(let i in n)Object.prototype.hasOwnProperty.call(n,i)&&a.push(i);return a},r.find=(n,a)=>{for(let i of n)if(a(i))return i},r.isInteger=typeof Number.isInteger=="function"?n=>Number.isInteger(n):n=>typeof n=="number"&&isFinite(n)&&Math.floor(n)===n;function s(n,a=" \| "){return n.map(i=>typeof i=="string"?`'${i}'`:i).join(a)}r.joinValues=s,r.jsonStringifyReplacer=(n,a)=>typeof a=="bigint"?a.toString():a})(g\|\|(g={}));var be;(function(r){r.mergeShapes=(e,t)=>({...e,...t})})(be\|\|(be

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 55 4f 6d 46 6f 39 7a 74 37 45 32 36 46 64 42 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 61 39 34 31 37 32 64 34 64 63 35 37 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: UOmFo9zt7E26FdBZ.1Context: f54a94172d4dc577
2024-09-29 02:35:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:35:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 55 4f 6d 46 6f 39 7a 74 37 45 32 36 46 64 42 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 61 39 34 31 37 32 64 34 64 63 35 37 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 59 30 72 37 33 50 2b 67 66 79 32 4d 2b 77 71 31 6f 65 4b 68 39 73 52 47 73 5a 62 4a 49 6e 67 66 46 31 73 62 71 6f 76 58 48 68 41 37 43 4c 49 79 79 39 6c 36 7a 4a 33 79 37 77 34 68 67 66 49 4e 59 70 36 2b 76 4a 50 36 36 35 66 66 63 6a 38 38 35 67 54 70 6f 58 58 49 68 4e 44 38 6f 4b 6b 59 53 6d 73 47 4b 41 4f 54 4d 51 53 49 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: UOmFo9zt7E26FdBZ.2Context: f54a94172d4dc577<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfY0r73P+gfy2M+wq1oeKh9sRGsZbJIngfF1sbqovXHhA7CLIyy9l6zJ3y7w4hgfINYp6+vJP665ffcj885gTpoXXIhND8oKkYSmsGKAOTMQSI
2024-09-29 02:35:26 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 55 4f 6d 46 6f 39 7a 74 37 45 32 36 46 64 42 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 61 39 34 31 37 32 64 34 64 63 35 37 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: UOmFo9zt7E26FdBZ.3Context: f54a94172d4dc577
2024-09-29 02:35:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:35:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 72 46 56 42 34 6f 37 38 62 45 61 76 34 47 52 47 34 2f 2f 6c 5a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: rFVB4o78bEav4GRG4//lZA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 6c 59 46 57 55 59 36 31 45 43 6d 77 61 4a 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 66 38 33 33 63 36 65 32 62 61 32 65 39 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SlYFWUY61ECmwaJH.1Context: ecf833c6e2ba2e9f
2024-09-29 02:35:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:35:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 6c 59 46 57 55 59 36 31 45 43 6d 77 61 4a 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 66 38 33 33 63 36 65 32 62 61 32 65 39 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 59 30 72 37 33 50 2b 67 66 79 32 4d 2b 77 71 31 6f 65 4b 68 39 73 52 47 73 5a 62 4a 49 6e 67 66 46 31 73 62 71 6f 76 58 48 68 41 37 43 4c 49 79 79 39 6c 36 7a 4a 33 79 37 77 34 68 67 66 49 4e 59 70 36 2b 76 4a 50 36 36 35 66 66 63 6a 38 38 35 67 54 70 6f 58 58 49 68 4e 44 38 6f 4b 6b 59 53 6d 73 47 4b 41 4f 54 4d 51 53 49 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: SlYFWUY61ECmwaJH.2Context: ecf833c6e2ba2e9f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfY0r73P+gfy2M+wq1oeKh9sRGsZbJIngfF1sbqovXHhA7CLIyy9l6zJ3y7w4hgfINYp6+vJP665ffcj885gTpoXXIhND8oKkYSmsGKAOTMQSI
2024-09-29 02:35:34 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 53 6c 59 46 57 55 59 36 31 45 43 6d 77 61 4a 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 66 38 33 33 63 36 65 32 62 61 32 65 39 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: SlYFWUY61ECmwaJH.3Context: ecf833c6e2ba2e9f
2024-09-29 02:35:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:35:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 44 77 71 2b 37 4b 33 62 55 36 53 30 51 4f 50 53 63 49 35 76 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VDwq+7K3bU6S0QOPScI5vA.0Payload parsing failed.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://kralkenloges.gitbook.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Windows Analysis Report
http://kralkenloges.gitbook.io/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:38 UTC	666	OUT	GET / HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:39 UTC	638	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 29 Sep 2024 02:35:39 GMT Content-Length: 0 Connection: close Location: https://kralkenloges.gitbook.io/us/ CF-Ray: 8ca894be4a1a7ce8-EWR CF-Cache-Status: DYNAMIC Vary: Accept-Encoding Cf-Placement: remote-MRS NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqS2IHdHup0hxby9WXmnA6neA4SdEz27M3uhI53pzjacJvJEW4Ew4bbqPTPfkD2bvpZuZZrpRljzNfwacGaseYAtG8JzLOlWfwRiTN7hCsoLJTSWKjalCh7tJ52aNhquedmie6REgvyzpk6DbCbK"}],"group":"cf-nel","max_age":604800} x-gitbook-cache: skip Server: cloudflare

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:39 UTC	669	OUT	GET /us/ HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:39 UTC	608	IN	HTTP/1.1 308 Permanent Redirect Date: Sun, 29 Sep 2024 02:35:39 GMT Content-Length: 0 Connection: close Location: /us CF-Ray: 8ca894c498a48ccc-EWR CF-Cache-Status: DYNAMIC Vary: Accept-Encoding Cf-Placement: remote-MRS NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znMAQas6tsHoboDIYdP1hpC08tziVOHeyPf0DWA9AUCrNAAsSKmkv8qnDoSwGwpR01wF2%2FUFlcwyEhVGVXWTJJ0SfnwBjtffpwoo34eEZM2RzNWbXg8sXXTn0eGmDvkJjSFYPtXcpSDxEUkZyXob"}],"group":"cf-nel","max_age":604800} x-gitbook-cache: skip Server: cloudflare

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:40 UTC	668	OUT	GET /us HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:40 UTC	1234	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894ca4f544308-EWR CF-Cache-Status: HIT Age: 64430 Cache-Control: public, max-age=0, s-maxage=86340, stale-if-error=0 Last-Modified: Sat, 28 Sep 2024 08:41:50 GMT Link: </>; rel=preconnect; crossorigin="" Strict-Transport-Security: max-age=31536000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding Cf-Placement: remote-MXP content-security-policy: default-src 'self' ; script-src 'self' 'nonce-ZDM0ODFiMWUtNzdhYi00ZDRiLTgzNGItYzE0Mjc1NTRhNWZh' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https://integrations.gitbook.com https://cdn.iframe.ly; style-src 'self' fonts.googleapis.com 'unsafe-inline'; img-src * 'self' blob: data: files.gitbook.com https://ka-p.fontawesome.com; connect-src * 'self' integrations.gitbook.com app.gitbook.com api.gitbook.com srv.buysellads.com https://ka-p.fontawesome.com; font-src 'self' fonts.gstatic.com ; frame-src *; object-src 'none'; base-uri 'self' ; form-action 'self' ; frame-ancestors https:; NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: no-referrer-when-downgrade
2024-09-29 02:35:40 UTC	549	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 68 31 41 38 6f 46 71 36 64 4c 36 4a 36 67 61 6e 6f 4f 68 35 78 33 6c 48 35 70 4c 74 25 32 42 6f 65 42 37 25 32 46 41 78 4d 30 25 32 46 69 54 48 69 36 73 47 25 32 46 39 6f 68 73 61 58 58 67 47 5a 4d 30 57 4c 65 64 36 70 47 35 37 64 36 71 6e 43 4f 68 48 66 54 34 75 57 59 70 35 64 66 39 43 41 41 6c 66 44 58 33 79 61 74 70 64 4a 41 6d 6a 51 25 32 42 47 6c 30 45 6a 78 75 59 6f 6d 6f 4d 65 41 38 52 6a 38 44 6c 67 25 32 46 34 78 79 70 25 32 46 4a 37 76 5a 79 58 46 49 6f 49 58 76 25 32 42 36 33 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1A8oFq6dL6J6ganoOh5x3lH5pLt%2BoeB7%2FAxM0%2FiTHi6sG%2F9ohsaXXgGZM0WLed6pG57d6qnCOhHfT4uWYp5df9CAAlfDX3yatpdJAmjQ%2BGl0EjxuYomoMeA8Rj8Dlg%2F4xyp%2FJ7vZyXFIoIXv%2B63"}],"group":"
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 37 66 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 73 63 72 6f 6c 6c 2d 70 74 2d 5b 37 36 70 78 5d 20 70 6c 61 69 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 67 69 74 62 6f 6f 6b 2e 63 6f 6d 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d Data Ascii: 7fea<!DOCTYPE html><html lang="en" class="scroll-pt-[76px] plain-background"><head><meta charSet="utf-8"/><link rel="preconnect" href="https://api.gitbook.com"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as=
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 70 3b 64 70 72 3d 33 26 61 6d 70 3b 71 75 61 6c 69 74 79 3d 31 30 30 26 61 6d 70 3b 73 69 67 6e 3d 39 61 65 31 37 33 39 39 26 61 6d 70 3b 73 76 3d 31 20 39 36 77 2c 20 68 74 74 70 73 3a 2f 2f 6b 72 61 6c 6b 65 6e 6c 6f 67 65 73 2e 67 69 74 62 6f 6f 6b 2e 69 6f 2f 7e 67 69 74 62 6f 6f 6b 2f 69 6d 61 67 65 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 34 31 34 35 30 31 35 33 37 37 2d 66 69 6c 65 73 2e 67 69 74 62 6f 6f 6b 2e 69 6f 25 32 46 25 37 45 25 32 46 66 69 6c 65 73 25 32 46 76 30 25 32 46 62 25 32 46 67 69 74 62 6f 6f 6b 2d 78 2d 70 72 6f 64 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 25 32 46 6f 25 32 46 73 70 61 63 65 73 25 32 35 32 46 56 72 4f 4c 46 38 49 56 61 65 35 70 35 4e 53 32 43 47 47 70 25 32 35 32 46 69 63 6f 6e 25 32 35 32 46 41 44 7a Data Ascii: p;dpr=3&quality=100&sign=9ae17399&sv=1 96w, https://kralkenloges.gitbook.io/~gitbook/image?url=https%3A%2F%2F4145015377-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FVrOLF8IVae5p5NS2CGGp%252Ficon%252FADz
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 30 66 39 65 33 63 31 65 39 32 31 2e 63 73 73 22 20 64 61 74 61 2d 70 72 65 63 65 64 65 6e 63 65 3d 22 6e 65 78 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 30 66 38 39 31 64 65 35 38 36 33 64 37 31 38 32 2e 63 73 73 22 20 64 61 74 61 2d 70 72 65 63 65 64 65 6e 63 65 3d 22 6e 65 78 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 66 65 74 63 68 50 72 69 6f 72 69 74 79 3d 22 6c 6f 77 22 20 6e 6f 6e 63 65 3d 22 5a 44 4d 30 4f 44 46 69 4d 57 55 74 4e 7a 64 68 59 69 30 30 5a 44 52 69 4c 54 67 7a 4e 47 49 74 59 7a 45 30 4d 6a 63 31 4e 54 52 68 4e 57 5a 68 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 Data Ascii: 0f9e3c1e921.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/0f891de5863d7182.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" nonce="ZDM0ODFiMWUtNzdhYi00ZDRiLTgzNGItYzE0Mjc1NTRhNWZh" href="/_next
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 4c 54 67 7a 4e 47 49 74 59 7a 45 30 4d 6a 63 31 4e 54 52 68 4e 57 5a 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 31 36 39 38 2d 65 38 39 63 31 39 62 62 66 30 63 38 65 30 35 64 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 5a 44 4d 30 4f 44 46 69 4d 57 55 74 4e 7a 64 68 59 69 30 30 5a 44 52 69 4c 54 67 7a 4e 47 49 74 59 7a 45 30 4d 6a 63 31 4e 54 52 68 4e 57 5a 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 34 33 37 37 2d 66 33 33 63 65 30 38 66 34 63 66 31 31 34 39 36 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 5a 44 4d 30 4f 44 46 69 4d Data Ascii: LTgzNGItYzE0Mjc1NTRhNWZh"></script><script src="/_next/static/chunks/1698-e89c19bbf0c8e05d.js" async="" nonce="ZDM0ODFiMWUtNzdhYi00ZDRiLTgzNGItYzE0Mjc1NTRhNWZh"></script><script src="/_next/static/chunks/4377-f33ce08f4cf11496.js" async="" nonce="ZDM0ODFiM
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 68 6e 61 6d 65 25 35 44 25 35 44 2f 70 61 67 65 2d 38 30 64 66 66 62 32 30 65 33 66 36 38 37 34 30 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 5a 44 4d 30 4f 44 46 69 4d 57 55 74 4e 7a 64 68 59 69 30 30 5a 44 52 69 4c 54 67 7a 4e 47 49 74 59 7a 45 30 4d 6a 63 31 4e 54 52 68 4e 57 5a 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 69 67 68 74 22 2f 3e 3c 74 69 74 6c 65 3e 4b 72 61 6b 65 6e 20 4c 6f 67 69 6e 20 2d 20 43 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 f0 9f 92 b2 20 45 78 63 68 61 6e 67 65 20 7c 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: hname%5D%5D/page-80dffb20e3f68740.js" async="" nonce="ZDM0ODFiMWUtNzdhYi00ZDRiLTgzNGItYzE0Mjc1NTRhNWZh"></script><meta name="color-scheme" content="light"/><title>Kraken Login - Cryptocurrency Exchange \| Login</title><meta name="description" content=
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 2f 2f 34 31 34 35 30 31 35 33 37 37 2d 66 69 6c 65 73 2e 67 69 74 62 6f 6f 6b 2e 69 6f 2f 7e 2f 66 69 6c 65 73 2f 76 30 2f 62 2f 67 69 74 62 6f 6f 6b 2d 78 2d 70 72 6f 64 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 2f 6f 2f 73 70 61 63 65 73 25 32 46 56 72 4f 4c 46 38 49 56 61 65 35 70 35 4e 53 32 43 47 47 70 25 32 46 69 63 6f 6e 25 32 46 41 44 7a 37 73 49 56 47 35 34 45 49 54 4c 79 44 66 68 32 70 25 32 46 4b 72 61 6b 65 6e 25 32 30 6c 6f 67 69 6e 25 32 30 6c 6f 67 6f 2e 70 6e 67 3f 61 6c 74 3d 6d 65 64 69 61 26 61 6d 70 3b 74 6f 6b 65 6e 3d 38 32 63 66 36 31 34 35 2d 61 61 39 31 2d 34 33 31 36 2d 38 64 34 66 2d 38 62 65 62 38 37 34 36 35 34 32 37 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 6d 65 64 69 61 3d 22 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f Data Ascii: //4145015377-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVrOLF8IVae5p5NS2CGGp%2Ficon%2FADz7sIVG54EITLyDfh2p%2FKraken%20login%20logo.png?alt=media&token=82cf6145-aa91-4316-8d4f-8beb87465427" type="image/png" media="(prefers-colo
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 35 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 31 30 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 32 30 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 33 30 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 34 30 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 35 30 30 3a 20 32 35 35 20 32 35 35 20 32 35 35 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 36 30 30 3a 20 32 30 34 20 32 30 34 20 32 30 34 3b 0a Data Ascii: ackground-50: 255 255 255;--header-background-100: 255 255 255;--header-background-200: 255 255 255;--header-background-300: 255 255 255;--header-background-400: 255 255 255;--header-background-500: 255 255 255;--header-background-600: 204 204 204;
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 31 20 36 35 20 31 33 31 3b 0a 2d 2d 70 72 69 6d 61 72 79 2d 62 61 73 65 2d 38 30 30 3a 20 32 31 20 34 34 20 38 38 3b 0a 2d 2d 70 72 69 6d 61 72 79 2d 62 61 73 65 2d 39 30 30 3a 20 31 30 20 32 32 20 34 34 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 35 30 3a 20 32 33 30 20 32 33 30 20 32 33 30 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 31 30 30 3a 20 32 30 34 20 32 30 34 20 32 30 34 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 32 30 30 3a 20 31 35 33 20 31 35 33 20 31 35 33 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 33 30 30 3a 20 31 30 32 20 31 30 32 20 31 30 32 3b 0a 2d 2d 68 65 61 64 65 72 2d 62 Data Ascii: 1 65 131;--primary-base-800: 21 44 88;--primary-base-900: 10 22 44; --header-background-50: 230 230 230;--header-background-100: 204 204 204;--header-background-200: 153 153 153;--header-background-300: 102 102 102;--header-b
2024-09-29 02:35:40 UTC	1369	IN	Data Raw: 20 73 68 61 64 6f 77 2d 74 68 69 6e 62 6f 74 74 6f 6d 20 6c 67 3a 7a 2d 31 30 20 64 61 72 6b 3a 73 68 61 64 6f 77 2d 6c 69 67 68 74 2f 31 20 62 67 2d 6c 69 67 68 74 20 64 61 72 6b 3a 62 67 2d 64 61 72 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 72 6f 6c 6c 2d 6e 6f 6a 75 6d 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 61 70 2d 34 20 67 72 69 64 20 67 72 69 64 2d 66 6c 6f 77 2d 63 6f 6c 20 61 75 74 6f 2d 63 6f 6c 73 2d 5b 61 75 74 6f 5f 61 75 74 6f 5f 31 66 72 5f 61 75 74 6f 5d 20 68 2d 31 36 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 62 65 74 77 65 65 6e 20 77 2d 66 75 6c 6c 20 70 78 2d 34 20 73 6d 3a 70 78 2d 36 20 6d 64 3a 70 78 2d 38 20 6d 61 78 2d 77 2d 73 63 72 65 65 6e 2d 32 78 Data Ascii: shadow-thinbottom lg:z-10 dark:shadow-light/1 bg-light dark:bg-dark"><div class="scroll-nojump"><div class="gap-4 grid grid-flow-col auto-cols-[auto_auto_1fr_auto] h-16 items-center align-center justify-between w-full px-4 sm:px-6 md:px-8 max-w-screen-2x

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/e11f1c6a6568d9ab.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	826	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cf798542d4-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 157649 Cache-Control: public,max-age=31536000,immutable ETag: W/"5940f74d0a9eb94e87960b1a02f01091" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w0bPfNhXIAYJEKGihl%2BP6q7Z%2FrTnvCmzgDwE6J1y4NpTYHQI1x%2FCwTQYhjEF425cCUQQW6gF5Gqyw%2BCneIgleBFmCP0sYYHN%2F1QyhCIscjouASgiAGWvaMJJDX1iPHktI8gklHwH1bTCZw%2BiSsVQ"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	543	IN	Data Raw: 63 63 62 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 73 76 67 46 6f 6e 74 5f 32 37 34 66 61 61 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 37 39 65 63 38 37 64 33 63 64 66 66 31 66 61 35 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 73 76 67 46 6f 6e 74 5f 46 61 6c 6c 62 61 63 6b 5f 32 37 34 66 61 61 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 72 69 61 6c 22 29 3b 61 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 38 33 2e 30 31 25 3b 64 65 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 31 34 2e 36 35 25 3b 6c 69 6e 65 2d 67 61 Data Ascii: ccb@font-face{font-family:__svgFont_274faa;src:url(/_next/static/media/79ec87d3cdff1fa5-s.woff2) format("woff2");font-display:swap}@font-face{font-family:__svgFont_Fallback_274faa;src:local("Arial");ascent-override:83.01%;descent-override:14.65%;line-ga
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 73 62 69 78 46 6f 6e 74 5f 46 61 6c 6c 62 61 63 6b 5f 61 37 66 35 33 61 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 72 69 61 6c 22 29 3b 61 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 38 33 2e 30 31 25 3b 64 65 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 31 34 2e 36 35 25 3b 6c 69 6e 65 2d 67 61 70 2d 6f 76 65 72 72 69 64 65 3a 30 2e 30 30 25 3b 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 2e 30 30 25 7d 2e 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 61 37 66 35 33 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 73 62 69 78 46 6f 6e 74 5f 61 37 66 35 33 61 2c 5f 5f 73 62 69 78 46 6f Data Ascii: 2) format("woff2");font-display:swap}@font-face{font-family:__sbixFont_Fallback_a7f53a;src:local("Arial");ascent-override:83.01%;descent-override:14.65%;line-gap-override:0.00%;size-adjust:100.00%}.__className_a7f53a{font-family:__sbixFont_a7f53a,__sbixFo
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 32 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 65 61 64 65 72 4c 69 6e 6b 73 5f 63 6f 6e 74 61 69 6e 65 72 48 65 61 64 65 72 6c 69 6e 6b 73 5f 5f 47 55 67 69 76 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 32 29 7e 2e 68 65 61 64 65 72 4c 69 6e 6b 73 5f 6c 69 6e 6b 45 6c 6c 69 70 73 69 73 5f 5f 5a 30 31 49 4e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 26 20 64 69 76 3e 61 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6e 2b 32 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 7d 7d 40 63 6f 6e 74 61 69 6e 65 72 20 68 65 61 64 65 72 6c 69 6e 6b 73 20 28 20 77 69 64 74 68 20 3c 20 34 35 30 70 78 20 29 7b 2e 68 65 61 64 65 72 4c 69 6e 6b 73 5f 63 6f 6e 74 61 69 6e 65 72 48 65 61 64 65 72 6c 69 6e 6b 73 5f 5f 47 55 67 69 76 3e 3a Data Ascii: :nth-child(n+2){display:none}.headerLinks_containerHeaderlinks__GUgiv>:nth-child(n+2)~.headerLinks_linkEllipsis__Z01IN{display:flex;& div>a:nth-of-type(n+2){display:flex}}}@container headerlinks ( width < 450px ){.headerLinks_containerHeaderlinks__GUgiv>:
2024-09-29 02:35:41 UTC	6	IN	Data Raw: 0a 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/bf7df5d7c6de54ec.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	820	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cf7c6f238a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 157649 Cache-Control: public,max-age=31536000,immutable ETag: W/"962f036a3ac234f016a7ec3a064b7f15" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0tSjfTV3hAHgiNoPvUYGsFNwEXrdioibh1uqx9%2BgCtz8tcpiM7Jgj4Z76WhheSCPyABvxCPkYnv6TFkqDEmKaigmhJbSXNQ5LZ9QTDDWVzm2ofdwSAownhzoe7jEn%2FdQkB%2F95oaazM5FLMkANRG2"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	549	IN	Data Raw: 37 31 37 63 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 49 6e 74 65 72 5f 32 30 37 65 63 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 35 35 63 35 35 66 30 36 30 31 64 38 31 63 66 33 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e Data Ascii: 717c@font-face{font-family:__Inter_207ec3;font-style:normal;font-weight:100 900;font-display:swap;src:url(/_next/static/media/55c55f0601d81cf3-s.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@fon
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 30 20 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 39 37 65 30 63 62 31 61 65 31 34 34 61 32 61 39 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 49 6e 74 65 72 5f 32 30 37 65 63 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 35 38 31 39 30 39 39 32 36 61 30 38 62 62 63 38 2d 73 Data Ascii: 0 900;font-display:swap;src:url(/_next/static/media/97e0cb1ae144a2a9-s.woff2) format("woff2");unicode-range:u+1f??}@font-face{font-family:__Inter_207ec3;font-style:normal;font-weight:100 900;font-display:swap;src:url(/_next/static/media/581909926a08bbc8-s
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 69 61 6c 22 29 3b 61 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 39 30 2e 34 39 25 3b 64 65 73 63 65 6e 74 2d 6f 76 65 72 72 69 64 65 3a 32 32 2e 35 36 25 3b 6c 69 6e 65 2d 67 61 70 2d 6f 76 65 72 72 69 64 65 3a 30 2e 30 30 25 3b 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 37 2e 30 36 25 7d 2e 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 32 30 37 65 63 33 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 49 6e 74 65 72 5f 32 30 37 65 63 33 2c 5f 5f 49 6e 74 65 72 5f 46 61 6c 6c 62 61 63 6b 5f 32 30 37 65 63 33 2c 73 79 73 74 65 6d 2d 75 69 2c 61 72 69 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 5f 5f 76 61 72 69 61 62 6c 65 5f 32 30 37 65 63 33 7b 2d 2d 66 6f 6e 74 2d 63 6f 6e 74 65 6e 74 3a 22 5f 5f 49 6e 74 65 72 5f 32 30 37 65 63 33 22 2c 22 5f Data Ascii: ial");ascent-override:90.49%;descent-override:22.56%;line-gap-override:0.00%;size-adjust:107.06%}.__className_207ec3{font-family:__Inter_207ec3,__Inter_Fallback_207ec3,system-ui,arial;font-style:normal}.__variable_207ec3{--font-content:"__Inter_207ec3","_
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 75 2b 32 31 31 33 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 49 42 4d 5f 50 6c 65 78 5f 4d 6f 6e 6f 5f 65 36 39 36 63 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 33 34 37 38 62 36 61 62 65 66 31 39 62 33 62 33 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 62 62 2d 30 32 62 63 2c 75 2b 30 32 Data Ascii: u+2113,u+2c60-2c7f,u+a720-a7ff}@font-face{font-family:__IBM_Plex_Mono_e696c3;font-style:normal;font-weight:400;font-display:swap;src:url(/_next/static/media/3478b6abef19b3b3-s.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02bb-02bc,u+02
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 33 30 34 2c 75 2b 30 33 30 38 2c 75 2b 30 33 32 39 2c 75 2b 31 65 30 30 2d 31 65 39 66 2c 75 2b 31 65 66 32 2d 31 65 66 66 2c 75 2b 32 30 32 30 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 64 2d 32 30 63 30 2c 75 2b 32 31 31 33 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 49 42 4d 5f 50 6c 65 78 5f 4d 6f 6e 6f 5f 65 36 39 36 63 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 62 65 32 34 31 36 63 62 62 30 31 32 63 32 35 36 2d 73 2e 77 6f 66 66 32 29 Data Ascii: 304,u+0308,u+0329,u+1e00-1e9f,u+1ef2-1eff,u+2020,u+20a0-20ab,u+20ad-20c0,u+2113,u+2c60-2c7f,u+a720-a7ff}@font-face{font-family:__IBM_Plex_Mono_e696c3;font-style:normal;font-weight:600;font-display:swap;src:url(/_next/static/media/be2416cbb012c256-s.woff2)
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 35 64 37 37 35 63 39 64 30 38 34 62 39 34 61 36 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 46 69 72 61 5f 53 61 6e 73 5f 45 78 74 72 61 5f 43 6f 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d Data Ascii: ndensed_f2bddc;font-style:normal;font-weight:400;font-display:swap;src:url(/_next/static/media/5d775c9d084b94a6-s.woff2) format("woff2");unicode-range:u+1f??}@font-face{font-family:__Fira_Sans_Extra_Condensed_f2bddc;font-style:normal;font-weight:400;font-
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 32 31 32 32 2c 75 2b 32 31 39 31 2c 75 2b 32 31 39 33 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 66 65 66 66 2c 75 2b 66 66 66 64 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 46 69 72 61 5f 53 61 6e 73 5f 45 78 74 72 61 5f 43 6f 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 30 63 31 64 35 35 33 36 61 64 62 32 32 31 65 37 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b Data Ascii: 2122,u+2191,u+2193,u+2212,u+2215,u+feff,u+fffd}@font-face{font-family:__Fira_Sans_Extra_Condensed_f2bddc;font-style:normal;font-weight:500;font-display:swap;src:url(/_next/static/media/0c1d5536adb221e7-s.woff2) format("woff2");unicode-range:u+0460-052f,u+
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6c 79 3a 5f 5f 46 69 72 61 5f 53 61 6e 73 5f 45 78 74 72 61 5f 43 6f 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 36 63 39 34 61 39 33 34 65 66 37 38 35 36 64 34 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 61 66 2c 75 2b 30 33 30 34 2c 75 2b 30 33 30 38 2c 75 2b 30 33 32 39 2c 75 2b 31 65 30 30 2d 31 65 39 66 2c 75 2b 31 65 66 32 2d 31 65 66 66 2c 75 2b 32 30 32 30 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 Data Ascii: ly:__Fira_Sans_Extra_Condensed_f2bddc;font-style:normal;font-weight:500;font-display:swap;src:url(/_next/static/media/6c94a934ef7856d4-s.woff2) format("woff2");unicode-range:u+0100-02af,u+0304,u+0308,u+0329,u+1e00-1e9f,u+1ef2-1eff,u+2020,u+20a0-20ab,u+20a
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 79 3a 5f 5f 46 69 72 61 5f 53 61 6e 73 5f 45 78 74 72 61 5f 43 6f 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 64 39 36 30 65 32 61 61 65 35 65 66 63 65 66 33 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 37 37 2c 75 2b 30 33 37 61 2d 30 33 37 66 2c 75 2b 30 33 38 34 2d 30 33 38 61 2c 75 2b 30 33 38 63 2c 75 2b 30 33 38 65 2d 30 33 61 31 2c 75 2b 30 33 61 33 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 Data Ascii: y:__Fira_Sans_Extra_Condensed_f2bddc;font-style:normal;font-weight:600;font-display:swap;src:url(/_next/static/media/d960e2aae5efcef3-s.woff2) format("woff2");unicode-range:u+0370-0377,u+037a-037f,u+0384-038a,u+038c,u+038e-03a1,u+03a3-03ff}@font-face{font
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6d 65 64 69 61 2f 34 30 64 38 66 36 63 65 64 39 33 37 64 35 34 36 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 46 69 72 61 5f 53 61 6e 73 5f 45 78 74 72 61 5f 43 6f 6e 64 65 6e 73 65 64 5f 66 32 62 64 64 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 Data Ascii: media/40d8f6ced937d546-s.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-family:__Fira_Sans_Extra_Condensed_f2bddc;font-style:normal;font-weight:700;font-display:swap;src:url(/_next/s

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/026444ec630b65a2.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	820	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cf995ade92-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 157649 Cache-Control: public,max-age=31536000,immutable ETag: W/"9ffa6d4bcafb3ebb253ffdd9852a5ac2" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KfNkAnPP437qiaWXo0y1cFaVQZqqXYQcHkiBU4gjgzYVIJFihkKObfE1k6uslPjDRgqByKMb1fNZv5Ycwl%2BF3xjzzNBBY5Ki2xgbl3GlDat%2B%2B6MkTC2XDDUFq3Rt2UF117XvaEaGhYkRgYKzDRoC"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	366	IN	Data Raw: 31 36 37 0d 0a 5b 63 6c 61 73 73 2a 3d 65 6d 6f 6a 69 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 65 6d 6f 6a 69 73 2d 63 62 64 74 29 7d 3a 72 6f 6f 74 20 5b 63 6c 61 73 73 2a 3d 65 6d 6f 6a 69 5d 2c 5f 3a 3a 2d 77 65 62 6b 69 74 2d 66 75 6c 6c 2d 70 61 67 65 2d 6d 65 64 69 61 2c 5f 3a 66 75 74 75 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 65 6d 6f 6a 69 73 2d 73 62 69 78 29 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 30 29 7b 2e 65 6d 6f 6a 69 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 65 6d 6f 6a 69 73 2d 73 76 67 29 7d 7d 40 2d 6d 6f 7a 2d 64 6f 63 75 Data Ascii: 167[class=emoji]{font-family:var(--font-emojis-cbdt)}:root [class=emoji],_::-webkit-full-page-media,_:future{font-family:var(--font-emojis-sbix)}@media screen and (-webkit-min-device-pixel-ratio:0){.emoji{font-family:var(--font-emojis-svg)}}@-moz-docu
2024-09-29 02:35:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/2189598b7c705dde.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	822	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cfac4f7c94-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 157649 Cache-Control: public,max-age=31536000,immutable ETag: W/"0658f8199b58cf67cb0b3f54323ca651" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQlBgYn4G0NGSuBgCKaMsOaEv1vbuE6AiTIp2Fu6rzJ%2BxuH3m%2FTu4iZzSEgIqCctTMRlUGax%2BEN8EnAYJYmMVwRbPoQ1kzacvRa%2BqqU1QEgWFBbSnn5gKRlXjZTZXSnEWPkpye8ksOir0kq5k5r3"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	547	IN	Data Raw: 36 65 35 36 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 34 32 32 31 65 31 36 36 37 63 64 31 39 63 37 64 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 Data Ascii: 6e56@font-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:400;font-stretch:100%;font-display:swap;src:url(/_next/static/media/4221e1667cd19c7d-s.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 66 37 35 39 63 39 33 39 37 33 37 66 62 36 36 38 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 39 30 30 2d 30 39 37 66 2c 75 2b 31 63 64 30 2d 31 63 66 39 2c 75 2b 32 30 30 63 2d 32 30 30 64 2c 75 2b 32 30 61 38 2c 75 2b 32 30 62 39 2c 75 2b 32 30 66 30 2c 75 2b 32 35 63 63 2c 75 2b 61 38 33 30 2d 61 38 33 39 2c 75 2b 61 38 65 30 2d 61 38 66 66 2c 75 2b 31 Data Ascii: ns_893e56;font-style:normal;font-weight:400;font-stretch:100%;font-display:swap;src:url(/_next/static/media/f759c939737fb668-s.woff2) format("woff2");unicode-range:u+0900-097f,u+1cd0-1cf9,u+200c-200d,u+20a8,u+20b9,u+20f0,u+25cc,u+a830-a839,u+a8e0-a8ff,u+1
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 30 65 37 39 30 65 30 34 66 64 34 30 61 64 31 36 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 62 62 2d 30 32 62 63 2c 75 2b 30 32 63 36 Data Ascii: 7f,u+a720-a7ff}@font-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:400;font-stretch:100%;font-display:swap;src:url(/_next/static/media/0e790e04fd40ad16-s.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02bb-02bc,u+02c6
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 36 63 63 30 62 39 35 30 30 65 34 66 39 31 36 38 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 37 37 2c 75 2b 30 33 37 61 2d 30 33 37 66 2c 75 2b 30 33 38 34 2d 30 33 38 61 2c 75 2b 30 33 38 63 2c 75 2b 30 33 38 65 2d 30 33 Data Ascii: u+1f??}@font-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:500;font-stretch:100%;font-display:swap;src:url(/_next/static/media/6cc0b9500e4f9168-s.woff2) format("woff2");unicode-range:u+0370-0377,u+037a-037f,u+0384-038a,u+038c,u+038e-03
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 34 32 32 31 65 31 36 36 37 63 64 31 39 63 37 64 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 Data Ascii: nt-display:swap;src:url(/_next/static/media/4221e1667cd19c7d-s.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:700;font-stretch
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6e 67 65 3a 75 2b 30 31 30 32 2d 30 31 30 33 2c 75 2b 30 31 31 30 2d 30 31 31 31 2c 75 2b 30 31 32 38 2d 30 31 32 39 2c 75 2b 30 31 36 38 2d 30 31 36 39 2c 75 2b 30 31 61 30 2d 30 31 61 31 2c 75 2b 30 31 61 66 2d 30 31 62 30 2c 75 2b 30 33 30 30 2d 30 33 30 31 2c 75 2b 30 33 30 33 2d 30 33 30 34 2c 75 2b 30 33 30 38 2d 30 33 30 39 2c 75 2b 30 33 32 33 2c 75 2b 30 33 32 39 2c 75 2b 31 65 61 30 2d 31 65 66 39 2c 75 2b 32 30 61 62 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 Data Ascii: nge:u+0102-0103,u+0110-0111,u+0128-0129,u+0168-0169,u+01a0-01a1,u+01af-01b0,u+0300-0301,u+0303-0304,u+0308-0309,u+0323,u+0329,u+1ea0-1ef9,u+20ab}@font-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:700;font-stretch:100%;font-display:swa
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 66 37 35 39 63 39 33 39 37 33 37 66 62 36 36 38 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 39 30 30 2d 30 39 37 66 2c 75 2b 31 63 64 30 2d 31 63 66 39 2c 75 2b 32 30 30 63 2d 32 30 30 64 2c 75 2b 32 30 61 38 2c 75 2b 32 30 62 39 2c 75 2b 32 30 66 30 2c 75 2b 32 35 63 63 2c 75 2b 61 38 33 30 2d 61 38 33 39 2c 75 2b 61 38 65 30 2d 61 38 66 66 2c 75 2b 31 31 62 30 30 2d 31 31 62 30 39 7d 40 66 6f 6e 74 2d Data Ascii: yle:normal;font-weight:800;font-stretch:100%;font-display:swap;src:url(/_next/static/media/f759c939737fb668-s.woff2) format("woff2");unicode-range:u+0900-097f,u+1cd0-1cf9,u+200c-200d,u+20a8,u+20b9,u+20f0,u+25cc,u+a830-a839,u+a8e0-a8ff,u+11b00-11b09}@font-
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4e 6f 74 6f 5f 53 61 6e 73 5f 38 39 33 65 35 36 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 30 65 37 39 30 65 30 34 66 64 34 30 61 64 31 36 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 62 62 2d 30 32 62 63 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 2b 30 32 64 63 2c 75 2b Data Ascii: ont-face{font-family:__Noto_Sans_893e56;font-style:normal;font-weight:800;font-stretch:100%;font-display:swap;src:url(/_next/static/media/0e790e04fd40ad16-s.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02bb-02bc,u+02c6,u+02da,u+02dc,u+
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 32 2d 30 31 30 33 2c 75 2b 30 31 31 30 2d 30 31 31 31 2c 75 2b 30 31 32 38 2d 30 31 32 39 2c 75 2b 30 31 36 38 2d 30 31 36 39 2c 75 2b 30 31 61 30 2d 30 31 61 31 2c 75 2b 30 31 61 66 2d 30 31 62 30 2c 75 2b 30 33 30 30 2d 30 33 30 31 2c 75 2b 30 33 30 33 2d 30 33 30 34 2c 75 2b 30 33 30 38 2d 30 33 30 39 2c 75 2b 30 33 32 33 2c 75 2b 30 33 32 39 2c 75 2b 31 65 61 30 2d 31 65 66 39 2c 75 2b 32 30 61 62 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 4f 76 65 72 70 61 73 73 5f 61 64 62 66 32 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 Data Ascii: );unicode-range:u+0102-0103,u+0110-0111,u+0128-0129,u+0168-0169,u+01a0-01a1,u+01af-01b0,u+0300-0301,u+0303-0304,u+0308-0309,u+0323,u+0329,u+1ea0-1ef9,u+20ab}@font-face{font-family:__Overpass_adbf2c;font-style:normal;font-weight:100 900;font-display:swap;s
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 2c 75 2b 32 64 65 30 2d 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 5f 52 61 6c 65 77 61 79 5f 35 33 61 38 66 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 33 34 39 30 30 63 37 34 61 38 34 31 31 32 62 36 2d 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 30 31 2c 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 Data Ascii: ,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-family:__Raleway_53a8f0;font-style:normal;font-weight:400;font-display:swap;src:url(/_next/static/media/34900c74a84112b6-s.woff2) format("woff2");unicode-range:u+0301,u+0400-045f,u+0490-0491,u+04b0-04b1

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/84671c0b86c5eace.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	817	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cfaef04309-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 47131 Cache-Control: public,max-age=31536000,immutable ETag: W/"5221789b9ef7f38b1f0e490710afee9b" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPA3gcpBY10TwBU%2BzvCEqyPNloGS7JNbL5L7WGK6AtaJbxy1KbQW460XSCh7rYj50h60MBX6sGdDVXyiSMEFQx9oZxMalq5Mhw2MYWj3gV4TBxyvWvvEqTHulQ8chn55xW4%2BAZa58YzJ0HwHoHeM"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	552	IN	Data Raw: 32 66 39 30 0d 0a 2f 2a 0a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 33 2e 34 2e 37 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 0a 2a 2f 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 65 35 65 37 65 62 7d 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e 74 3a 22 22 7d 3a 68 6f 73 74 2c 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 6f 7a 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 2d 6f 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 74 61 62 Data Ascii: 2f90/! tailwindcss v3.4.7 \| MIT License \| https://tailwindcss.com/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 6d 6f 6e 6f 29 3b 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 Data Ascii: :underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:var(--font-mono);font-feature-settings:normal;font-variation-settings:normal;font-s
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 64 69 61 6c 6f 67 7b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 23 39 63 61 33 61 66 7d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 23 39 63 61 33 61 66 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 2c 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e Data Ascii: ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:poin
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 73 72 67 62 2c 76 61 72 28 2d 2d 64 61 72 6b 2d 44 45 46 41 55 4c 54 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 30 30 25 20 2a 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 29 7d 62 6f 64 79 3a 69 73 28 2e 64 61 72 6b 20 2a 29 7b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 73 72 67 62 2c 76 61 72 28 2d 2d 6c 69 67 68 74 2d 44 45 46 41 55 4c 54 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 30 30 25 20 2a 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 29 7d 68 74 Data Ascii: text-opacity:1;color:color-mix(in srgb,var(--dark-DEFAULT),transparent calc(100% - 100% * var(--tw-text-opacity)))}body:is(.dark ){--tw-text-opacity:1;color:color-mix(in srgb,var(--light-DEFAULT),transparent calc(100% - 100% var(--tw-text-opacity)))}ht
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 2d 6d 69 78 28 69 6e 20 73 72 67 62 2c 76 61 72 28 2d 2d 64 61 72 6b 2d 44 45 46 41 55 4c 54 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 30 30 25 20 2a 20 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 29 7d 68 32 3a 69 73 28 2e 64 61 72 6b 20 2a 29 2c 68 33 3a 69 73 28 2e 64 61 72 6b 20 2a 29 2c 68 34 3a 69 73 28 2e 64 61 72 6b 20 2a 29 2c 68 35 3a 69 73 28 2e 64 61 72 6b 20 2a 29 2c 68 36 3a 69 73 28 2e 64 61 72 6b 20 2a 29 7b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 73 72 67 62 2c 76 61 72 28 2d 2d 6c 69 67 68 74 2d 44 45 46 41 55 4c 54 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 30 Data Ascii: -mix(in srgb,var(--dark-DEFAULT),transparent calc(100% - 100% * var(--tw-text-opacity)))}h2:is(.dark ),h3:is(.dark ),h4:is(.dark ),h5:is(.dark ),h6:is(.dark *){--tw-text-opacity:1;color:color-mix(in srgb,var(--light-DEFAULT),transparent calc(100% - 10
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 63 69 6e 67 2d 79 3a 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 78 3a 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 79 3a 30 3b 2d 2d 74 77 2d 72 6f 74 61 74 65 3a 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 78 3a 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 79 3a 30 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 3a 31 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 3a 31 3b 2d 2d 74 77 2d 70 61 6e 2d 78 3a 20 3b 2d 2d 74 77 2d 70 61 6e 2d 79 3a 20 3b 2d 2d 74 77 2d 70 69 6e 63 68 2d 7a 6f 6f 6d 3a 20 3b 2d 2d 74 77 2d 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 72 69 63 74 6e 65 73 73 3a 70 72 6f 78 69 6d 69 74 79 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 66 72 6f 6d 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 76 69 61 2d 70 6f 73 69 74 69 Data Ascii: cing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-positi
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 20 3b 2d 2d 74 77 2d 67 72 61 64 69 65 6e 74 2d 74 6f 2d 70 6f 73 69 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 6f 72 64 69 6e 61 6c 3a 20 3b 2d 2d 74 77 2d 73 6c 61 73 68 65 64 2d 7a 65 72 6f 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 69 67 75 72 65 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 73 70 61 63 69 6e 67 3a 20 3b 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 72 61 63 74 69 6f 6e 3a 20 3b 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 3a 20 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 3a 30 70 78 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 35 39 2c 31 33 30 2c 32 34 36 2c 2e 35 29 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 Data Ascii: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-of
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 61 62 73 6f 6c 75 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 72 65 6c 61 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 74 69 63 6b 79 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 7d 2e 69 6e 73 65 74 2d 30 7b 69 6e 73 65 74 3a 30 7d 2e 69 6e 73 65 74 2d 5c 5b 2d 31 70 78 5c 5d 7b 69 6e 73 65 74 3a 2d 31 70 78 7d 2e 2d 74 6f 70 2d 34 7b 74 6f 70 3a 2d 31 72 65 6d 7d 2e 62 6f 74 74 6f 6d 2d 30 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6f 74 74 6f 6d 2d 31 32 7b 62 6f 74 74 6f 6d 3a 33 72 65 6d 7d 2e 62 6f 74 Data Ascii: ibility:visible}.invisible{visibility:hidden}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.inset-0{inset:0}.inset-\[-1px\]{inset:-1px}.-top-4{top:-1rem}.bottom-0{bottom:0}.bottom-12{bottom:3rem}.bot
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 2d 31 2e 35 72 65 6d 7d 2e 6d 62 2d 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 7d 2e 6d 62 2d 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 6d 62 2d 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 37 35 72 65 6d 7d 2e 6d 62 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 2e 6d 62 2d 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 7d 2e 6d 62 2d 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 6d 62 2d 38 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 2e 6d 6c 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 7d 2e 6d 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 37 35 72 65 6d 7d 2e 6d 72 2d 30 Data Ascii: in-left:-1.5rem}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.mb-8{margin-bottom:2rem}.ml-2{margin-left:.5rem}.ml-3{margin-left:.75rem}.mr-0
2024-09-29 02:35:41 UTC	680	IN	Data Raw: 69 64 7d 2e 63 6f 6e 74 65 6e 74 73 7b 64 69 73 70 6c 61 79 3a 63 6f 6e 74 65 6e 74 73 7d 2e 6c 69 73 74 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 2e 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 73 70 65 63 74 2d 5c 5b 31 5c 2f 31 5c 2e 32 5c 5d 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2f 31 2e 32 7d 2e 61 73 70 65 63 74 2d 5c 5b 32 5c 2e 35 5c 2f 31 5c 5d 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 32 2e 35 2f 31 7d 2e 61 73 70 65 63 74 2d 5c 5b 34 5c 2f 31 5c 5d 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 34 2f 31 7d 2e 61 73 70 65 63 74 2d 61 75 74 6f 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 61 75 74 6f 7d 2e 61 73 70 65 63 74 2d 73 71 75 61 72 65 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2f 31 7d Data Ascii: id}.contents{display:contents}.list-item{display:list-item}.hidden{display:none}.aspect-\[1\/1\.2\]{aspect-ratio:1/1.2}.aspect-\[2\.5\/1\]{aspect-ratio:2.5/1}.aspect-\[4\/1\]{aspect-ratio:4/1}.aspect-auto{aspect-ratio:auto}.aspect-square{aspect-ratio:1/1}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	584	OUT	GET /_next/static/css/c311d6484335995a.css HTTP/1.1 Host: kralkenloges.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	820	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca894cfaaea7d13-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 157649 Cache-Control: public,max-age=31536000,immutable ETag: W/"364b2d277bf4a05a73929b8017a11307" Vary: Accept-Encoding NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbcebVznMfimhjJQekLbsOwEEyCVi4LZQBpvZoGlQ165Rla9yQvErBYSB54v%2BW0W%2FDDvXcjl9hKM7OtFyj1okHYJXlV0M0vQvuShwOGqhPwPfNeSbISXE6r1aHsQ2CASUqben65PHkSkm9CY8%2FuW"}],"group":"cf-nel","max_age":604800} x-content-type-options: nosniff x-gitbook-cache: hit Server: cloudflare
2024-09-29 02:35:41 UTC	165	IN	Data Raw: 39 66 0d 0a 73 76 67 2e 67 62 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 73 76 67 2e 67 62 2d 69 63 6f 6e 2d 73 20 70 61 74 68 2c 73 76 67 2e 67 62 2d 69 63 6f 6e 2d 73 20 75 73 65 7b 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 63 33 31 31 64 36 34 38 34 33 33 35 39 39 35 61 2e 63 73 73 2e 6d 61 70 2a 2f 0d 0a Data Ascii: 9fsvg.gb-icon{background:currentColor}svg.gb-icon-s path,svg.gb-icon-s use{fill:currentColor;stroke:currentColor}/# sourceMappingURL=c311d6484335995a.css.map/
2024-09-29 02:35:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:35:41 UTC	774	OUT	GET /~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FVrOLF8IVae5p5NS2CGGp%2Fuploads%2FQp73U17Mv3V42ibKxtmL%2Ffile.excalidraw.svg?alt=media&token=920d746d-71de-4fe0-9a19-29837fd6d765 HTTP/1.1 Host: 4145015377-files.gitbook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kralkenloges.gitbook.io/us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:35:41 UTC	1360	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:35:41 GMT Content-Type: image/svg+xml Content-Length: 315032 Connection: close CF-Ray: 8ca894d04a04433f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 161914 Cache-Control: public, max-age=31536000 Content-Disposition: inline; filename*=utf-8''file.excalidraw.svg ETag: "674ec7d855cf3df8d7fbc44e2f275a0c" Expires: Fri, 27 Sep 2024 06:37:07 GMT Last-Modified: Wed, 17 May 2023 11:22:10 GMT Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding Content-Security-Policy: script-src 'none'; object-src 'none'; report-uri https://o1000929.ingest.sentry.io/api/5960429/security/?sentry_key=a9072c7b7a264a6e9c617a4fa5fa8ed9&sentry_environment=gitbook-x-prod&sentry_release=10.9.877; Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff x-goog-generation: 1684322530699215 x-goog-hash: crc32c=H4KRkA== x-goog-hash: md5=Z07H2FXPPfjX+8ROLydaDA== x-goog-meta-firebasestoragedownloadtokens: 920d746d-71de-4fe0-9a19-29837fd6d765 x-goog-meta-height: 279 x-goog-meta-width: 608 x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 315032 x-guploader-uploadid: AD-8ljtFDhlrX19JNveKD1kTg7qjtLos8bIXZGaH_Li9RO-U2OaSr6hK_2L5mzGeq8MRnfCQDg X-Powered-By: GitBook
2024-09-29 02:35:41 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-09-29 02:35:41 UTC	1356	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 38 2e 32 36 34 39 38 34 32 32 37 31 32 39 34 20 32 37 39 22 20 77 69 64 74 68 3d 22 36 30 38 2e 32 36 34 39 38 34 32 32 37 31 32 39 34 22 20 68 65 69 67 68 74 3d 22 32 37 39 22 3e 0a 20 20 3c 21 2d 2d 20 73 76 67 2d 73 6f 75 72 63 65 3a 65 78 63 61 6c 69 64 72 61 77 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 70 61 79 6c 6f 61 64 2d 74 79 70 65 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 65 78 63 61 6c 69 64 72 61 77 2b 6a 73 6f 6e 20 2d 2d 3e 3c 21 2d 2d 20 70 61 79 6c 6f 61 64 2d 76 65 72 73 69 6f 6e 3a 32 20 2d 2d 3e 3c 21 2d 2d 20 70 61 79 6c 6f 61 Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 608.2649842271294 279" width="608.2649842271294" height="279"> ... svg-source:excalidraw --> ... payload-type:application/vnd.excalidraw+json -->... payload-version:2 -->... payloa
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 44 7a 77 35 69 2f 58 48 55 77 4d 44 41 77 73 33 4e 63 64 54 41 77 4d 44 41 36 37 33 35 66 74 6c 78 31 4d 44 41 77 4e 56 78 31 4d 44 41 78 4f 48 37 50 6e 66 74 52 2f 49 47 7a 66 31 6e 76 78 63 62 2f 74 56 78 75 2f 4f 2f 6c 35 2f 70 63 64 54 41 77 4d 47 4a 6f 39 44 38 2f 38 4e 35 63 64 54 41 77 4d 44 52 4d 76 34 44 39 77 31 54 38 2b 79 2f 54 37 75 35 64 34 66 35 75 33 6e 41 39 58 48 55 77 4d 44 45 30 76 2f 48 6f 2f 72 2f 49 58 48 55 77 4d 44 46 6d 49 50 33 45 73 39 56 33 35 2f 66 58 66 2f 39 63 64 54 41 77 4d 44 58 37 2f 30 69 54 71 61 43 49 2f 31 78 31 4d 44 41 77 4e 72 4d 31 54 46 68 48 62 59 65 33 49 61 34 34 7a 76 56 63 64 54 41 77 4d 54 44 75 58 47 37 75 58 48 55 77 4d 44 46 6a 56 33 48 38 4a 6a 70 63 64 54 41 77 4d 57 4f 6e 76 56 78 31 4d 44 41 78 5a Data Ascii: Dzw5i/XHUwMDAws3NcdTAwMDA6735ftlx1MDAwNVx1MDAxOH7PnftR/IGzf1nvxcb/tVxu/O/l5/pcdTAwMGJo9D8/8N5cdTAwMDRMv4D9w1T8+y/T7u5d4f5u3nA9XHUwMDE0v/Ho/r/IXHUwMDFmIP3Es9V35/fXf/9cdTAwMDX7/0iTqaCI/1x1MDAwNrM1TFhHbYe3Ia44zvVcdTAwMTDuXG7uXHUwMDFjV3H8JjpcdTAwMWOnvVx1MDAxZ
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 77 4d 44 46 6b 4a 57 42 64 62 71 2b 4f 4e 46 39 43 58 48 55 77 4d 44 45 78 4e 56 78 63 5a 45 68 44 58 48 51 74 51 74 54 76 59 75 77 32 4a 4e 30 38 70 56 78 31 4d 44 41 77 4d 62 6c 47 76 59 37 6b 59 59 78 63 64 54 41 77 4d 54 64 4b 53 31 78 31 4d 44 41 78 4e 66 68 63 64 54 41 77 4d 47 56 43 58 48 55 77 4d 44 46 68 6f 50 54 43 6d 39 2f 69 57 34 5a 63 64 54 41 77 4d 44 4c 44 76 61 5a 63 64 54 41 77 4d 44 4a 63 64 54 41 77 4d 57 62 34 5a 38 6b 2b 6c 7a 6e 4e 58 48 55 77 4d 44 45 33 5a 54 6a 31 79 46 78 31 4d 44 41 78 4d 63 34 31 58 6a 78 54 70 56 78 31 4d 44 41 78 4f 46 5a 63 64 54 41 77 4d 57 4f 32 73 61 73 37 58 48 55 77 4d 44 46 68 4e 39 71 64 31 6c 55 6c 52 4f 37 2b 58 48 55 77 4d 44 45 77 63 70 78 46 59 44 74 5a 6f 33 4b 43 54 49 61 6a 4c 6a 32 55 6d 48 Data Ascii: wMDFkJWBdbq+ONF9CXHUwMDExNVxcZEhDXHQtQtTvYuw2JN08pVx1MDAwMblGvY7kYYxcdTAwMTdKS1x1MDAxNfhcdTAwMGVCXHUwMDFhoPTCm9/iW4ZcdTAwMDLDvaZcdTAwMDJcdTAwMWb4Z8k+lznNXHUwMDE3ZTj1yFx1MDAxMc41XjxTpVx1MDAxOFZcdTAwMWO2sas7XHUwMDFhN9qd1lUlRO7+XHUwMDEwcpxFYDtZo3KCTIajLj2UmH
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 68 4c 42 63 64 49 43 4a 70 4b 52 2b 6b 38 4a 64 58 48 55 77 4d 44 41 77 51 75 65 6e 58 48 51 37 58 48 55 77 4d 44 46 6a 58 48 55 77 4d 44 41 78 58 48 55 77 4d 44 45 35 55 38 39 63 64 54 41 77 4d 57 57 34 54 56 78 31 4d 44 41 77 4d 37 7a 76 58 48 55 77 4d 44 45 77 4e 73 43 73 67 45 70 58 50 33 7a 4d 6c 33 67 32 56 58 4e 58 79 47 64 63 64 54 41 77 4d 54 64 63 64 54 41 77 4d 47 58 6f 4e 56 36 79 57 7a 4d 34 6e 56 74 4a 56 38 65 39 58 30 54 47 58 48 55 77 4d 44 46 6b 58 48 55 77 4d 44 45 35 36 62 57 36 4c 6c 73 77 7a 6c 78 6d 63 4a 75 66 58 48 55 77 4d 44 45 77 58 48 55 77 4d 44 41 79 6a 56 78 31 4d 44 41 77 4e 56 78 31 4d 44 41 78 4e 2b 4c 79 51 44 2b 66 4c 46 71 4f 73 56 78 31 4d 44 41 77 4e 48 78 56 68 71 4b 4c 38 61 70 70 69 32 31 63 64 54 41 77 4d 47 4b Data Ascii: hLBcdICJpKR+k8JdXHUwMDAwQuenXHQ7XHUwMDFjXHUwMDAxXHUwMDE5U89cdTAwMWW4TVx1MDAwM7zvXHUwMDEwNsCsgEpXP3zMl3g2VXNXyGdcdTAwMTdcdTAwMGXoNV6yWzM4nVtJV8e9X0TGXHUwMDFkXHUwMDE56bW6LlswzlxmcJufXHUwMDEwXHUwMDAyjVx1MDAwNVx1MDAxN+LyQD+fLFqOsVx1MDAwNHxVhqKL8appi21cdTAwMGK
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 43 39 63 64 54 41 77 4d 44 63 74 6b 79 36 74 39 54 48 56 58 48 55 77 4d 44 41 32 30 43 72 73 4d 4b 71 6e 79 70 4f 73 79 6b 55 79 34 70 6e 44 72 58 52 79 58 48 55 77 4d 44 45 7a 33 69 52 78 4b 73 78 68 34 4d 74 63 64 54 41 77 4d 44 52 44 6e 4a 64 63 64 54 41 77 4d 44 42 63 64 54 41 77 4d 44 4b 72 70 4c 4b 4c 58 48 55 77 4d 44 42 6c 58 48 55 77 4d 44 41 79 75 6c 4f 34 64 4e 48 61 58 48 55 77 4d 44 45 31 57 55 6d 73 5a 33 43 30 6a 45 6a 42 64 73 73 68 6a 56 37 64 33 4d 37 39 58 48 55 77 4d 44 45 34 7a 46 78 31 4d 44 41 78 4d 54 71 33 58 48 55 77 4d 44 42 69 6f 75 46 63 64 54 41 77 4d 47 4a 63 59 73 74 69 4b 69 33 54 6b 4b 72 58 63 6b 71 47 5a 31 32 6e 54 49 44 69 6f 33 4a 6d 58 48 4b 69 75 55 46 75 36 5a 47 31 51 49 39 35 57 36 36 73 53 35 6c 73 69 56 31 5a Data Ascii: C9cdTAwMDctky6t9THVXHUwMDA20CrsMKqnypOsykUy4pnDrXRyXHUwMDEz3iRxKsxh4MtcdTAwMDRDnJdcdTAwMDBcdTAwMDKrpLKLXHUwMDBlXHUwMDAyulO4dNHaXHUwMDE1WUmsZ3C0jEjBdsshjV7d3M79XHUwMDE4zFx1MDAxMTq3XHUwMDBiouFcdTAwMGJcYstiKi3TkKrXckqGZ12nTIDio3JmXHKiuUFu6ZG1QI95W66sS5lsiV1Z
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 43 48 2f 6e 78 6d 58 48 55 77 4d 44 46 6d 4f 6a 42 63 64 54 41 77 4d 44 43 46 6e 4e 50 35 62 71 44 41 4f 49 53 67 30 6c 78 31 4d 44 41 78 4d 31 78 31 4d 44 41 77 4e 4b 7a 31 58 48 55 77 4d 44 45 77 58 48 55 77 4d 44 42 6c 2f 4a 33 79 69 2f 61 74 36 43 65 71 58 47 35 45 51 7a 2f 50 64 59 61 46 52 6e 56 63 62 6c 78 31 4d 44 41 77 4e 56 78 6d 78 74 70 7a 52 4f 72 71 58 48 55 77 4d 44 45 7a 52 32 35 63 64 54 41 77 4d 47 5a 54 54 30 2b 52 57 56 4a 52 58 48 55 77 4d 44 46 68 7a 72 61 39 6e 46 56 4c 58 73 56 63 64 54 41 77 4d 57 4b 47 62 74 31 4a 4f 4f 64 63 64 54 41 77 4d 44 65 49 4c 72 43 68 76 30 4f 75 50 73 53 72 4b 61 4e 54 6f 5a 43 48 68 39 39 51 58 63 69 77 37 73 42 58 74 6c 78 31 4d 44 41 77 5a 59 66 39 39 63 4c 4b 69 59 68 63 59 76 74 63 49 6c 78 79 6d Data Ascii: CH/nxmXHUwMDFmOjBcdTAwMDCFnNP5bqDAOISg0lx1MDAxM1x1MDAwNKz1XHUwMDEwXHUwMDBl/J3yi/at6CeqXG5EQz/PdYaFRnVcblx1MDAwNVxmxtpzROrqXHUwMDEzR25cdTAwMGZTT0+RWVJRXHUwMDFhzra9nFVLXsVcdTAwMWKGbt1JOOdcdTAwMDeILrChv0OuPsSrKaNToZCHh99QXciw7sBXtlx1MDAwZYf99cLKiYhcYvtcIlxym
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 77 4d 44 4c 4f 76 35 4b 41 52 44 7a 6c 73 71 5a 59 37 4d 61 68 6a 57 5a 63 49 6e 74 50 4f 75 31 72 58 48 55 77 4d 44 45 78 4c 72 33 33 64 76 69 56 6b 31 78 31 4d 44 41 78 4f 53 36 75 75 49 71 54 4e 43 36 32 65 49 52 54 50 43 37 37 4a 75 72 55 38 79 2b 41 64 2b 64 68 50 6c 67 78 2f 6b 61 76 65 4a 6c 79 6d 57 7a 54 33 76 2f 73 67 56 78 69 38 6c 78 31 4d 44 41 77 4e 55 32 43 58 48 55 77 4d 44 46 6b 58 48 55 77 4d 44 41 78 34 31 6c 63 64 54 41 77 4d 54 6e 41 4d 66 37 77 71 64 30 2b 33 31 78 31 4d 44 41 78 59 6c 31 63 64 54 41 77 4d 47 61 38 36 56 78 31 4d 44 41 77 4e 35 2f 70 4c 38 6a 6e 2b 63 63 75 79 6f 39 50 77 46 78 31 4d 44 41 77 4e 74 43 2b 58 58 4b 52 52 58 4f 46 52 38 46 39 79 2b 56 32 54 66 74 63 64 54 41 77 4d 47 61 2b 34 54 64 2f 77 44 76 79 69 35 Data Ascii: wMDLOv5KARDzlsqZY7MahjWZcIntPOu1rXHUwMDExLr33dviVk1x1MDAxOS6uuIqTNC62eIRTPC77JurU8y+Ad+dhPlgx/kaveJlymWzT3v/sgVxi8lx1MDAwNU2CXHUwMDFkXHUwMDAx41lcdTAwMTnAMf7wqd0+31x1MDAxYl1cdTAwMGa86Vx1MDAwN5/pL8jn+ccuyo9PwFx1MDAwNtC+XXKRRXOFR8F9y+V2TftcdTAwMGa+4Td/wDvyi5
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 66 2b 48 34 31 56 6c 63 64 54 41 77 4d 44 49 2b 36 63 52 50 4b 55 62 32 76 32 48 31 74 2b 79 58 73 33 70 37 58 48 55 77 4d 44 41 31 2f 76 76 62 5a 72 39 78 6c 69 35 39 6f 74 67 2f 2b 69 74 66 4c 49 75 50 56 47 37 72 4f 4e 53 44 56 4e 79 2f 66 4a 6e 33 63 38 37 38 77 56 78 31 4d 44 41 78 59 69 6e 44 39 69 48 43 50 74 50 74 78 34 52 35 58 46 79 66 6b 6b 42 76 58 48 55 77 4d 44 46 6b 7a 2f 35 63 64 54 41 77 4d 54 4d 2b 65 56 78 31 4d 44 41 77 5a 75 5a 41 4d 4f 2b 32 34 70 39 77 6b 6c 50 38 4d 73 54 76 58 48 55 77 4d 44 46 6a 79 45 2f 2f 75 55 76 65 58 48 55 77 4d 44 41 33 72 6d 39 63 64 54 41 77 4d 44 49 2f 31 69 66 42 58 48 55 77 4d 44 45 33 67 36 50 51 52 31 49 6b 62 39 50 4f 66 30 55 68 69 46 78 31 4d 44 41 78 59 72 37 6f 39 49 71 51 2f 79 32 47 58 48 55 Data Ascii: f+H41VlcdTAwMDI+6cRPKUb2v2H1t+yXs3p7XHUwMDA1/vvbZr9xli59otg/+itfLIuPVG7rONSDVNy/fJn3c878wVx1MDAxYinD9iHCPtPtx4R5XFyfkkBvXHUwMDFkz/5cdTAwMTM+eVx1MDAwZuZAMO+24p9wklP8MsTvXHUwMDFjyE//uUveXHUwMDA3rm9cdTAwMDI/1ifBXHUwMDE3g6PQR1Ikb9POf0UhiFx1MDAxYr7o9IqQ/y2GXHU
2024-09-29 02:35:41 UTC	1369	IN	Data Raw: 74 39 30 69 74 2b 35 51 49 57 76 50 50 51 37 56 33 58 54 37 4c 50 34 7a 76 6c 6c 7a 74 6e 6c 33 53 76 66 32 4d 34 6e 35 37 66 35 71 73 31 63 59 6c 70 63 64 54 41 77 4d 54 4d 74 30 71 74 63 64 54 41 77 4d 57 45 75 67 72 66 37 58 48 55 77 4d 44 41 77 54 33 65 2f 57 4e 46 63 64 54 41 77 4d 44 64 58 2f 6c 78 31 4d 44 41 78 4e 61 48 62 66 46 78 31 4d 44 41 78 4d 56 78 31 4d 44 41 78 59 74 53 70 4a 63 79 57 66 44 64 47 34 6b 4a 39 54 59 51 72 49 48 68 59 4d 30 6a 79 6e 2b 66 38 37 6c 78 31 4d 44 41 78 4f 57 36 6a 65 5a 39 63 64 54 41 77 4d 54 4e 46 4f 4e 43 6c 58 48 55 77 4d 44 41 79 73 31 78 31 4d 44 41 77 5a 69 44 45 37 33 77 6b 77 4e 76 63 68 4f 74 4f 58 48 55 77 4d 44 45 33 6a 54 7a 41 32 4a 4e 43 77 59 4b 31 61 4b 36 6c 71 31 78 31 4d 44 41 78 4e 31 78 31 Data Ascii: t90it+5QIWvPPQ7V3XT7LP4zvllztnl3Svf2M4n57f5qs1cYlpcdTAwMTMt0qtcdTAwMWEugrf7XHUwMDAwT3e/WNFcdTAwMDdX/lx1MDAxNaHbfFx1MDAxMVx1MDAxYtSpJcyWfDdG4kJ9TYQrIHhYM0jyn+f87lx1MDAxOW6jeZ9cdTAwMTNFONClXHUwMDAys1x1MDAwZiDE73wkwNvchOtOXHUwMDE3jTzA2JNCwYK1aK6lq1x1MDAxN1x1