Edit tour

Windows Analysis Report
https://thereferenz.net/

Overview

General Information

Sample URL:	https://thereferenz.net/
Analysis ID:	1522278
Tags:	urlscan
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains suspicious base64 encoded javascript

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2020,i,11840398908261804532,289278302351347705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://thereferenz.net/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=A2XIWROdXbg0a54L22VyhV5j0yt%2BHsRO%2FzGs57gvGRQ2yC%2FuUCTr7iPBSKFqTrFrxv78XtfDjDzFaxfVNIY9HjuMKj3F4%2Bf%2BP7nDseViM%2FxNlwm6xFAhbIX%2BwZruKsSWACk%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 400Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:53:12 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 43Connection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A2XIWROdXbg0a54L22VyhV5j0yt%2BHsRO%2FzGs57gvGRQ2yC%2FuUCTr7iPBSKFqTrFrxv78XtfDjDzFaxfVNIY9HjuMKj3F4%2Bf%2BP7nDseViM%2FxNlwm6xFAhbIX%2BwZruKsSWACk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cac7547283e17f9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:53:13 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 43Connection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26liGkj%2FusHpliRr9xVak7CuTEpnVdWgvBKCMMCQFLxKd%2B88YdWGnlpxYJOf%2B2vJtVmcnZxhYoUOy12RXMfMSu8Y92C8L1TM5RcGlUZDzqv38pm4bTPJX1lbabqiulHEj2U%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cac75482cc180da-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:53:40 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 43Connection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b9JnEKni7Gti2fsXqeGTxqF4jAEZziKagnE4tIQyFsmbNAVYKuQ09jf3LIlMXdODFDFp2f5ycYaObxsJUAiPq2dLDhpLyfswNc6nl5BYWcH3%2BxiW7%2FWkh434gIvjsM739Uo%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cac75f3b8f542cd-EWR

Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_298.2.dr	String found in binary or memory: https://alumnieropa.org/wp-content/uploads/2024/09/coollogo_com-27720242.png
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://alumnieropa.org/wp-content/uploads/2024/09/faviTheRef-16x16-1.png
Source: chromecache_298.2.dr	String found in binary or memory: https://alumnieropa.org/wp-content/uploads/2024/09/favitheref-32x32-1.png
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://c.statcounter.com/13038394/0/353f65e5/1/
Source: chromecache_298.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_298.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_385.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_291.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://statcounter.com/
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://thereferenz.net/
Source: chromecache_291.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=12-Volt-Wasserpumpe
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=ATV-Anh
Source: chromecache_345.2.dr, chromecache_531.2.dr, chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Acht
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Adventskalender-Gewinnspiel:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Alte
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Antike
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ausleihen
Source: chromecache_345.2.dr, chromecache_531.2.dr, chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Autobahn-Einfahrt:
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Balkonkraftwerke:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Beni
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Betonhochbeet-Bausatz:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Bezug
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Blitzschnelle
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Blumenpracht
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Briggs
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Castrol
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Dachreling
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Dachschr
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Das
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Der
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Dewalt
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Die
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Digitale
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Doppelte
Source: chromecache_329.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Eigenbau
Source: chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Einzigartige
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Elektrische
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Elektrisierende
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Energieeffizientes
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Entdecke
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Erbbaurecht:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ersatzteil-Eldorado
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ersatzteil-Revolution
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ersatzteile
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Exklusive
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Exklusiver
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Farbharmonie
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Fasszinierende
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Federkern
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Feng
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Feurige
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Filzsocken
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Fl
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Fleischgenuss
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Fliesen-Revolution
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Funkelnde
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Gewinne
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Glas-Spritzschutz
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Handt
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Haus
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Hausbau
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Haussuche
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Heizung
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Heizungsz
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Hifi-Profis
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Holzhandl
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Holzverkleidung
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Industrieller
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Innovative
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Intelligente
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=K
Source: chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Katja
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Keller
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Keramikbemalung
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Kerzenleuchteraufsatz:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Kostengruppen
Source: chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Kostenlose
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Kreative
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Landfrauenk
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Lichtzauber
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ma
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Moderne
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Multanova
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Neff
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Nie
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Nobilia
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Nussknacker
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Ohne
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Pflastersteine
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Platzsparende
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Professioneller
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Risse
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Rosenkohl:
Source: chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schicke
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schimmel
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schlauchverbinder
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schraubbare
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schuldenfrei
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Schwebendes
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Smaragdgr
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Sonnenhungrige
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Sonntags-Shopping-Paradies
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Sperrm
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Taxi
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Teppich-Revolution:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Teppich-Trends
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Terrassenplatten
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Tiny
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Toplader-Waschtrockner:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Traumgarten
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Traumhafte
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Traumhaftes
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Vinyl
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wei
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wetterfeste
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wetterstation
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wirbelnde
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohn(t)raum
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohnen
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohnmobil-Carport
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohnraumwunder:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohnzimmer-Deko-Ideen:
Source: chromecache_329.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Wohnzimmer-Dekoration:
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=XXL-Paketbriefkasten
Source: chromecache_329.2.dr, chromecache_587.2.dr	String found in binary or memory: https://tse1.mm.bing.net/th?q=Zeitlose
Source: chromecache_531.2.dr	String found in binary or memory: https://twitter.com/share?url=das-gartenhaus-mit-dem-gewissen-extra-anbau-fur-mehr-platz-und-komfort
Source: chromecache_298.2.dr	String found in binary or memory: https://twitter.com/share?url=eigenbau-eines-freitragenden-schiebetors-ein-diy-projekt-fur-heimwerke
Source: chromecache_345.2.dr	String found in binary or memory: https://twitter.com/share?url=kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann&
Source: chromecache_531.2.dr	String found in binary or memory: https://web.whatsapp.com/send?text=Das
Source: chromecache_298.2.dr	String found in binary or memory: https://web.whatsapp.com/send?text=Eigenbau
Source: chromecache_345.2.dr	String found in binary or memory: https://web.whatsapp.com/send?text=Kostenlose
Source: chromecache_291.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_291.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_582.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.statcounter.com/counter/counter.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 55040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55069
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55197
Source: unknown	Network traffic detected: HTTP traffic on port 55269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55199
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 55108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 55016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 55211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55083
Source: unknown	Network traffic detected: HTTP traffic on port 55051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55088
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55087
Source: unknown	Network traffic detected: HTTP traffic on port 55143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 55235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 55258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 55178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55097
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55095
Source: unknown	Network traffic detected: HTTP traffic on port 55222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55099
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55091
Source: unknown	Network traffic detected: HTTP traffic on port 55142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 55120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 55233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 55279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55027
Source: unknown	Network traffic detected: HTTP traffic on port 55118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55026
Source: unknown	Network traffic detected: HTTP traffic on port 55191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55025
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55146
Source: unknown	Network traffic detected: HTTP traffic on port 55153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55277
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55151
Source: unknown	Network traffic detected: HTTP traffic on port 55201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55273
Source: unknown	Network traffic detected: HTTP traffic on port 55213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 55041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 55179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55157
Source: unknown	Network traffic detected: HTTP traffic on port 55224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55158
Source: unknown	Network traffic detected: HTTP traffic on port 55267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55159
Source: unknown	Network traffic detected: HTTP traffic on port 55280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55287
Source: unknown	Network traffic detected: HTTP traffic on port 55164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55160
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55162
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 55042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 55212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55048
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55169
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55175
Source: unknown	Network traffic detected: HTTP traffic on port 55245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55178
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55174
Source: unknown	Network traffic detected: HTTP traffic on port 55129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55170
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 55257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 55234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55179
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55186
Source: unknown	Network traffic detected: HTTP traffic on port 55053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55187
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55188
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55189
Source: unknown	Network traffic detected: HTTP traffic on port 55223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55060
Source: unknown	Network traffic detected: HTTP traffic on port 55141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 55107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 55043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 55099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49802 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@28/508@36/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2020,i,11840398908261804532,289278302351347705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://thereferenz.net/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2020,i,11840398908261804532,289278302351347705,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr

Binary or memory string: .gsTrans .language.sw:before{background-image:url(data:image/webp;base64,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);}

Source: https://thereferenz.net/eigenbau-eines-freitragenden-schiebetors-ein-diy-projekt-fur-heimwerker	HTTP Parser: Base64 decoded: <script>
Source: https://thereferenz.net/Hausideen/	HTTP Parser: Base64 decoded: <script>
Source: https://thereferenz.net/das-gartenhaus-mit-dem-gewissen-extra-anbau-fur-mehr-platz-und-komfort	HTTP Parser: Base64 decoded: <script>

Source: https://thereferenz.net/	HTTP Parser: No favicon
Source: https://thereferenz.net/p/checkout.html	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:65377 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:55005 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: thereferenz.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: alumnieropa.org
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: www.statcounter.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: c.statcounter.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aefd.nelreports.net

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
www3.l.google.com	142.250.185.142	true	false	unknown
c.statcounter.com	104.20.94.138	true	false	unknown
alumnieropa.org	188.114.97.3	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
www.statcounter.com	104.20.95.138	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
thereferenz.net	188.114.96.3	true	false	unknown
translate.google.com	unknown	unknown	false	unknown
tse1.mm.bing.net	unknown	unknown	false	unknown
aefd.nelreports.net	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://tse1.mm.bing.net/th?q=Innovative%20Waschk%C3%BCchen-Ideen%20f%C3%BCr%20ein%20effizientes%20und%20stilvolles%20Zuhause	false	unknown
https://tse1.mm.bing.net/th?q=Fleischgenuss%20f%C3%BCr%20Grillmeister:%20Die%20ultimative%20Anleitung%20zum%20Smoken	false	unknown
https://tse1.mm.bing.net/th?q=Terrassenplatten%20zum%20Schn%C3%A4ppchenpreis:%20G%C3%BCnstige%202.%20Wahl%20f%C3%BCr%20Ihr%20Traum-Au%C3%9Fenbereich	false	unknown
https://thereferenz.net/Hausideen/	true	unknown
https://tse1.mm.bing.net/th?q=Der%20ultimative%20Leitfaden%20f%C3%BCr%20die%20Wahl%20der%20perfekten%203/4-Zoll-Schlauchkupplung	false	unknown
https://tse1.mm.bing.net/th?q=Moderne%20Gardinen%20f%C3%BCr%20ein%20stilvolles%20Wohnzimmer	false	unknown
https://tse1.mm.bing.net/th?q=Dachreling%20f%C3%BCr%20den%20VW%20Caddy:%20Die%20perfekte%20Erg%C3%A4nzung%20f%C3%BCr%20Ihr%20Fahrzeug	false	unknown
https://tse1.mm.bing.net/th?q=Autobahn-Einfahrt:%208%20einzigartige%20Tipps%20f%C3%BCr%20Anf%C3%A4nger	false	unknown
https://tse1.mm.bing.net/th?q=Sonnenhungrige%20K%C3%BCbelpflanzen%20f%C3%BCr%20die%20Terrasse:%20Ein%20Paradies%20f%C3%BCr%20Pflanzenliebhaber	false	unknown
https://thereferenz.net/einzigartige-deutsche-worter-fur-marco-polo-reisende	false	unknown
https://tse1.mm.bing.net/th?q=Der%20ultimative%20Zinndeckel%20f%C3%BCr%20deinen%20Bierkrug:%20Ein%20unverzichtbares%20Accessoire%20f%C3%BCr%20Bierliebhaber	false	unknown
https://tse1.mm.bing.net/th?q=Das%20Bett%20mit%20Fu%C3%9Fteil:%20Ein%20unverzichtbares%20M%C3%B6belst%C3%BCck%20f%C3%BCr%20erholsamen%20Schlaf	false	unknown
https://tse1.mm.bing.net/th?q=Wei%C3%9Fe%20K%C3%BCchen%20mit%20Holz:%20Ein%20zeitloser%20Klassiker%20mit%20nat%C3%BCrlichem%20Charme	false	unknown
https://tse1.mm.bing.net/th?q=Professioneller%20Personentransport%20mit%20Chauffeur:%20Ihr%20zuverl%C3%A4ssiger%20Partner%20f%C3%BCr%20komfortable%20und%20sichere%20Fahrten	false	unknown
https://tse1.mm.bing.net/th?q=Zeitlose%20Eleganz:%20Mid-Century%20Modern%20im%20Fokus	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20deutsche%20W%C3%B6rter%20f%C3%BCr%20den%20Nissan%20Skyline%20GTR%20R34	false	unknown
https://tse1.mm.bing.net/th?q=Hifi-Profis%20Frankfurt:%20Ihr%20Klangparadies%20in%20der%20Mainmetropole	false	unknown
https://tse1.mm.bing.net/th?q=Schuldenfrei%20und%20trotzdem%20liquide:%20So%20beleihen%20Sie%20Ihr%20abbezahltes%20Haus	false	unknown
https://tse1.mm.bing.net/th?q=Tiny%20House%20mit%20Grundst%C3%BCck%20in%20Bayern:%20Dein%20Traum%20vom%20Eigenheim%20auf%20kleinem%20Fu%C3%9F	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20Fiat%20500%20Gebrauchtwagen%20f%C3%BCr%20Anspruchsvolle	false	unknown
https://tse1.mm.bing.net/th?q=%C3%9Cberdachte%20Holz-Sitzgruppen:%20Oasen%20der%20Entspannung%20im%20Freien	false	unknown
https://tse1.mm.bing.net/th?q=Risse%20im%20Mauerwerk:%20Die%20verborgenen%20Gefahren%20f%C3%BCr%20Ihr%20Zuhause	false	unknown
https://tse1.mm.bing.net/th?q=12-Volt-Wasserpumpe%20mit%20%C3%BCberragender%20Leistung:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20Ihre%20Bew%C3%A4sserungsanforderungen	false	unknown
https://thereferenz.net/p/checkout.html	false	unknown
https://tse1.mm.bing.net/th?q=Wohnen%20im%20Chiemgau:%20Traumhafte%20Wohnungen%20inmitten%20bayerischer%20Idylle	false	unknown
https://tse1.mm.bing.net/th?q=Doppelte%20Laufschienen%20f%C3%BCr%20Schiebetore:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20reibungslose%20und%20sichere%20Torbewegungen	false	unknown
https://tse1.mm.bing.net/th?q=Kreative%20Holzbaukunst:%20Gestalte%20deine%20eigene%20Haust%C3%BCr	false	unknown
https://tse1.mm.bing.net/th?q=Der%20kompakte%20W%C3%A4rmebringer:%20Kamin%C3%B6fen%20mit%204%20kW%20f%C3%BCr%20gem%C3%BCtliche%20Stunden	false	unknown
https://alumnieropa.org/wp-content/uploads/2024/09/favitheref-32x32-1.png	false	unknown
https://tse1.mm.bing.net/th?q=Katja%20Krasavice:%20Von%20der%20Skandalnudel%20zur%20Erfolgsrapperin	false	unknown
https://tse1.mm.bing.net/th?q=Entdecke%20das%20versteckte%20Juwel:%2085551%20Kirchheim%20b.%20M%C3%BCnchen	false	unknown
https://tse1.mm.bing.net/th?q=Innovative%20Schlie%C3%9Fanlagen%20mit%20Chiptechnologie:%20Sicherheit%20und%20Komfort%20auf%20h%C3%B6chstem%20Niveau	false	unknown
https://tse1.mm.bing.net/th?q=Kreative%20Muttertagsgeschenke:%20Basteln%20mit%20Herz%20und%20Hand	false	unknown
https://tse1.mm.bing.net/th?q=Funkelnde%20Weihnachtsstimmung%20am%20Fenster:%20Beleuchtete%20Weihnachtskugeln%20f%C3%BCr%20ein%20zauberhaftes%20Ambiente	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20Audi%20A1%20Sportback:%208%20deutsche%20W%C3%B6rter,%20die%20Sie%20kennen%20sollten	false	unknown
https://tse1.mm.bing.net/th?q=Schwebendes%20Waschbecken%20mit%20Unterschrank:%20Die%20perfekte%20Kombination%20aus%20Stil%20und%20Funktionalit%C3%A4t	false	unknown
https://tse1.mm.bing.net/th?q=Vinyl%20auf%20Fliesen:%20Die%20revolution%C3%A4re%20Bodenl%C3%B6sung%20f%C3%BCr%20Ihr%20Zuhause	false	unknown
https://a.nel.cloudflare.com/report/v4?s=gksuEEVfbtNpDjf35MkobNDLNTc1FmlCFh%2FKaySQ2tC4f5UrmZzrAIqQ%2Br6ikbklSVdqdfNnYTfdNj61a7OxzyXaW%2BsEDa%2B%2F8bAcxgYkQaQJBU2ZTnQ375URpvo8k5j1TL0%3D	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20deutsche%20W%C3%B6rter%20f%C3%BCr%20Marco%20Polo-Reisende	false	unknown
https://tse1.mm.bing.net/th?q=ATV-Anh%C3%A4nger%20mit%20Stra%C3%9Fenzulassung:%20Dein%20ultimativer%20Begleiter%20f%C3%BCr%20Abenteuer%20und%20Transport	false	unknown
https://tse1.mm.bing.net/th?q=Kostenlose%20Online-Taschenrechner:%20Einzigartige%20Tools%20f%C3%BCr%20Jedermann	false	unknown
https://tse1.mm.bing.net/th?q=XXL-Paketbriefkasten%20freistehend:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20gro%C3%9Fe%20Pakete	false	unknown
https://tse1.mm.bing.net/th?q=Innovative%20Befestigungsl%C3%B6sungen:%20Nutsteine%20f%C3%BCr%20Aluprofile%20M8	false	unknown
https://c.statcounter.com/t.php?sc_project=13038394&u1=33420465F3B34F7753BA220B23B2BA45&java=1&security=353f65e5&sc_snum=1&sess=99b877&p=0&pv=10&rcat=d&rdomo=d&rdomg=18&jg=18&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=https%3A//thereferenz.net/Hausideen/&u=https%3A//thereferenz.net/das-gartenhaus-mit-dem-gewissen-extra-anbau-fur-mehr-platz-und-komfort&t=Das%20Gartenhaus%20mit%20dem%20gewissen%20Extra%3A%20Anbau%20f%C3%BCr%20mehr%20Platz%20und%20Komfort&invisible=1&sc_rum_e_s=2180&sc_rum_e_e=2192&sc_rum_f_s=0&sc_rum_f_e=2175	false	unknown
https://tse1.mm.bing.net/th?q=Traumhafte%20Schlafpl%C3%A4tze%20unterm%20Dach:%20Bett%20unter%20Dachschr%C3%A4ge%20f%C3%BCr%20ein%20gem%C3%BCtliches%20Zuhause	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20deutsche%20W%C3%B6rter%20f%C3%BCr%20Suresse%20Direkt%20Bank	false	unknown
https://tse1.mm.bing.net/th?q=Moderne%20Fliesen%20f%C3%BCr%20kleine%20Badezimmer:%20Stilvolle%20L%C3%B6sungen%20f%C3%BCr%20begrenzten%20Platz	false	unknown
https://thereferenz.net/kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann	false	unknown
https://alumnieropa.org/wp-content/uploads/2024/09/coollogo_com-27720242.png	false	unknown
https://tse1.mm.bing.net/th?q=Einzigartige%20Porsche%20911%20GT3:%208%20deutsche%20W%C3%B6rter,%20die%20Sie%20kennen%20sollten	false	unknown
https://tse1.mm.bing.net/th?q=Adventskalender-Gewinnspiel:%20Gewinne%20tolle%20Preise%20in%20der%20Vorweihnachtszeit	false	unknown
https://tse1.mm.bing.net/th?q=Betonhochbeet-Bausatz:%20Der%20ultimative%20Leitfaden%20f%C3%BCr%20Gartenliebhaber	false	unknown
https://tse1.mm.bing.net/th?q=Exklusive%20Restposten%20von%20GfK%20Pool:%20Einmalige%20Schn%C3%A4ppchen%20f%C3%BCr%20Poolbesitzer	false	unknown
https://tse1.mm.bing.net/th?q=Das%20Maigl%C3%B6ckchen:%20Ein%20Symbol%20der%20Reinheit%20und%20des%20Gl%C3%BCcks	false	unknown
https://tse1.mm.bing.net/th?q=Schimmel%20auf%20Blumenerde:%20Der%20unsichtbare%20Feind%20im%20gr%C3%BCnen%20Paradies	false	unknown
https://tse1.mm.bing.net/th?q=Toplader-Waschtrockner:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20platzsparendes%20Waschen%20und%20Trocknen	false	unknown
https://tse1.mm.bing.net/th?q=Das%20Gartenhaus%20mit%20dem%20gewissen%20Extra:%20Anbau%20f%C3%BCr%20mehr%20Platz%20und%20Komfort	false	unknown
https://tse1.mm.bing.net/th?q=Dachschr%C3%A4gen-Schrank-Ikea-Hack:%20Geniale%20Staurauml%C3%B6sung%20f%C3%BCr%20Dachgeschosswohnungen	false	unknown
https://tse1.mm.bing.net/th?q=Ausleihen%20von%20Bauhaus-Ger%C3%A4ten:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20Heimwerker%20und%20Profis	false	unknown
https://tse1.mm.bing.net/th?q=Filzsocken%20f%C3%BCr%20St%C3%BChle:%20Bequemer%20Schutz%20f%C3%BCr%20Holz-%20und%20Stahlrohrst%C3%BChle	false	unknown
https://tse1.mm.bing.net/th?q=Rosenkohl:%20Die%20perfekte%20Garzeit%20f%C3%BCr%20ein%20knackiges%20Gem%C3%BCseerlebnis	false	unknown
https://tse1.mm.bing.net/th?q=Der%20Apfel%20der%20R%C3%A4tsel:%20Ein%20Kreuzwortr%C3%A4tsel%20f%C3%BCr%20Apfelkenner	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://tse1.mm.bing.net/th?q=Elektrisierende	chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Heizungsz	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Wohnmobil-Carport	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Ma	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Hifi-Profis	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Kostenlose	chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Lichtzauber	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Terrassenplatten	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Exklusive	chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Farbharmonie	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Schwebendes	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Taxi	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Kreative	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Holzhandl	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Holzverkleidung	chromecache_329.2.dr	false		unknown
https://twitter.com/share?url=kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann&	chromecache_345.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Der	chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Wetterfeste	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Exklusiver	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Keller	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Wohnzimmer-Deko-Ideen:	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Betonhochbeet-Bausatz:	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=XXL-Paketbriefkasten	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Vinyl	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Energieeffizientes	chromecache_329.2.dr	false		unknown
https://c.statcounter.com/13038394/0/353f65e5/1/	chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Pflastersteine	chromecache_329.2.dr, chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Nie	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Bezug	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Wohn(t)raum	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Schlauchverbinder	chromecache_329.2.dr	false		unknown
https://www.google.com/images/cleardot.gif	chromecache_291.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Ausleihen	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=K	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Multanova	chromecache_587.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Risse	chromecache_329.2.dr	false		unknown
https://tse1.mm.bing.net/th?q=Sonntags-Shopping-Paradies	chromecache_329.2.dr	false		unknown
http://schema.org	chromecache_329.2.dr, chromecache_345.2.dr, chromecache_531.2.dr, chromecache_587.2.dr, chromecache_298.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
104.20.94.138	c.statcounter.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.142	www3.l.google.com	United States	15169	GOOGLEUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	alumnieropa.org	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	thereferenz.net	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.20.95.138	www.statcounter.com	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.4
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522278
Start date and time:	2024-09-29 15:51:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://thereferenz.net/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@28/508@36/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://thereferenz.net/p/checkout.html Browse: https://thereferenz.net/kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann Browse: https://thereferenz.net/eigenbau-eines-freitragenden-schiebetors-ein-diy-projekt-fur-heimwerker Browse: https://thereferenz.net/xxl-paketbriefkasten-freistehend-die-ultimative-losung-fur-groe-pakete Browse: https://thereferenz.net/undefined Browse: https://thereferenz.net/einzigartige-deutsche-worter-fur-marco-polo-reisende Browse: https://thereferenz.net/Hausideen/

Input	Output
URL: https://thereferenz.net/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/p/checkout.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/ Model: jbxai	{ "brand":["THE REFERENZ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Minggu", "text_input_field_labels":["Trendings", "Postingan Terbaru", "Eigenbau eines freitragenden Schiebetors: Ein DIY-Projekt f\\u00fcr..."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann Model: jbxai	{ "brand":["THE REFERENZ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/kostenlose-online-taschenrechner-einzigartige-tools-fur-jedermann Model: jbxai	{ "brand":["THE REFERENZ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/Hausideen/ Model: jbxai	{ "brand":["Hausideen"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/eigenbau-eines-freitragenden-schiebetors-ein-diy-projekt-fur-heimwerker Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/das-gartenhaus-mit-dem-gewissen-extra-anbau-fur-mehr-platz-und-komfort Model: jbxai	{ "brand":["The Referenz"], "contains_trigger_text":true, "trigger_text":"SPECIAL ADS", "prominent_button_name":"Minggu", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://thereferenz.net/das-gartenhaus-mit-dem-gewissen-extra-anbau-fur-mehr-platz-und-komfort Model: jbxai	{ "brand":["The Referenz"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Tutup Ads", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3
Category:	dropped
Size (bytes):	39362
Entropy (8bit):	7.9625663725126765
Encrypted:	false
SSDEEP:	768:6ez0o3LaagmVFaKTtanId1WNAq8qZNWoA7+aMCzOfZdnNlG8osOnv1q3n:6ez0o3Laag0aKx6IUAq8qTWPClCzmZd9
MD5:	C11118F7D785BBE25B5179C3FBBF9B9E
SHA1:	443766F9364517BC85F29DE1D0DB05DEDA1801A0
SHA-256:	7C423FFF46B1B894CCC871B468381D9DF33C1E3A3D8222D1C5714B54414082A3
SHA-512:	4A517D7D3A53FDB4BB4256933C416B9273965252DE6F67E75F56237386E6EB6DAD9DA25DC60B697D7C2D6352912C635CE9A43E6E3E64EE020DC1B56716189952
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........A..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......<...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~.......I.!.....&.@........$;F.*...N....s./.G.w....UI......Z.H.U..9I.I<.....s....A...![..9....X...2?,.:.+.c=8.Q..s.D...0....z.WVQ.C.x".%........B......"p...w..g c....o......4....J.....~d...!Pq.y.R[.F.<.;...n..5+.q..#...bY...w.l..7)9..O......y{...0..s\....:.jM].......m..j...3..

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 15:52:50.791627884 CEST	192.168.2.4	1.1.1.1	0x62d4	Standard query (0)	thereferenz.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:50.791807890 CEST	192.168.2.4	1.1.1.1	0x3a1b	Standard query (0)	thereferenz.net	65	IN (0x0001)	false
Sep 29, 2024 15:52:52.915877104 CEST	192.168.2.4	1.1.1.1	0x490a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:52.916265011 CEST	192.168.2.4	1.1.1.1	0x5d92	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:52.926882029 CEST	192.168.2.4	1.1.1.1	0xe25e	Standard query (0)	alumnieropa.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:52.927175045 CEST	192.168.2.4	1.1.1.1	0xa9e0	Standard query (0)	alumnieropa.org	65	IN (0x0001)	false
Sep 29, 2024 15:52:53.004653931 CEST	192.168.2.4	1.1.1.1	0x5ac5	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.004818916 CEST	192.168.2.4	1.1.1.1	0x6cbe	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Sep 29, 2024 15:52:53.801548958 CEST	192.168.2.4	1.1.1.1	0x7c5f	Standard query (0)	www.statcounter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.801944017 CEST	192.168.2.4	1.1.1.1	0x56a8	Standard query (0)	www.statcounter.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:54.311865091 CEST	192.168.2.4	1.1.1.1	0xa2e8	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:54.312043905 CEST	192.168.2.4	1.1.1.1	0xbb64	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:54.815762043 CEST	192.168.2.4	1.1.1.1	0xa72f	Standard query (0)	c.statcounter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:54.816143990 CEST	192.168.2.4	1.1.1.1	0x9069	Standard query (0)	c.statcounter.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:56.218877077 CEST	192.168.2.4	1.1.1.1	0x714f	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.219233990 CEST	192.168.2.4	1.1.1.1	0x7dd9	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Sep 29, 2024 15:52:56.234901905 CEST	192.168.2.4	1.1.1.1	0x8869	Standard query (0)	alumnieropa.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.235100985 CEST	192.168.2.4	1.1.1.1	0xe340	Standard query (0)	alumnieropa.org	65	IN (0x0001)	false
Sep 29, 2024 15:52:56.237324953 CEST	192.168.2.4	1.1.1.1	0x136f	Standard query (0)	www.statcounter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.237835884 CEST	192.168.2.4	1.1.1.1	0xfaca	Standard query (0)	www.statcounter.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:56.253350019 CEST	192.168.2.4	1.1.1.1	0x2ff7	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.254091024 CEST	192.168.2.4	1.1.1.1	0x2f0a	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:52:56.267736912 CEST	192.168.2.4	1.1.1.1	0x7ba0	Standard query (0)	c.statcounter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.267736912 CEST	192.168.2.4	1.1.1.1	0xc495	Standard query (0)	c.statcounter.com	65	IN (0x0001)	false
Sep 29, 2024 15:53:12.881851912 CEST	192.168.2.4	1.1.1.1	0x2c0a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:12.882031918 CEST	192.168.2.4	1.1.1.1	0x59fd	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 15:53:53.116489887 CEST	192.168.2.4	1.1.1.1	0x38e6	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:53.116929054 CEST	192.168.2.4	1.1.1.1	0xa7b8	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Sep 29, 2024 15:53:56.310264111 CEST	192.168.2.4	1.1.1.1	0x879b	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:56.311079025 CEST	192.168.2.4	1.1.1.1	0x36d0	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Sep 29, 2024 15:54:07.094383955 CEST	192.168.2.4	1.1.1.1	0x7350	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:54:07.094518900 CEST	192.168.2.4	1.1.1.1	0xff2b	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:54:08.761728048 CEST	192.168.2.4	1.1.1.1	0x4ac1	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:54:08.761946917 CEST	192.168.2.4	1.1.1.1	0xdfc1	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:54:12.893800974 CEST	192.168.2.4	1.1.1.1	0x3bca	Standard query (0)	aefd.nelreports.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:54:12.894033909 CEST	192.168.2.4	1.1.1.1	0xe386	Standard query (0)	aefd.nelreports.net	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 15:52:50.811238050 CEST	1.1.1.1	192.168.2.4	0x3a1b	No error (0)	thereferenz.net			65	IN (0x0001)	false
Sep 29, 2024 15:52:50.963857889 CEST	1.1.1.1	192.168.2.4	0x62d4	No error (0)	thereferenz.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:50.963857889 CEST	1.1.1.1	192.168.2.4	0x62d4	No error (0)	thereferenz.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:52.923177958 CEST	1.1.1.1	192.168.2.4	0x490a	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:52.923217058 CEST	1.1.1.1	192.168.2.4	0x5d92	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:52:52.947277069 CEST	1.1.1.1	192.168.2.4	0xa9e0	No error (0)	alumnieropa.org			65	IN (0x0001)	false
Sep 29, 2024 15:52:52.952610016 CEST	1.1.1.1	192.168.2.4	0xe25e	No error (0)	alumnieropa.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:52.952610016 CEST	1.1.1.1	192.168.2.4	0xe25e	No error (0)	alumnieropa.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.013310909 CEST	1.1.1.1	192.168.2.4	0x6cbe	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:53.013637066 CEST	1.1.1.1	192.168.2.4	0x5ac5	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:53.013637066 CEST	1.1.1.1	192.168.2.4	0x5ac5	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.013637066 CEST	1.1.1.1	192.168.2.4	0x5ac5	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.809530973 CEST	1.1.1.1	192.168.2.4	0x7c5f	No error (0)	www.statcounter.com		104.20.95.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.809530973 CEST	1.1.1.1	192.168.2.4	0x7c5f	No error (0)	www.statcounter.com		104.20.94.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:53.810363054 CEST	1.1.1.1	192.168.2.4	0x56a8	No error (0)	www.statcounter.com			65	IN (0x0001)	false
Sep 29, 2024 15:52:54.318802118 CEST	1.1.1.1	192.168.2.4	0xbb64	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:54.318896055 CEST	1.1.1.1	192.168.2.4	0xa2e8	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:54.318896055 CEST	1.1.1.1	192.168.2.4	0xa2e8	No error (0)	www3.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:54.823187113 CEST	1.1.1.1	192.168.2.4	0x9069	No error (0)	c.statcounter.com			65	IN (0x0001)	false
Sep 29, 2024 15:52:54.823796988 CEST	1.1.1.1	192.168.2.4	0xa72f	No error (0)	c.statcounter.com		104.20.94.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:54.823796988 CEST	1.1.1.1	192.168.2.4	0xa72f	No error (0)	c.statcounter.com		104.20.95.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.225471020 CEST	1.1.1.1	192.168.2.4	0x714f	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:56.225471020 CEST	1.1.1.1	192.168.2.4	0x714f	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.225471020 CEST	1.1.1.1	192.168.2.4	0x714f	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.226706028 CEST	1.1.1.1	192.168.2.4	0x7dd9	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:56.244532108 CEST	1.1.1.1	192.168.2.4	0x136f	No error (0)	www.statcounter.com		104.20.95.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.244532108 CEST	1.1.1.1	192.168.2.4	0x136f	No error (0)	www.statcounter.com		104.20.94.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.245270967 CEST	1.1.1.1	192.168.2.4	0xfaca	No error (0)	www.statcounter.com			65	IN (0x0001)	false
Sep 29, 2024 15:52:56.260251045 CEST	1.1.1.1	192.168.2.4	0xe340	No error (0)	alumnieropa.org			65	IN (0x0001)	false
Sep 29, 2024 15:52:56.260699987 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:56.260699987 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	www3.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.260713100 CEST	1.1.1.1	192.168.2.4	0x8869	No error (0)	alumnieropa.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.260713100 CEST	1.1.1.1	192.168.2.4	0x8869	No error (0)	alumnieropa.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.261513948 CEST	1.1.1.1	192.168.2.4	0x2f0a	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:52:56.274734974 CEST	1.1.1.1	192.168.2.4	0xc495	No error (0)	c.statcounter.com			65	IN (0x0001)	false
Sep 29, 2024 15:52:56.275157928 CEST	1.1.1.1	192.168.2.4	0x7ba0	No error (0)	c.statcounter.com		104.20.94.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:52:56.275157928 CEST	1.1.1.1	192.168.2.4	0x7ba0	No error (0)	c.statcounter.com		104.20.95.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:05.080923080 CEST	1.1.1.1	192.168.2.4	0x5a0f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:53:05.080923080 CEST	1.1.1.1	192.168.2.4	0x5a0f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:12.888983011 CEST	1.1.1.1	192.168.2.4	0x2c0a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:53.125576019 CEST	1.1.1.1	192.168.2.4	0xa7b8	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:53:53.125879049 CEST	1.1.1.1	192.168.2.4	0x38e6	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:53:53.125879049 CEST	1.1.1.1	192.168.2.4	0x38e6	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:53.125879049 CEST	1.1.1.1	192.168.2.4	0x38e6	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:56.317229986 CEST	1.1.1.1	192.168.2.4	0x879b	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:53:56.317229986 CEST	1.1.1.1	192.168.2.4	0x879b	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:56.317229986 CEST	1.1.1.1	192.168.2.4	0x879b	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:53:56.323189020 CEST	1.1.1.1	192.168.2.4	0x36d0	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:07.101380110 CEST	1.1.1.1	192.168.2.4	0xff2b	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:07.102433920 CEST	1.1.1.1	192.168.2.4	0x7350	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:07.102433920 CEST	1.1.1.1	192.168.2.4	0x7350	No error (0)	www3.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:54:08.768779039 CEST	1.1.1.1	192.168.2.4	0x4ac1	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:08.768779039 CEST	1.1.1.1	192.168.2.4	0x4ac1	No error (0)	www3.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:54:08.769702911 CEST	1.1.1.1	192.168.2.4	0xdfc1	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:12.901135921 CEST	1.1.1.1	192.168.2.4	0x3bca	No error (0)	aefd.nelreports.net	aefd.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:54:12.901283026 CEST	1.1.1.1	192.168.2.4	0xe386	No error (0)	aefd.nelreports.net	aefd.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:51 UTC	658	OUT	GET / HTTP/1.1 Host: thereferenz.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:52 UTC	721	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:52:52 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Cache-Control: public, max-age=1800, must-revalidate Strict-Transport-Security: max-age=15552000; preload x-frame-options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azj3OKJHn8O5aAweS8WdAV%2FubPgNEked1CU6DpaC6UdYYqSP8wgEnDLxCiTQ2YWteSNW7v0cWN2TOkdciUM4SLsjrdBSmnpHdC8Fj%2Fhnq5xqqAm8swByrOlRmrHcRMVwkS0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cac74c55bb941c0-EWR
2024-09-29 13:52:52 UTC	648	IN	Data Raw: 37 63 63 64 0d 0a 0a 20 20 20 20 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 64 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 22 20 72 65 6c 3d 22 6f 70 65 6e 69 64 2e 64 65 6c 65 67 61 74 65 22 3e 0a 20 Data Ascii: 7ccd <!doctype html><html lang="id"> <head> <meta charset="utf-8"> <meta content="width=device-width, initial-scale=1" name="viewport"> <link href="/" hreflang="x-default" rel="alternate"> <link href="/" rel="openid.delegate">
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 31 31 32 35 41 43 35 44 22 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 6e 64 6f 6e 65 73 69 61 22 20 6e 61 6d 65 3d 22 67 65 6f 2e 70 6c 61 63 65 6e 61 6d 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 23 66 37 66 38 66 39 22 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 23 66 37 66 38 66 39 22 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 76 62 75 74 74 6f 6e 2d 63 6f 6c 6f Data Ascii: 1125AC5D" name="msvalidate.01"> <meta content="Indonesia" name="geo.placename"> <meta content="yes" name="apple-mobile-web-app-capable"> <meta content="#f7f8f9" name="theme-color"> <meta content="#f7f8f9" name="msapplication-navbutton-colo
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 66 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 3b 0a 20 20 2d 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 0a 20 20 2d 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: ff; color: #000 !important; text-decoration: none !important; left: 0; top: 0; padding: 3px 10px; position: absolute; z-index: 1000; --webkit-transform: translateY(-100%); transform: translateY(-100%); --webkit-transition: -webkit-tra
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 73 6f 6c 69 64 20 72 65 64 3b 0a 7d 0a 2e 62 50 73 74 2c 0a 62 6f 64 79 20 7b 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 73 65 63 74 69 6f 6e 2c 0a 2e 77 69 64 67 65 74 2c 0a 2e 77 69 64 67 65 74 20 75 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 61 20 7b 0a 20 20 2d 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 Data Ascii: solid red;}.bPst,body { word-wrap: break-word;}img { border: 0; height: auto; max-width: 100%;}.section,.widget,.widget ul { margin: 0; padding: 0;}a { --webkit-transition: all 0.3s ease-in-out 0s; --moz-transition: all 0.3s eas
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 74 3a 20 34 30 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0a 7d 0a 23 6f 75 74 57 52 2c 0a 2e 47 4d 20 2e 70 6f 73 74 2d 62 6f 64 79 20 69 6d 67 2c 0a 2e 77 69 64 67 65 74 20 69 66 72 61 6d 65 2c 0a 2e 77 69 64 67 65 74 20 69 6d 67 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 69 6e 64 65 78 20 23 6d 57 72 70 20 7b 0a 20 20 2d 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 31 3b 0a 20 20 2d 2d 6d 73 2d 66 6c 65 78 3a 20 31 20 31 20 35 32 25 3b 0a 20 20 66 6c 65 78 3a 20 31 20 31 20 35 32 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 32 25 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 Data Ascii: t: 400; line-height: 1.6;}.container { max-width: 1100px;}#outWR,.GM .post-body img,.widget iframe,.widget img { max-width: 100%;}.index #mWrp { --webkit-box-flex: 1; --ms-flex: 1 1 52%; flex: 1 1 52%; max-width: 52%; min-width: 0
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 20 33 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 68 64 42 58 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0a 7d 0a 2e 68 64 42 58 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 67 61 70 3a 20 33 30 70 78 20 30 3b 0a 7d 0a 23 68 64 43 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 64 69 Data Ascii: display: -webkit-box; -webkit-line-clamp: 3; -webkit-box-orient: vertical; overflow: hidden;}.hdBX { position: relative; margin: 30px 0;}.hdBX .container { display: flex; flex-direction: column; gap: 30px 0;}#hdC { padding: 0; di
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 6d 2d 73 75 62 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 2c 20 30 20 32 34 70 78 20 32 34 70 78 20 2d 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 0a 20 20 74 6f 70 3a 20 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 20 32 36 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b Data Ascii: overflow: hidden;}.m-sub { position: absolute; left: 0; border-radius: .25rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.05), 0 24px 24px -8px rgba(0, 0, 0, 0.05); top: 100%; width: 260px; background: #ffffff; z-index: 99999; margin: 0;
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 7d 0a 23 6d 61 69 6e 2d 6d 65 6e 75 20 75 6c 20 3e 20 6c 69 2c 0a 23 6d 61 69 6e 2d 6d 65 6e 75 20 75 6c 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 23 6d 61 69 6e 2d 6d 65 6e 75 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 35 3b 0a 7d 0a 23 6d 61 69 6e 2d 6d 65 6e 75 20 75 6c 20 3e 20 6c 69 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 66 Data Ascii: gin-left: 4px; vertical-align: middle; border-radius: 3px; line-height: 1;}#main-menu ul > li,#main-menu ul > li > a { position: relative; margin: 0;}#main-menu { position: relative; z-index: 15;}#main-menu ul > li { padding: 0; f
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 70 78 20 2d 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 0a 20 20 74 6f 70 3a 20 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 20 32 36 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 35 73 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 35 73 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 35 73 3b 0a 20 20 Data Ascii: px -8px rgba(0, 0, 0, 0.05); top: 100%; width: 260px; background: #ffffff; z-index: 99999; margin: 0; padding: 20px; visibility: hidden; opacity: 0; transition: all 0.25s; -moz-transition: all 0.25s; -webkit-transition: all 0.25s;
2024-09-29 13:52:52 UTC	1369	IN	Data Raw: 4d 43 34 33 4c 44 51 75 4e 69 30 77 4c 6a 59 30 4c 44 45 75 4f 54 55 73 4d 69 34 77 4f 47 4d 74 4d 69 34 32 4e 53 77 79 4c 6a 63 79 4c 54 49 75 4e 54 6b 73 4e 79 34 77 4f 43 77 77 4c 6a 45 7a 4c 44 6b 75 4e 7a 4e 73 4e 54 51 75 4e 7a 6b 73 4e 54 4d 75 4d 54 4e 73 4e 43 34 34 4c 54 51 75 4f 54 4e 73 4c 54 51 75 4f 43 77 30 4c 6a 6b 31 49 47 4d 79 4c 6a 63 30 4c 44 49 75 4e 6a 55 73 4e 79 34 78 4c 44 49 75 4e 54 67 73 4f 53 34 33 4e 53 30 77 4c 6a 45 31 59 7a 41 75 4d 44 67 74 4d 43 34 77 4f 43 77 77 4c 6a 45 31 4c 54 41 75 4d 54 59 73 4d 43 34 79 4d 69 30 77 4c 6a 49 30 62 44 55 7a 4c 6a 6b 31 4c 54 55 79 4c 6a 63 32 59 7a 49 75 4e 7a 4d 74 4d 69 34 32 4e 53 77 79 4c 6a 63 35 4c 54 63 75 4d 44 45 73 4d 43 34 78 4e 43 30 35 4c 6a 63 7a 49 47 4d 74 4d 69 34 Data Ascii: MC43LDQuNi0wLjY0LDEuOTUsMi4wOGMtMi42NSwyLjcyLTIuNTksNy4wOCwwLjEzLDkuNzNsNTQuNzksNTMuMTNsNC44LTQuOTNsLTQuOCw0Ljk1IGMyLjc0LDIuNjUsNy4xLDIuNTgsOS43NS0wLjE1YzAuMDgtMC4wOCwwLjE1LTAuMTYsMC4yMi0wLjI0bDUzLjk1LTUyLjc2YzIuNzMtMi42NSwyLjc5LTcuMDEsMC4xNC05LjczIGMtMi4

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:53 UTC	698	OUT	GET /th?q=Terrassenplatten%20zum%20Schn%C3%A4ppchenpreis:%20G%C3%BCnstige%202.%20Wahl%20f%C3%BCr%20Ihr%20Traum-Au%C3%9Fenbereich HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:53 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 37286 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D7B5447F18494091B95BD1E387C449A7 Ref B: EWR30EDGE0119 Ref C: 2024-09-29T13:52:53Z Date: Sun, 29 Sep 2024 13:52:53 GMT Connection: close
2024-09-29 13:52:53 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 64 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 62 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@d@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,b"
2024-09-29 13:52:53 UTC	16384	IN	Data Raw: 31 92 4f 1e 9e d5 6e ee de 38 90 14 2f df 86 39 fe 95 4c 67 1d 6a 90 cf 58 f8 6d 8f ec 5d 43 1d 3f b5 24 eb ff 00 5c 21 ae da b8 6f 86 47 3a 1e a5 cf fc c5 a5 ff 00 d2 78 6b b9 a4 48 b4 94 b4 94 01 95 e2 0f f9 05 5d fb b4 23 ff 00 22 03 5c 2d 77 5e 21 ff 00 90 55 cf fb f0 ff 00 e8 62 b8 6a 68 a4 14 a3 ad 14 e4 eb 4d bd 0a 1f 7e e3 ed 2c a6 cc 2b 0f b2 e2 e3 f7 ff 00 36 23 43 9e 4f 97 ed d2 b9 af 11 32 ee b8 ca 96 1e 7c 7d 0e 0f 4f 5a ec b5 12 de 5c c3 ed 0a 46 eb 31 e5 09 8e 40 da 87 1e 59 ae 3b 5c f3 37 cc 54 f3 e7 26 46 40 fe 75 95 37 ee bf 52 ea 7c 71 f4 3a 9b 09 ac e6 b4 88 bd b4 ab f6 7b 28 57 06 55 63 84 54 51 c1 4e f9 cd 36 5b ed 3c 1d af 15 ca 03 f2 87 1e 4b 0e 79 cf 40 6a cc 8f a9 f9 56 9f 66 81 9a 13 65 66 08 5b 78 a4 04 b4 6a 58 64 29 fc 6a 16 Data Ascii: 1On8/9LgjXm]C?$\!oG:xkH]#"\-w^!UbjhM~,+6#CO2\|}OZ\F1@Y;\7T&F@u7R\|q:{(WUcTQN6[<Ky@jVfef[xjXd)j
2024-09-29 13:52:53 UTC	5372	IN	Data Raw: d6 31 db 03 7b 7e 67 e5 fd 0d 39 46 d2 48 66 2c 46 09 66 2c 48 eb 8c 1e 3f 4a 68 38 e9 fa d1 bb f0 f5 a4 31 e4 a9 1c 8c 7b af 4f c8 d2 14 3d 46 18 7f b3 d4 7d 47 5a 4c d2 83 8c 73 cf 6e d4 86 37 a7 15 8b e2 13 fe 89 0f fd 77 1f fa 0b 56 f6 41 fb c0 30 ee 47 0d ff 00 7d 7f fa eb 0f c4 8a ab 65 6e 54 f5 b9 51 82 30 7e e3 7e 15 32 d8 b8 3d 51 cc 93 f2 95 fa 9f d0 d7 69 67 ff 00 1e 76 5c 0c 0b 68 0e 7f e0 03 ad 71 44 1c 06 20 e3 a6 7f 0a eb 6d 10 35 ad 91 90 b3 ff 00 a3 c3 85 6f b8 3e 41 d1 47 1f 9e 6a 20 69 50 ce d5 92 37 ba 86 58 e4 c8 31 81 2e ce 46 63 6e 0a 31 f9 77 0c fe 9e fc d1 8d c1 31 c3 bb 86 c2 92 8a 4b 03 fc 32 21 f4 ed 9e 0f 6a d3 d6 12 46 fb 27 96 b9 da b3 05 f6 62 06 14 8e 98 3c 8c 56 5b 6c 47 84 aa 8d c5 43 a6 e2 40 c8 3f 32 1c 7b 8e 07 6c d7 Data Ascii: 1{~g9FHf,Ff,H?Jh81{O=F}GZLsn7wVA0G}enTQ0~~2=Qigv\hqD m5o>AGj iP7X1.Fcn1w1K2!jF'b<V[lGC@?2{l

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:53 UTC	682	OUT	GET /th?q=Pflastersteine%20zum%20Schn%C3%A4ppchenpreis:%20G%C3%BCnstige%202.%20Wahl%20f%C3%BCr%20Sparf%C3%BCchse HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:53 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 28094 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E2DAAB89100546F5B83972CB84F911AC Ref B: EWR311000108045 Ref C: 2024-09-29T13:52:53Z Date: Sun, 29 Sep 2024 13:52:53 GMT Connection: close
2024-09-29 13:52:53 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 52 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 44 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@R@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,D"
2024-09-29 13:52:53 UTC	12566	IN	Data Raw: 00 00 06 30 06 30 07 6c 53 d9 11 d4 a9 00 82 30 41 e9 5e 62 c7 4d 4a f6 56 3d 49 52 8b 56 6c f1 1b 8e b5 52 bb 1f 17 e8 b1 d8 c9 1d e5 b2 ed 82 67 2b 22 0e 89 27 5c 8f 63 5c 79 af a3 c3 55 8d 5a 6a 71 3e 7e bc 1d 3a 8e 2c 4c d4 88 d8 35 15 2d 6f 63 24 ec 5e 88 ab 32 29 e8 cc a0 fd 09 c5 7a 64 01 89 48 e3 04 e0 05 50 be 80 60 57 95 23 11 8a f6 4f 0a f9 77 1a 6d a5 db 63 ce 9a 31 bc 1e a0 29 da 3f 3c 66 bc 5c c6 9b 7c b6 3d 7c 0d 54 b9 87 8b 2b b2 b9 d8 7a 74 ae 6b c4 43 ca b1 bf 12 8c 11 13 26 1b 83 b9 b8 02 bd 1f 72 a0 c9 c0 15 c6 78 d3 4f 3a 8e 9f 24 f1 12 26 b5 6f 38 28 e9 2a 81 ca b0 fd 47 ff 00 5e bc fa 74 e3 0a 91 bb ea 76 3a d2 9c 24 92 e8 79 30 06 a4 51 92 07 73 4e 82 19 2e 26 86 08 c0 2f 33 ac 69 9e 99 63 8c 9a f4 3d 33 4e b2 b1 8d 23 86 35 2f 81 Data Ascii: 00lS0A^bMJV=IRVlRg+"'\c\yUZjq>~:,L5-oc$^2)zdHP`W#Owmc1)?<f\\|=\|T+ztkC&rxO:$&o8(*G^tv:$y0QsN.&/3ic=3N#5/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:53 UTC	720	OUT	GET /th?q=Schraubbare%20T%C3%BCrstopper:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20quietschende%20T%C3%BCren%20und%20besch%C3%A4digte%20W%C3%A4nde HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:53 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 16804 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1184F119AA1A4AF2A2E84A943D7788B1 Ref B: EWR30EDGE0106 Ref C: 2024-09-29T13:52:53Z Date: Sun, 29 Sep 2024 13:52:53 GMT Connection: close
2024-09-29 13:52:53 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 47 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 57 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@G@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,W"
2024-09-29 13:52:53 UTC	1274	IN	Data Raw: a7 1d bd 4f 4a 33 07 b5 2d 05 a1 5f 39 27 02 9e 14 f7 e2 9d 84 53 47 24 f1 50 5a d4 50 42 f1 9e 69 ea 1d f3 b4 7e 34 e8 e0 dc 46 6a c9 55 84 01 b8 00 7a 9c 73 48 b5 12 38 e2 cb 60 8c 9e f5 31 22 3d aa 10 64 f5 27 b0 a6 79 b1 c4 4b e7 3e 80 f7 aa c6 e2 59 49 c0 0a 0d 05 5d 2d 89 e4 b9 b5 89 b0 00 2d d7 00 77 fa d5 56 96 69 d8 b1 ca af 60 0f 6a 5f 2b b9 3f 53 de 9d 9d bc 28 a0 86 db 1a b1 a0 e7 1c fa 9e bf 9d 3b 04 f4 e2 97 6f 72 71 de 98 cd b9 48 8c f3 d3 22 82 05 48 54 b1 2c c1 9b f4 15 21 1c e2 99 1c 6c 31 ce 3d 7d 4d 4c 48 a0 b5 a8 dd a7 1c 53 80 00 74 c9 a6 b1 c7 d2 a1 32 f3 85 c9 3d e9 a5 70 ba 43 9d db 90 06 07 b5 30 0e e6 90 bf 23 27 24 d3 8a 96 5e 0e 28 b0 b9 ba 0e 69 ca 8d 80 8c 11 e9 50 fc c7 b5 27 94 46 d0 72 71 e9 53 ec 24 00 07 d6 91 68 60 ea Data Ascii: OJ3-_9'SG$PZPBi~4FjUzsH8`1"=d'yK>YI]--wVi`j_+?S(;orqH"HT,!l1=}MLHSt2=pC0#'$^(iP'FrqS$h`

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:53 UTC	720	OUT	GET /th?q=Doppelte%20Laufschienen%20f%C3%BCr%20Schiebetore:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20reibungslose%20und%20sichere%20Torbewegungen HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:53 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 10640 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0FA9402C65914035B376719994F93898 Ref B: EWR30EDGE0720 Ref C: 2024-09-29T13:52:53Z Date: Sun, 29 Sep 2024 13:52:52 GMT Connection: close
2024-09-29 13:52:53 UTC	10640	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 00 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 63 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,c"

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	626	OUT	GET /wp-content/uploads/2024/09/coollogo_com-27720242.png HTTP/1.1 Host: alumnieropa.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	828	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:52:54 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close last-modified: Sun, 15 Sep 2024 06:38:00 GMT vary: Accept-Encoding etag: W/"66e680c8-b5d" x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000; includeSubDomains; preload Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H60mWIAWYHujS%2BJDmjU6QnExempLoojynodm9d7KHc%2BMjJ5t5eusbymfgt7yYf5jnux0Ndw2UzVxadrAro0r9B%2FmurxtjKN%2FWGDHLo23%2Fr2x8dBXrQNYGxTxZoNEIM1UZU4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cac74d21d5341fb-EWR
2024-09-29 13:52:54 UTC	541	IN	Data Raw: 62 35 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fd 00 00 00 38 08 06 00 00 00 36 10 fe fb 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e8 09 0f 06 21 03 72 ab 79 83 00 00 0a ea 49 44 41 54 78 da ed 9d 79 74 54 d5 1d c7 bf 77 66 32 6b 96 49 48 48 08 21 09 13 08 5b 04 64 0f 28 44 40 01 eb 91 40 3d 26 07 84 04 50 01 83 85 4a dd 6a ab e8 b1 ed f1 b4 7a ac a0 b2 45 42 a0 95 4d 59 5a 84 52 ca 61 2d 84 10 54 04 8e b1 86 45 c8 06 38 24 31 c9 64 32 cb ed 1f 33 19 59 32 33 ef 4d 26 f3 86 e4 f7 39 27 7f 64 de 5d 7f ef 7d ef fd dd fb ee bd 0f 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 Data Ascii: b5dPNGIHDR86bKGDCpHYstIME!ryIDATxytTwf2kIHH![d(D@@=&PJjzEBMYZRa-TE8$1d23Y23M&9'd]}
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 87 8c 42 de bc e7 bd 8a 5e 21 85 61 e6 2e ce 81 d5 6a 6d f5 da 90 81 43 b1 64 fe 0b ae ff 4f 9e 2e c2 8a fc 0f dc a6 f5 dc 9c 45 18 35 2c 1d 80 7f 1a a7 35 ef e5 43 a5 12 ef 19 fa 23 ef e8 2e 31 c8 9c 32 0d 63 d3 c7 b9 1e 5a 7f d6 c9 93 dd 85 b2 fa dd 7c a8 d5 ea a0 2b 57 a4 3e 0a 33 a6 cf c4 c8 a1 a3 da c5 76 de d2 7a 75 c9 ef d0 af 77 3f 5c 3a 56 8b b4 69 d1 7d 5b 7e df be fb 33 6c ff e2 73 b7 f1 fe f8 da 3b 48 88 4f 08 a8 fe 64 d4 2f 04 0f 37 7e bc 8e b5 1b 57 63 ff a1 7d 64 0c 91 dc ac 31 e2 c3 4f 96 e3 bf 27 8f 49 92 7f c1 a7 f9 b0 5a ad 68 aa b5 a1 f2 9b 86 a0 b6 15 89 3e 08 d9 bd 7f 37 19 c1 47 3e ff e2 33 49 f2 ad ac ae c4 ee fd ff 04 00 54 7c 55 4f a2 27 c4 61 6d a3 4b da 99 69 6a e3 b8 b8 2d ec da b3 03 d5 d7 ab c1 6d c0 4f d7 9a 49 f4 04 d1 d1 Data Ascii: B^!a.jmCdO.E5,5C#.12cZ\|+W>3vzuw?\:Vi}[~3ls;HOd/7~Wc}d1O'IZh>7G>3IT\|UO'amKij-mOI
2024-09-29 13:52:54 UTC	1006	IN	Data Raw: c7 ed 08 ed 1a 42 46 6b 19 e6 45 44 e2 fe fb 86 e0 37 79 2f 41 a9 6c 7d 99 47 c9 99 12 34 3b 17 3b f5 18 11 26 69 79 ef eb 37 10 13 c7 3d 2c 3a de 9a 0d ab da 7c 5c 16 89 3e 08 79 e8 81 f1 ae 09 98 d6 d8 b1 67 3b 00 a0 fe 1a ed a7 bf 93 de 86 54 2c 99 ff 02 14 8a bb 9d d3 a6 26 13 4e 7d 5d ec e8 31 ff 67 92 bc ac d9 99 33 10 d7 b5 9b a8 38 97 7e b8 18 b0 f2 91 e8 03 88 4a a9 c2 94 09 bf 70 7b fd d4 57 c5 b8 52 fe 03 19 aa b5 71 bb 0c 48 eb 9b 86 bc b9 cf bb 3c a2 5b 39 7a e2 08 00 69 f6 b1 df 8a 3a 42 0e a5 52 89 05 b9 0b 5b 2d 67 30 40 a2 0f 30 13 c6 4e 84 56 a3 73 7b 7d e7 9e 1d 00 e8 24 dc 3b 89 48 50 01 0c 18 3a 68 18 9e 9d b5 e0 ae eb e7 4a cf c2 28 6e f5 5b bb 90 94 1e 0e 30 c0 90 94 82 a9 93 33 49 f4 9d 1d b9 92 41 a3 d6 60 d2 f8 c9 6e c3 9c fc b2 Data Ascii: BFkED7y/Al}G4;;&iy7=,:\|\>yg;T,&N}]1g38~Jp{WRqH<[9zi:BR[-g0@0NVs{}$;HP:hJ(n[03IA`n
2024-09-29 13:52:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	536	OUT	GET /counter/counter.js HTTP/1.1 Host: www.statcounter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	389	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:52:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Thu, 26 Sep 2024 16:33:35 GMT etag: W/"66f58cdf-8c17" expires: Sun, 29 Sep 2024 14:19:47 GMT Cache-Control: max-age=43200 CF-Cache-Status: HIT Age: 41587 Server: cloudflare CF-RAY: 8cac74d3ec904407-EWR
2024-09-29 13:52:54 UTC	980	IN	Data Raw: 37 65 31 64 0d 0a 76 61 72 20 5f 73 74 61 74 63 6f 75 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 4e 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 70 2c 56 29 7b 66 6f 72 28 76 61 72 20 49 3d 30 3b 49 3c 56 2e 6c 65 6e 67 74 68 3b 49 2b 2b 29 69 66 28 56 5b 49 5d 3d 3d 70 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 70 29 7b 72 65 74 75 72 6e 20 42 65 28 70 2c 5b 31 32 32 32 35 31 38 39 2c 31 31 35 34 38 30 32 33 2c 31 31 38 37 38 38 37 31 2c 31 32 32 31 34 36 35 39 2c 39 38 31 33 35 39 2c 39 35 36 30 33 33 34 2c 36 37 30 39 36 38 37 2c 39 38 37 39 36 31 33 2c 34 31 32 34 31 33 38 2c 32 30 34 36 30 39 2c 31 30 37 37 36 38 30 38 2c 31 31 36 30 31 38 32 35 2c 31 30 30 31 31 39 31 38 5d 29 Data Ascii: 7e1dvar _statcounter=function(C){var N=!1;function Be(p,V){for(var I=0;I<V.length;I++)if(V[I]==p)return!0;return!1}function ce(p){return Be(p,[12225189,11548023,11878871,12214659,981359,9560334,6709687,9879613,4124138,204609,10776808,11601825,10011918])
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 22 2b 65 29 3b 74 3d 6e 3d 3d 3d 2d 31 2c 70 65 2b 3d 6e 7d 7d 63 61 74 63 68 28 69 29 7b 74 3d 21 31 7d 72 65 74 75 72 6e 20 74 7d 2c 47 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 22 2b 76 2e 72 65 66 65 72 72 65 72 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 73 63 5f 72 65 66 65 72 65 72 5f 73 63 72 30 38 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 28 65 3d 73 63 5f 72 65 66 65 72 65 72 5f 73 63 72 30 38 29 2c 65 7d 2c 54 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 22 2b 76 2e 74 69 74 6c 65 3b 72 65 74 75 72 6e 20 65 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 30 30 29 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3f 65 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3a 65 3d 65 73 63 Data Ascii: "+e);t=n===-1,pe+=n}}catch(i){t=!1}return t},Ge=function(){var e=""+v.referrer;return typeof sc_referer_scr08!="undefined"&&(e=sc_referer_scr08),e},Te=function(){var e=""+v.title;return e=e.substring(0,300),encodeURIComponent?e=encodeURIComponent(e):e=esc
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 73 63 2d 70 65 72 66 2d 77 68 22 29 2c 6c 3d 30 3b 66 26 26 28 6c 3d 66 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 3b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 2d 70 65 72 66 2d 70 6e 22 29 2c 73 3d 30 3b 75 26 26 28 73 3d 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 2d 70 65 72 66 2d 64 62 22 29 2c 63 3d 30 3b 67 26 26 28 63 3d 67 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 2c 72 3d 22 26 73 63 5f 65 76 5f 73 63 70 65 72 66 5f 6a 73 5f 65 78 65 63 3d 22 2b 74 2b 22 26 73 63 5f 65 76 5f 73 63 70 65 72 66 5f 74 74 66 62 5f 66 72 6f 6e 74 65 6e 64 3d 22 2b 61 2b 22 26 73 63 5f 65 Data Ascii: ementById("sc-perf-wh"),l=0;f&&(l=f.textContent);var u=document.getElementById("sc-perf-pn"),s=0;u&&(s=u.textContent);var g=document.getElementById("sc-perf-db"),c=0;g&&(c=g.textContent),r="&sc_ev_scperf_js_exec="+t+"&sc_ev_scperf_ttfb_frontend="+a+"&sc_e
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 5d 21 3d 3d 66 5b 6c 5d 29 7d 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 75 29 7b 72 65 74 75 72 6e 20 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 7d 3b 76 61 72 20 72 3d 7b 7d 3b 69 66 28 74 28 65 2c 22 74 61 67 73 22 29 26 26 74 79 70 65 6f 66 20 65 2e 74 61 67 73 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 76 61 72 20 6e 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 2e 74 61 67 73 29 6e 5b 6e 2e 6c 65 6e 67 74 68 5d 3d 69 2c 6e 5b 6e 2e 6c 65 6e 67 74 68 5d 3d 65 2e 74 61 67 73 5b 69 5d 3b 69 66 28 4d 74 28 6e 29 29 7b 6e 3d 54 74 28 6e 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 3d 61 2b 32 29 Data Ascii: ]!==f[l])}if(Object.prototype.hasOwnProperty)var t=function(l,u){return l.hasOwnProperty(u)};var r={};if(t(e,"tags")&&typeof e.tags=="object"){var n=[];for(var i in e.tags)n[n.length]=i,n[n.length]=e.tags[i];if(Mt(n)){n=Tt(n);for(var a=0;a<n.length;a=a+2)
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 6e 65 77 20 52 65 67 45 78 70 28 22 4d 61 63 20 4f 53 20 58 2e 2a 53 61 66 61 72 69 2f 22 29 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 26 26 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 3b 69 66 28 21 6e 65 77 20 52 65 67 45 78 70 28 22 4d 53 49 45 22 29 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 26 26 28 72 3d 6e 61 76 69 67 61 74 Data Ascii: new RegExp("Mac OS X.*Safari/").test(navigator.userAgent)&&window.devicePixelRatio\|\|1;if(!new RegExp("MSIE").test(navigator.userAgent)){if(navigator.mimeTypes&&navigator.mimeTypes.length)for(var t in n)Object.prototype.hasOwnProperty.call(n,t)&&(r=navigat
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 74 2e 6e 75 6d 62 65 72 2c 31 30 29 21 3d 3d 2d 32 31 34 37 30 32 34 38 39 31 29 29 74 68 72 6f 77 20 74 7d 72 65 74 75 72 6e 20 65 7d 2c 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 4c 65 28 29 29 7b 74 72 79 7b 65 3d 3d 3d 22 69 73 5f 76 69 73 69 74 6f 72 5f 75 6e 69 71 75 65 22 3f 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 74 61 74 63 6f 75 6e 74 65 72 2e 63 6f 6d 2f 6c 6f 63 61 6c 73 74 6f 72 61 67 65 2f 22 2c 74 29 3a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 74 61 74 63 6f 75 6e 74 65 72 5f 22 2b 65 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 28 21 6e 2e 6e 61 6d 65 7c 7c 6e 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c Data Ascii: parseInt(t.number,10)!==-2147024891))throw t}return e},Oe=function(e,t,r){if(Le()){try{e==="is_visitor_unique"?localStorage.setItem("statcounter.com/localstorage/",t):localStorage.setItem("statcounter_"+e,t)}catch(n){if((!n.name\|\|n.name.toLowerCase().repl
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 2c 61 3d 30 3b 61 3c 69 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 66 6f 72 28 76 61 72 20 66 3d 69 5b 61 5d 3b 66 2e 63 68 61 72 41 74 28 30 29 3d 3d 22 20 22 3b 29 66 3d 66 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 66 2e 69 6e 64 65 78 4f 66 28 72 29 3d 3d 30 29 7b 76 61 72 20 6c 3d 66 2e 73 75 62 73 74 72 69 6e 67 28 72 2e 6c 65 6e 67 74 68 2c 66 2e 6c 65 6e 67 74 68 29 3b 6e 26 26 74 21 3d 3d 76 6f 69 64 20 30 26 26 6e 2e 69 6e 63 6c 75 64 65 73 28 22 22 2b 74 2b 22 2e 22 29 26 26 21 6c 2e 69 6e 63 6c 75 64 65 73 28 22 22 2b 74 2b 22 2e 22 29 7c 7c 28 6e 3d 6c 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 76 61 72 20 61 3d 21 31 3b 6e 3d 3d 3d 76 6f 69 64 20 Data Ascii: ,a=0;a<i.length;a++){for(var f=i[a];f.charAt(0)==" ";)f=f.substring(1,f.length);if(f.indexOf(r)==0){var l=f.substring(r.length,f.length);n&&t!==void 0&&n.includes(""+t+".")&&!l.includes(""+t+".")\|\|(n=l)}}return n},Ke=function(e,t,r,n,i){var a=!1;n===void
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 65 2e 73 65 74 49 74 65 6d 28 22 73 74 61 74 63 6f 75 6e 74 65 72 5f 63 6f 6e 66 69 67 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 2c 21 30 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 42 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 22 74 2e 70 68 70 22 2c 69 3d 47 3b 69 66 28 44 65 28 65 29 26 26 28 6e 3d 22 74 5f 73 74 61 74 69 63 2e 70 68 70 22 29 2c 4a 65 28 65 29 26 26 28 6e 3d 22 63 6f 75 6e 74 65 72 5f 74 65 73 74 2e 70 68 70 22 29 2c 74 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 29 3d 3d 22 3f 22 29 76 61 72 20 61 3d 69 2b 6e 2b 74 3b 65 6c 73 65 20 76 61 72 20 61 3d 74 3b 61 3d 61 2b 22 26 78 68 72 5f 72 65 71 75 65 73 74 3d 74 72 75 65 22 2c 41 65 28 61 2c 72 29 7d 2c 41 65 3d 66 75 6e Data Ascii: e.setItem("statcounter_config",JSON.stringify(r)),!0}catch(n){return!1}},Bt=function(e,t,r){var n="t.php",i=G;if(De(e)&&(n="t_static.php"),Je(e)&&(n="counter_test.php"),t.substring(0,1)=="?")var a=i+n+t;else var a=t;a=a+"&xhr_request=true",Ae(a,r)},Ae=fun
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 28 72 2e 6c 65 6e 67 74 68 2c 6e 2e 6c 65 6e 67 74 68 29 2c 61 3d 32 3b 72 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 5b 72 2e 6c 65 6e 67 74 68 2d 32 5d 2e 6c 65 6e 67 74 68 3c 3d 33 26 26 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 69 6e 7b 61 74 3a 31 2c 61 75 3a 31 2c 62 72 3a 31 2c 65 73 3a 31 2c 68 75 3a 31 2c 69 6c 3a 31 2c 6e 7a 3a 31 2c 74 72 3a 31 2c 75 6b 3a 31 2c 75 73 3a 31 2c 7a 61 3a 31 7d 7c 7c 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 22 6b 72 22 7c 7c 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 22 72 75 22 7c 7c 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 22 61 75 22 26 26 72 5b 72 2e 6c 65 6e 67 74 68 2d 32 5d 69 6e 7b 63 73 69 72 6f 3a 31 7d 7c 7c 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 22 61 74 22 26 26 72 Data Ascii: =Math.min(r.length,n.length),a=2;r.length>1&&(r[r.length-2].length<=3&&r[r.length-1]in{at:1,au:1,br:1,es:1,hu:1,il:1,nz:1,tr:1,uk:1,us:1,za:1}\|\|r[r.length-1]=="kr"\|\|r[r.length-1]=="ru"\|\|r[r.length-1]=="au"&&r[r.length-2]in{csiro:1}\|\|r[r.length-1]=="at"&&r
2024-09-29 13:52:54 UTC	1369	IN	Data Raw: 66 28 72 2e 72 65 70 6c 61 63 65 28 6c 2c 22 23 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 29 7b 69 66 28 6e 65 5b 6c 5d 3d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6c 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 65 5b 6c 5d 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 75 3d 6e 65 5b 6c 5d 5b 61 5d 3b 69 66 28 74 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 2b 75 2b 22 3d 22 29 7c 7c 74 2e 69 6e 63 6c 75 64 65 73 28 22 26 22 2b 75 2b 22 3d 22 29 29 72 65 74 75 72 6e 20 6c 7d 7d 66 6f 72 28 76 61 72 20 73 20 69 6e 20 78 65 29 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 78 65 5b 73 5d 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6c 3d 78 65 5b 73 5d 5b 61 5d 3b 69 66 28 72 2e 72 65 70 6c 61 63 65 28 6c 2c 22 23 Data Ascii: f(r.replace(l,"#").split(".").includes("#")){if(ne[l]===null)return l;for(var a=0;a<ne[l].length;a++){var u=ne[l][a];if(t.includes("?"+u+"=")\|\|t.includes("&"+u+"="))return l}}for(var s in xe)for(var a=0;a<xe[s].length;a++){var l=xe[s][a];if(r.replace(l,"#

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	684	OUT	GET /th?q=Filzsocken%20f%C3%BCr%20St%C3%BChle:%20Bequemer%20Schutz%20f%C3%BCr%20Holz-%20und%20Stahlrohrst%C3%BChle HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 20877 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 7D6D3AA2E0924049852D2429CB7EC7C3 Ref B: EWR311000107029 Ref C: 2024-09-29T13:52:54Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:54 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 55 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 00 ed 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@U@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:54 UTC	5349	IN	Data Raw: 27 41 c3 b8 8b 3f 4f cf 35 e8 53 24 cd 0c 92 12 c4 00 25 c0 66 2e 98 18 db 85 e3 3d 87 07 ad 73 1a bd 9d db 2f da 5e dc 47 8d a8 91 a3 10 f0 96 e8 65 f2 fa 13 df ad 31 9e 7d 76 93 a7 99 90 1b 04 f2 87 38 07 b1 ef 53 78 73 4f 8f 54 d5 6d 6d 64 97 64 65 5e 59 4e 01 1e 5a 0c 91 cf 15 bc ba 14 d2 b5 e5 c5 db 98 c4 78 02 08 c7 9b bd ca e4 2e e3 dc d6 c6 81 a0 43 61 34 57 a0 2a dc 4d 1b e1 25 6e 90 9e 5d 9d 4f 43 8f bb 53 ca 06 d9 b6 b6 81 2d b4 d8 c3 46 b0 9f 3a 1f b3 fc cb e5 8e 3f 79 1f df c1 f6 26 8f 9a 4b d5 58 ce f8 44 61 32 e5 27 83 a0 fb a1 17 cc 0c 3b 82 6a 79 5a 1f 3a f0 cc 76 89 42 42 ad 1c 9b 55 43 80 c1 9b ba e7 d4 1c 1e 3b d3 2d 92 66 9a 52 cc c5 98 98 d9 ca ad bd d1 c7 cc 03 32 1f 2d 87 a1 14 c0 6b b2 4c 5e 18 e7 8c af 9b 82 d6 67 cb 92 37 1f 2e Data Ascii: 'A?O5S$%f.=s/^Ge1}v8SxsOTmmdde^YNZx.Ca4W*M%n]OCS-F:?y&KXDa2';jyZ:vBBUC;-fR2-kL^g7.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://thereferenz.net/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Windows Analysis Report
https://thereferenz.net/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	692	OUT	GET /th?q=Das%20Bett%20mit%20Fu%C3%9Fteil:%20Ein%20unverzichtbares%20M%C3%B6belst%C3%BCck%20f%C3%BCr%20erholsamen%20Schlaf HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 37408 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C89D829186D74C928883DF308DEFA558 Ref B: EWR311000101019 Ref C: 2024-09-29T13:52:54Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:54 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 00 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 da 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:54 UTC	16384	IN	Data Raw: c7 96 bf dc 8c 74 02 ab 69 0d 3d ec cb 62 d9 db 34 8b 09 39 25 80 5f 9f 91 e9 c6 2b 5a ea 2f 28 95 c6 00 e0 63 d0 71 45 ac 09 dc ce 32 79 4c ae 4f cb ca b8 ed 8e cd f8 55 b8 c7 9a 40 1d 39 ce 3a f1 e9 54 a5 50 c8 47 7e 48 3e 95 16 95 74 de 73 db e7 1b d8 41 1b 37 dd 49 24 f9 53 9f e5 55 cb 74 2b 97 66 60 d2 f9 48 46 d8 cf ce 57 90 d2 63 e6 e7 d1 47 14 f5 c0 a9 25 b6 4b 67 78 87 3b 72 ac 4f 19 39 e4 54 25 b0 78 a9 e8 32 43 c8 34 a9 91 1c fb 73 d0 6e c7 7c 1a 45 21 94 37 b6 69 a3 fd 5c ff 00 41 f8 f3 42 06 58 d2 04 66 e1 8b 31 12 6c fd da e0 61 b3 f7 b2 7d b8 ae a1 3e e8 f4 c7 b5 72 9a 41 41 72 db 83 16 28 7c b2 0e 00 3d f7 0f e5 5d 4c 47 e5 e9 5b c4 c6 42 ed 01 8b 7a 8e 47 6c fa d3 f3 fe 73 51 33 11 c6 06 29 9f f0 21 54 49 d3 18 23 c9 f9 4f e2 49 a4 f2 53 Data Ascii: ti=b49%_+Z/(cqE2yLOU@9:TPG~H>tsA7I$SUt+f`HFWcG%Kgx;rO9T%x2C4sn\|E!7i\ABXf1la}>rAAr(\|=]LG[BzGlsQ3)!TI#OIS
2024-09-29 13:52:54 UTC	5496	IN	Data Raw: a2 75 f9 4b 1f 94 4b 8e 84 0e 99 f5 1e b5 1d cc 0a 55 88 3f 97 7a 74 de 1e b9 8c b1 54 e9 c8 f2 fe 61 9f 5c 55 7f 2a f2 13 b5 d5 c8 1d 8e 7f 91 a9 70 ec 52 9f 73 36 44 2a 72 01 ca 90 7f 2a e8 f4 6b 91 2e 9f f6 76 ff 00 59 62 c6 3f 76 85 c9 68 db e9 8e 3f 0a c8 94 a1 f9 99 0e 7b 8e 9f 95 47 6d 73 f6 3b 84 9e 2c 95 c3 47 34 4d c6 f8 df ef 26 ee 99 1d 45 4d 9d 8a ba b9 bf 20 05 8b 71 ce 29 9b 78 20 8f a5 42 2e a0 93 22 37 0c ad ca 9e 01 c7 60 41 e4 11 de 9e 25 42 17 27 9f bb ed 52 59 91 7f 09 56 3c 70 6a a0 2d 13 44 e8 70 5d 1a 36 c0 e4 64 63 8c 56 fd cc 29 32 ec e3 70 19 1e f9 ac 49 62 74 32 c4 7b 7c e3 f0 a6 84 ca d2 46 49 5c 0e 18 85 c7 00 12 4f 18 a7 e9 2a c9 7c 51 ba 8f 35 48 ce 79 c1 07 26 92 ea 56 6f 2b 68 da 55 42 fb e4 0e a7 de 9b a5 87 fb 5a b0 eb Data Ascii: uKKU?ztTa\UpRs6Drk.vYb?vh?{Gms;,G4M&EM q)x B."7`A%B'RYV<pj-Dp]6dcV)2pIbt2{\|FI\O\|Q5Hy&Vo+hUBZ

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	682	OUT	GET /th?q=Das%20ultimative%20Etagenbett%20f%C3%BCr%20Erwachsene:%20Stabil%20und%20ger%C3%A4umig%20bis%20150%20kg HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 37592 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8A39E8D13D0D4FF9BF2A8E505DD2BF93 Ref B: EWR311000101021 Ref C: 2024-09-29T13:52:54Z Date: Sun, 29 Sep 2024 13:52:53 GMT Connection: close
2024-09-29 13:52:54 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 00 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 d4 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:54 UTC	16384	IN	Data Raw: 22 55 a9 2a 35 a7 8e 95 25 01 a6 37 43 4f 35 13 1e 0d 26 07 a3 cb d6 0f fa e0 94 cf 4a 7c bf f2 ed ff 00 5e e9 fc 85 32 9a d8 47 07 ac 7f c8 4f 52 ff 00 ae e7 f9 0a cf ab fa c9 ff 00 89 a6 a7 ff 00 5d 8f fe 82 b5 9c 4d 22 85 1d 69 4d 34 52 e7 8a 00 4a d3 f0 f1 ff 00 89 d6 9b cf f1 cb ff 00 a2 9e b2 cd 69 f8 7b fe 43 5a 67 fd 74 93 ff 00 45 3d 00 75 da 8e 37 cf f5 1f fa 08 ae 17 58 ed fe f8 fe 75 dc ea 3f 7a 6f aa ff 00 e8 22 b8 5d 63 a0 ff 00 7c 7f 3a 52 12 3a 1d 4f 9f 0e 68 5f ef dc ff 00 31 50 bf fc 8b 37 3f f5 f7 17 f2 a9 b5 2f f9 17 34 4f f7 ee 7f 98 a8 1f fe 45 9b 9f fa fb 87 f9 55 88 e7 29 45 25 15 25 01 a4 a0 d2 50 01 48 69 69 28 01 0d 25 2d 25 00 25 26 29 d4 94 00 da 4a 71 a4 a0 06 d2 1a 5a 4a 00 41 5d 9f 85 7f e3 d9 bf df bc ff 00 d1 26 b8 ca ec Data Ascii: "U*5%7CO5&J\|^2GOR]M"iM4RJi{CZgtE=u7Xu?zo"]c\|:R:Oh_1P7?/4OEU)E%%PHii(%-%%&)JqZJA]&
2024-09-29 13:52:54 UTC	5680	IN	Data Raw: f1 92 e5 d9 c3 00 c5 8f 1f 79 77 67 3c 66 a6 2a b1 a0 08 23 45 c0 db c7 1e d9 51 59 8d 7c 12 f0 46 d0 c3 8d c6 56 03 6a cc b1 1f 91 64 6e 73 9e 99 e2 a6 92 59 a5 95 bc bd a4 46 c3 74 6c 70 d8 07 0d 8f 5f 7a 2e 22 ca c9 90 23 49 88 25 98 2b b6 d7 66 6f bd d0 76 ff 00 0a 48 17 1b d1 ae 16 59 f0 cd d7 80 18 f4 0a 0d 44 f7 70 5b 90 24 90 62 49 19 53 8d a8 ad b7 3b 73 fc fe b4 c8 a6 64 56 69 21 19 66 05 61 b7 40 1e 38 fa 6e 72 3a e6 98 16 9e 3f 32 39 55 24 31 c9 b5 a3 f3 57 1e 62 1e 0f 19 ff 00 1a 82 10 90 c3 99 64 9a 5d 91 81 24 b3 28 00 a2 93 c8 0b 9e b5 16 70 70 92 fd aa 54 77 92 30 64 54 45 65 3c ae 23 e4 e0 7d 69 e6 ee 12 c4 83 29 95 a3 cf 94 cc ca 00 07 1f 72 4c 73 40 10 4f 36 a3 9b 76 b4 7b 7f b3 b3 83 34 87 68 28 a8 7e 60 57 3d ba 1c 55 d8 6e 1f 61 67 Data Ascii: ywg<f*#EQY\|FVjdnsYFtlp_z."#I%+fovHYDp[$bIS;sdVi!fa@8nr:?29U$1Wbd]$(ppTw0dTEe<#}i)rLs@O6v{4h(~`W=Unag

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	745	OUT	GET /th?q=Der%20ultimative%20Stauraum-Booster%20f%C3%BCr%20deinen%20Anh%C3%A4nger:%20Entdecke%20die%20innovativen%20Stauk%C3%A4sten%20f%C3%BCr%20mehr%20Ordnung%20und%20Komfort HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:54 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 23636 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 87B58D6ACFCF43A283A57A953D2BCBD0 Ref B: EWR30EDGE1406 Ref C: 2024-09-29T13:52:54Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:54 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 97 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 3c 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,<"
2024-09-29 13:52:54 UTC	8106	IN	Data Raw: 9f ce b4 52 f6 6f b3 80 6d e0 b9 53 1f c9 15 c2 a9 de 3d 15 ea 19 b5 3b 32 96 a0 e9 16 b1 c9 21 55 50 5a 4f dd b0 2b 81 b4 fa 71 f9 56 45 1a ba c8 6f ec d9 de 35 26 4c 40 57 6a ee 6f bc 3a 0a 9b 47 5d ba 65 80 e7 26 32 c7 3e ac ec 4d 45 ac 92 ba 54 e7 cc 31 90 90 7e f0 6e 1b 4e e5 19 f9 79 a9 f4 bf f9 07 69 fc e4 f9 23 27 ae 79 3c d6 7f 64 ae a3 77 0d d3 f3 c8 96 40 7f 16 a7 66 aa 4b 20 49 5c 38 2a 64 92 46 8f 77 46 01 b0 7a 77 14 bb cd 16 19 c4 4e c1 e4 62 a7 23 0b d3 e9 8a 87 15 61 d6 22 ec 19 b6 86 50 32 07 f4 34 f8 ed ec c9 00 ce 70 48 c9 c6 31 ef cd 76 72 36 73 f3 22 9f e1 45 5c 6b 49 32 c6 11 e6 20 e7 20 00 40 f7 14 d6 b5 9d 08 05 57 9c f2 18 60 7d 4f 4a 39 24 ba 07 32 2a d2 f1 c7 35 2b 21 53 8c a9 3f ec 30 6f e5 4d fd df 39 24 b7 18 c7 41 f5 26 a6 Data Ascii: RomS=;2!UPZO+qVEo5&L@Wjo:G]e&2>MET1~nNyi#'y<dw@fK I\8dFwFzwNb#a"P24pH1vr6s"E\kI2 @W`}OJ9$25+!S?0oM9$A&

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	652	OUT	GET /th?q=Einzigartige%20deutsche%20W%C3%B6rter%20f%C3%BCr%20Marco%20Polo-Reisende HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 29026 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 3A67B8C99AC948448E3867E3D6E5A582 Ref B: EWR30EDGE0322 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:55 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 02 00 00 40 01 00 01 00 00 00 01 02 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 0a 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:55 UTC	13496	IN	Data Raw: 77 85 64 72 bf 75 0b 1c f5 cf e3 5d 5e 9d 14 32 5a c0 0e 38 50 73 c7 7f ad 5d 68 a2 11 b8 1c 92 08 fb ca b9 a0 0f 3c 4b 39 a4 91 95 47 4e bc 54 b3 e9 93 c2 8d 23 01 b4 10 38 e7 9a da b0 29 1d f4 f1 1c f2 4e 3a 37 23 e9 5b d2 da 45 3c 7b 48 23 b8 f9 7b d0 07 9f 22 4b e4 cb 1a 27 de 20 b4 80 b6 4c 7d e3 23 a6 09 00 fd 45 42 b1 c8 43 ba 86 22 3c 17 2b 9f 94 13 b4 13 8f ca bb 49 74 c8 e1 89 ba 84 50 49 27 80 70 73 c9 35 c7 c8 c1 25 b8 11 b9 11 b9 65 6c 64 06 5c 83 b4 8f 4c 8f d2 80 1f 1e 30 29 e4 0c a8 c7 3f 78 1e 84 1f 50 69 b1 98 b0 01 3c f1 f4 ab 0b e5 91 82 7f 2a 00 e8 b4 7f 19 ea 9a 61 8e df 50 32 5f 58 8c 28 2e c0 dd c0 3f d8 91 be f0 f6 63 f8 8a f4 2d 3f 54 d3 35 68 0d c5 85 c2 4c 83 fd 62 fd d9 62 27 f8 64 8d be 60 6b c7 04 3c 9c 1c 8c 1c 9e a7 f3 35 Data Ascii: wdru]^2Z8Ps]h<K9GNT#8)N:7#[E<{H#{"K' L}#EBC"<+ItPI'ps5%eld\L0)?xPi<*aP2_X(.?c-?T5hLbb'd`k<5

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:54 UTC	661	OUT	GET /th?q=Kostenlose%20Online-Taschenrechner:%20Einzigartige%20Tools%20f%C3%BCr%20Jedermann HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 41208 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C4FE153D6FE04383B026D560E8A8B640 Ref B: EWR30EDGE0311 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:55 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 13 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 02 78 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,x"
2024-09-29 13:52:55 UTC	16384	IN	Data Raw: 7d d4 d9 df 2b 63 ed 63 6c 3f 25 a8 77 fb d7 8b 52 17 93 3f 57 c2 e9 46 1e 88 e8 7c 31 61 fd a7 ac d9 44 cb 98 61 6f b5 4f e9 b2 22 08 07 ea 70 2b d6 05 f5 a3 df 4d a6 ee cd c4 76 c9 72 ea 71 8f 2d d8 a7 f9 fa d7 29 f0 ff 00 4f f2 34 fb 9d 4a 45 f9 ef 64 d9 11 23 9f 22 22 46 47 d4 e7 f2 ac 8b 59 bc 44 3c 58 75 67 d3 35 01 6d 3d cb 5b be 60 93 0b 68 df ba 5c f1 db 83 5e be 19 7d 5e 9c 74 f8 9e be 87 c6 e6 49 66 38 aa b1 e6 b2 a5 1d 35 de 5f d5 d7 c8 c4 d7 ec 0e 97 ab 5f da 81 88 b7 f9 d6 fe f0 cb f3 2e 3e 9c 8f c2 ac 78 5f 4b 4d 5f 55 8a 19 86 6d ad d0 dc dc 0f ef 2a 90 15 0f d4 f5 ae 9b e2 16 9c 5e d6 cf 54 8d 7e 6b 57 fb 3c e4 7f cf 29 0f ca 4f d0 ff 00 3a a1 f0 e0 a9 ba d6 bf be 20 b7 c7 fb bb 9b 3f d2 b9 7e aa a3 8a 50 7b 5e e7 ab fd a5 2a 99 43 c4 45 Data Ascii: }+ccl?%wR?WF\|1aDaoO"p+Mvrq-)O4JEd#""FGYD<Xug5m=[`h\^}^tIf85__.>x_KM_Um^T~kW<)O: ?~P{^CE
2024-09-29 13:52:55 UTC	9294	IN	Data Raw: 06 c9 fe 14 7d 97 c2 9f f4 09 b8 ff 00 c0 d9 3f c2 a2 a2 8f ae e2 3f 98 3d bd 4e e4 bf 65 f0 a7 fd 02 6e 3f f0 36 4f f0 a3 ec be 14 ff 00 a0 4d c7 fe 06 c9 fe 15 15 14 7d 77 11 fc c1 ed ea 77 25 fb 2f 85 3f e8 13 71 ff 00 81 b2 7f 85 1f 65 f0 a7 fd 02 6e 3f f0 36 4f f0 a8 a8 a3 eb b8 8f e6 0f 6f 53 b9 66 1d 2f c2 f7 92 0b 58 ec 6e 6d e5 98 32 45 37 da 5a 40 92 60 91 95 3c 62 bc ce ee da 34 d4 3c 9e 8a cf 86 db c0 c8 62 ad 8f ca bd 3f 4b ff 00 90 8d 87 fd 76 5f e4 6b cd ef bf e4 2d ff 00 6d 64 ff 00 d0 de bd ec a6 bd 4a aa 5c ee e7 7e 12 a4 a7 7e 66 77 90 e8 3e 1d b5 b6 b2 17 ef 7c d7 33 5b c7 70 cb 68 ca 91 44 92 0d ca b8 3e d4 ef ec af 07 7f 77 58 ff 00 bf c9 56 2f cf cd 63 ff 00 60 eb 0f fd 12 2a 9e 6b c9 ab 8d ae a6 d2 91 c9 3c 45 45 26 93 24 fe ca f0 Data Ascii: }??=Nen?6OM}ww%/?qen?6OoSf/Xnm2E7Z@`<b4<b?Kv_k-mdJ\~~fw>\|3[phD>wXV/c`*k<EE&$

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:55 UTC	665	OUT	GET /translate_a/element.js?cb=TranslateWidgetIsLoaded HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	744	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sun, 29 Sep 2024 13:52:55 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CHM; Domain=.google.com; Expires=Fri, 28-Mar-2025 13:52:55 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:52:55 UTC	646	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 77 2c 6e 62 2c 6f 62 2c 71 62 2c 72 62 2c 73 62 2c 75 62 2c 79 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f Data Ascii: dentifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,jb,kb,lb,w,nb,ob,qb,rb,sb,ub,yb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==vo
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 Data Ascii: return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if(a i
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 28 62 3d 28 64 3d 28 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 61 2b 22 5b 6e 6f 6e 63 65 5d 22 29 29 3f 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 65 Data Ascii: nts.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){var c,d;return(b=(d=(c=b.document).querySelector)==null?void 0:d.call(c,a+"[nonce]"))?b.nonce\|\|b.ge
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 6d 62 3d 6c 62 28 74 68 69 73 29 3b 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 6d 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b Data Ascii: bal&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.mb=lb(this);w=function(a,b){if(b)a:{var c=_.mb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6a 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 72 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: return{next:jb(a)};throw Error("d`"+String(a));};_.pb=function(a){if(!(a instanceof Array)){a=_.y(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};qb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};rb=typeof Object.assi
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b Data Ascii: roperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.prototype};_.Ea=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4a 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 Data Ascii: ;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.J(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=fu
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b Data Ascii: nction(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){
2024-09-29 13:52:55 UTC	1390	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a Data Ascii: ;return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$j

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:55 UTC	671	OUT	GET /th?q=Eigenbau%20eines%20freitragenden%20Schiebetors:%20Ein%20DIY-Projekt%20f%C3%BCr%20Heimwerker HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 20751 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 57DA6AB040A64F0CB3AA5390F9185C32 Ref B: EWR30EDGE1119 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:55 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 4a 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 0a 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@J@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:55 UTC	5221	IN	Data Raw: c3 e2 3f 8c 33 cf f6 6f 5f f9 f5 3f fc 5d 3b 07 2b 3d 90 e4 75 a7 2f 4e 9d fa d7 95 dd 78 eb c5 89 71 1a a0 b0 10 b4 48 fb 9a d8 9c 93 d4 03 be 8f f8 4f 7c 51 ce 4d 80 0a 32 c7 ec c7 80 3a ff 00 1d 35 11 35 63 d5 49 c5 36 bc 85 be 23 78 a8 b3 6d 1a 78 5c fc a0 db 12 71 ef f3 d5 ab 2f 1e 78 a2 5c bc c7 4f 0b 9d a8 16 d8 82 4f af df a2 cc 2c 7a ba 8c 0f 7a 52 6b c9 ee 3e 22 6b f1 33 2a 9b 16 23 b2 db e7 9f 73 ba a9 9f 88 fe 2e 62 70 34 e0 3b 0f b3 13 fa ef a5 60 b3 3d 88 b5 34 92 6b c8 57 e2 0f 8b cf 5f ec ec 7f d7 a9 ff 00 e2 ea 5f f8 58 1e 2a 1f f4 0f ff 00 c0 63 ff 00 c5 d1 61 f2 b3 d6 31 4b 5e 48 7e 21 78 af b7 f6 7f fe 03 1f fe 2e 90 fc 43 f1 50 ff 00 a0 7f fe 03 1f fe 2e 8b 07 2b 3d 72 96 bc 87 fe 16 1f 8a ff 00 ea 1f ff 00 80 a7 ff 00 8b a4 3f 11 3c Data Ascii: ?3o_?];+=u/NxqHO\|QM2:55cI6#xmx\q/x\OO,zzRk>"k3#s.bp4;`=4kW__Xca1K^H~!x.CP.+=r?<

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:55 UTC	705	OUT	GET /th?q=Der%20ultimative%20Zinndeckel%20f%C3%BCr%20deinen%20Bierkrug:%20Ein%20unverzichtbares%20Accessoire%20f%C3%BCr%20Bierliebhaber HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 12381 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 63DBC61A6597425FBC9242BC0B44587C Ref B: EWR30EDGE0911 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:55 GMT Connection: close
2024-09-29 13:52:55 UTC	12381	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 1a 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 3e 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,>"

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:55 UTC	681	OUT	GET /th?q=XXL-Paketbriefkasten%20freistehend:%20Die%20ultimative%20L%C3%B6sung%20f%C3%BCr%20gro%C3%9Fe%20Pakete HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 25113 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BCA9C29BE63345B5B4B559309EC20B20 Ref B: EWR30EDGE1120 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:54 GMT Connection: close
2024-09-29 13:52:55 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 00 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 da 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"
2024-09-29 13:52:55 UTC	9583	IN	Data Raw: ae ec 29 65 01 99 51 d9 57 a2 96 19 23 f3 cd 3d 4d 24 0c 7d 28 a6 d2 d5 12 3c 1a 5a 68 a7 50 24 ee 3b 34 b4 c1 4e f5 a1 87 53 97 d6 97 75 d2 9f 48 53 f9 b1 ac e0 9b 70 7b 91 5a 7a b9 ff 00 49 23 d2 14 fe b5 9c df c3 58 9d 0b 60 15 2c 63 9a 8c 55 84 18 c7 bd 5a 44 b2 e5 af 0d f8 1a a9 ab 9f 9a d7 e9 21 fd 45 5c b6 fb dd 3b 1a a5 ab fd fb 6f f7 1c fe a2 9c 89 8e e5 eb 13 fe 8d 1f d6 a4 80 03 1c 8a 7a 34 93 03 cf 50 58 8a 8a cb fe 3d a3 a7 c0 70 87 fd f9 7f f4 33 56 b7 26 45 91 8c 15 e8 36 95 c7 b6 30 29 e0 e7 19 eb 81 9a 85 58 10 08 39 04 03 9f 6a 70 35 46 64 b9 a2 98 0d 2e 69 80 f0 69 d9 a6 0a 50 6a 58 15 b5 53 fe 80 7f eb b4 5f cc d6 12 56 de aa 71 64 a3 d6 68 ff 00 a9 ac 65 ac fa 9b 2d 8b 76 c7 f7 d1 7f bc 28 d6 bf e5 d3 eb 2f fe cb 49 6b fe be 3f f7 a8 Data Ascii: )eQW#=M$}(<ZhP$;4NSuHSp{ZzI#X`,cUZD!E\;oz4PX=p3V&E60)X9jp5Fd.iiPjXS_Vqdhe-v(/Ik?

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:52:55 UTC	673	OUT	GET /th?q=Wohnmobil-Carport%20mit%20luftiger%20H%C3%B6he:%20350%20cm%20f%C3%BCr%20sorgenfreies%20Parken HTTP/1.1 Host: tse1.mm.bing.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thereferenz.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:52:55 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=5184000 Content-Length: 47556 Content-Type: image/jpeg X-Cache: TCP_MISS Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 5E8911C87CC3430EAF95A46B36D6C829 Ref B: EWR30EDGE0911 Ref C: 2024-09-29T13:52:55Z Date: Sun, 29 Sep 2024 13:52:55 GMT Connection: close
2024-09-29 13:52:55 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 00 00 00 00 00 ff e1 00 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 40 00 00 03 00 00 00 01 00 5e 00 00 40 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff db 00 43 00 0b 09 09 07 09 09 07 09 09 09 09 0b 09 09 09 09 09 09 0b 09 0b 0b 0c 0b 0b 0b 0c 0d 10 0c 11 0e 0d 0e 0c 12 19 12 25 1a 1d 25 1d 19 1f 1c 29 29 16 25 37 35 36 1a 2a 32 3e 2d 29 30 19 3b 21 13 ff db 00 43 01 07 08 08 0b 09 0b 15 0b 0b 15 2c 1d 19 1d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c ff c0 00 11 08 01 73 01 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 Data Ascii: JFIFBExifMMi@^@C%%))%7562>-)0;!C,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,s"
2024-09-29 13:52:55 UTC	16384	IN	Data Raw: d3 af e3 5a 5e 09 7d 1e 43 aa 79 f6 f7 07 50 5b 46 50 3c a7 10 fd 83 01 ca f9 b0 13 cb 1f f6 33 c0 c7 27 89 b3 7e f3 13 76 d0 af 7d 77 e2 4d 2c dd c1 71 61 1a 2d d4 51 59 db dc 40 0a c5 02 c0 f9 3b c1 2e a0 90 48 75 c8 eb db 76 2a 87 9f ad 7f 76 c7 ff 00 00 22 ff 00 e3 75 af ab 4f a6 ea 31 49 67 fd a2 96 e1 9d 26 8c 4b 0c fe 5a a8 96 40 c2 31 24 8c 70 38 3c e7 1d d7 ba e1 ff 00 64 e9 3f f3 da 7f fb ff 00 0f ff 00 17 5a 24 88 d4 f6 c6 3c 9a 6f 07 ff 00 af 43 1e 4d 26 18 fd d1 9f a0 35 26 e5 19 4f ef 64 c7 4c 8f e5 48 0f d6 96 60 fe 6c 84 a9 03 3d 58 60 74 c7 53 4b 6c 89 75 29 82 29 ed 8c 81 4b 15 13 46 58 28 e3 25 54 96 fd 2b 0b 36 f4 34 bd 90 e1 cd 3c 1e 2a 53 6a 88 cd 1b 5c c5 e6 2e 32 00 38 19 19 e4 d4 6f 19 8c ae 59 48 6e 85 4e 41 c5 35 a0 b7 14 13 ed Data Ascii: Z^}CyP[FP<3'~v}wM,qa-QY@;.Huvv"uO1Ig&KZ@1$p8<d?Z$<oCM&5&OdLH`l=X`tSKlu))KFX(%T+64<Sj\.28oYHnNA5
2024-09-29 13:52:55 UTC	15642	IN	Data Raw: 67 ca 64 f4 3d aa dd 9d dc 77 eb 70 af 6f 03 35 95 e1 b2 7d f1 8d db e2 6f 2c ed 6f 43 56 ed ed b4 d8 f5 0f b4 9b 74 89 ee 00 17 52 21 6d ce 13 ee e4 f5 e2 b5 57 ee 67 2b 2e 84 56 96 56 ba 7c 17 11 d9 43 15 ba ab 48 cd e5 82 cd 2b 85 fb f2 3c 84 b9 3f 53 57 84 5b 9e 00 cd 23 06 2e 18 16 38 38 5c f4 14 f9 4d a6 db e1 1e 0a 6f 9b 61 2c d9 c6 dc 77 ab 5e 74 49 25 a8 41 1e 01 94 fa ff 00 06 39 a5 38 dd 68 10 96 b7 23 8e d2 30 b7 cf e4 a1 f2 f7 1f 99 41 18 11 2b 63 9a ba 62 44 10 ee 65 03 04 e1 46 48 f9 7d aa a9 9f 31 6a 79 23 0c d2 f4 cf fc f0 51 52 99 53 ce b6 e0 9c 45 36 7f f2 1d 73 3a 4b b9 d0 a6 df 42 0b b4 2e b2 a4 7e 6a 92 92 2e f4 c6 e1 b9 30 0a 82 08 cf e1 58 f0 f8 76 25 16 a1 61 94 fd 9e 49 26 1e 68 b7 8f 96 2a 72 44 51 af f7 6b a1 f3 f7 ac bb 57 03 Data Ascii: gd=wpo5}o,oCVtR!mWg+.VV\|CH+<?SW[#.88\Moa,w^tI%A98h#0A+cbDeFH}1jy#QRSE6s:KB.~j.0Xv%aI&h*rDQkW