Edit tour

Windows Analysis Report
https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/

Overview

General Information

Sample URL:	https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/
Analysis ID:	1525246
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 2876sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-wow64: ?0sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-platform: "Windows"X-Youtube-Bootstrap-Logged-In: falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonsec-ch-ua-full-version: "117.0.5938.132"X-Youtube-Client-Name: 1X-Youtube-Client-Version: 2.20241003.01.00X-Goog-Visitor-Id: CgtiVjRWQWFZd0xuOCiCnvy3BjIKCgJVUxIEGgAgXg%3D%3DAccept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx&feature=sharedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=GcXb5tqyOd8; VISITOR_INFO1_LIVE=bV4VAaYwLn8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; PREF=tz=America.New_York

Source: https://novanutrix.com/wp-login.php?action=lostpassword	LLM: Score: 8 Reasons: The brand 'WordPress' is a well-known content management system with a legitimate domain of 'wordpress.com'., The URL 'novanutrix.com' does not match the legitimate domain associated with WordPress., The domain 'novanutrix.com' does not have any known association with WordPress., The presence of input fields for 'Nombre de usuario o correo electrnico' suggests a login page, which is suspicious if not hosted on the legitimate WordPress domain. DOM: 4.2.pages.csv
Source: https://novanutrix.com/wp-login.php	LLM: Score: 8 Reasons: The brand 'WordPress' is a well-known content management system with a legitimate domain of 'wordpress.com'., The URL 'novanutrix.com' does not match the legitimate domain associated with WordPress., The domain 'novanutrix.com' does not have any known association with WordPress, which raises suspicion., The presence of input fields for 'Nombre de usuario o correo electrnico' suggests a login page, which is a common target for phishing., The URL does not contain any direct reference to WordPress, which is unusual for a legitimate WordPress-related site. DOM: 6.4.pages.csv

Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: Number of links: 1
Source: https://novanutrix.com/	HTTP Parser: Number of links: 1

Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://novanutrix.com/	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: Title: Site is undergoing maintenance does not match URL
Source: https://novanutrix.com/	HTTP Parser: Title: Site is undergoing maintenance does not match URL

Source: https://novanutrix.com/wp-login.php?action=lostpassword	HTTP Parser: Form action: https://novanutrix.com/wp-login.php?action=lostpassword
Source: https://novanutrix.com/wp-login.php	HTTP Parser: Form action: https://novanutrix.com/wp-login.php

Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: No <meta name="author".. found
Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: No <meta name="author".. found
Source: https://novanutrix.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="author".. found
Source: https://novanutrix.com/	HTTP Parser: No <meta name="author".. found
Source: https://novanutrix.com/	HTTP Parser: No <meta name="author".. found
Source: https://novanutrix.com/wp-login.php	HTTP Parser: No <meta name="author".. found

Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: No <meta name="copyright".. found
Source: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	HTTP Parser: No <meta name="copyright".. found
Source: https://novanutrix.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="copyright".. found
Source: https://novanutrix.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://novanutrix.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://novanutrix.com/wp-login.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49862 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: novanutrix.com
Source: global traffic	DNS traffic detected: DNS query: fonts.bunny.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: es.wordpress.org
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: wordpress.org
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-4g5ednz7.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net

Source: chromecache_604.2.dr	String found in binary or memory: "https://www.facebook.com/WordPress/", equals www.facebook.com (Facebook)
Source: chromecache_604.2.dr	String found in binary or memory: <li class="wp-social-link wp-social-link-facebook wp-block-social-link"><a href="https://www.facebook.com/WordPress/" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M12 2C6.5 2 2 6.5 2 12c0 5 3.7 9.1 8.4 9.9v-7H7.9V12h2.5V9.8c0-2.5 1.5-3.9 3.8-3.9 1.1 0 2.2.2 2.2.2v2.5h-1.3c-1.2 0-1.6.8-1.6 1.6V12h2.8l-.4 2.9h-2.3v7C18.3 21.1 22 17 22 12c0-5.5-4.5-10-10-10z"></path></svg><span class="wp-block-social-link-label screen-reader-text">Visita nuestra p equals www.facebook.com (Facebook)
Source: chromecache_604.2.dr	String found in binary or memory: <li class="wp-social-link wp-social-link-linkedin wp-block-social-link"><a href="https://www.linkedin.com/company/wordpress" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M19.7,3H4.3C3.582,3,3,3.582,3,4.3v15.4C3,20.418,3.582,21,4.3,21h15.4c0.718,0,1.3-0.582,1.3-1.3V4.3 C21,3.582,20.418,3,19.7,3z M8.339,18.338H5.667v-8.59h2.672V18.338z M7.004,8.574c-0.857,0-1.549-0.694-1.549-1.548 c0-0.855,0.691-1.548,1.549-1.548c0.854,0,1.547,0.694,1.547,1.548C8.551,7.881,7.858,8.574,7.004,8.574z M18.339,18.338h-2.669 v-4.177c0-0.996-0.017-2.278-1.387-2.278c-1.389,0-1.601,1.086-1.601,2.206v4.249h-2.667v-8.59h2.559v1.174h0.037 c0.356-0.675,1.227-1.387,2.526-1.387c2.703,0,3.203,1.779,3.203,4.092V18.338z"></path></svg><span class="wp-block-social-link-label screen-reader-text">Visita nuestra cuenta de LinkedIn</span></a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_604.2.dr	String found in binary or memory: <li class="wp-social-link wp-social-link-youtube wp-block-social-link"><a href="https://www.youtube.com/wordpress" class="wp-block-social-link-anchor"><svg width="24" height="24" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M21.8,8.001c0,0-0.195-1.378-0.795-1.985c-0.76-0.797-1.613-0.801-2.004-0.847c-2.799-0.202-6.997-0.202-6.997-0.202 h-0.009c0,0-4.198,0-6.997,0.202C4.608,5.216,3.756,5.22,2.995,6.016C2.395,6.623,2.2,8.001,2.2,8.001S2,9.62,2,11.238v1.517 c0,1.618,0.2,3.237,0.2,3.237s0.195,1.378,0.795,1.985c0.761,0.797,1.76,0.771,2.205,0.855c1.6,0.153,6.8,0.201,6.8,0.201 s4.203-0.006,7.001-0.209c0.391-0.047,1.243-0.051,2.004-0.847c0.6-0.607,0.795-1.985,0.795-1.985s0.2-1.618,0.2-3.237v-1.517 C22,9.62,21.8,8.001,21.8,8.001z M9.935,14.594l-0.001-5.62l5.404,2.82L9.935,14.594z"></path></svg><span class="wp-block-social-link-label screen-reader-text">Visita nuestro canal de YouTube</span></a></li> equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "&sig="+Lc+"&ad_cpn=[AD_CPN]&id="+Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ca},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&avm="+ca+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "&uga="+yb+"&vm="+uf},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+Ab+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Wd+"&el="+Ug+"&len="+rc+"&of="+cc+"&uga="+yb+"&vm="+uf},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+Ab+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(MI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,MI),trackingParams:Va+"="}},popupType:"DIALOG"}},trackingParams:Va+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "="},trackingParams:Va+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Mo},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:na}]},trackingParams:Va+"="}},adVideoId:Fd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Mo},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:ye}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ti}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Fc, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,gga),trackingParams:Va+"="}},popupType:"DIALOG"}},trackingParams:Va+"="}},hoverText:{runs:[{text:Hn}]},trackingParams:Va+"="}},adVideoId:Fd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Ti},associatedCompositePlayerBytesLayoutId:ye}}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+fg,p0),trackingParams:Va+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Va+"="}},hoverText:{runs:[{text:fg}]},trackingParams:Va+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Si+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Va+"="},headline:{text:fg,isTemplated:!1,trackingParams:Va+"="},description:{text:Bs, equals www.youtube.com (Youtube)
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: (g.sk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.sk(c,"www.youtube.com"),d=c.toString()):(c=nwa(d),xE(c)&&(d=c));c=new g.kM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|wE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=xs(d,h,MJa):h&&(d="embedded");this.Ja=d;Vqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(NJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(NJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";ord="+Ab+";dc_rui="+ca+";dc_exteid="+Zb+";dc_av="+ca+";dc_sk="+ca+";dc_ctype="+yb+";dc_pubid="+ca+";dc_btype=3?gclid="+ib+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Ab+";dc_trk_cid="+Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ca+";ord="+Ab+";dc_rui="+ca+";dc_exteid="+be+";dc_av="+ca+";dc_sk="+ca+";dc_ctype="+yb+";dc_pubid="+ca+";dc_btype=3?gclid="+ib+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ca+"&ns="+ca+"&event="+ca+"&device="+ca+"&content_v="+y+"&el="+Ug+"&ei="+V+"&devicever="+c+"&bti="+Gb+"&format="+Rd+"&break_type="+ca+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ca+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Xb+"&slot_pos="+ca+"&slot_len="+ca+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+sc+"&ad_len="+Uc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Dr(Ysb);Dr(Zsb);function atb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var N=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=Tl().resolve(Sl(rB)))==null?void 0:V());V=z("enable_cairo_refresh_signature_moments_web");switch(N){case"LIKE":N="animated_like_icon_";N=V?N+(O?"dark_v4":"light_v4"):N+(O?"v2_dark":"v2_light");N={lottiePlayerProps:{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Fd+"&aqi="+V+"&ad_rmp="+ca+"&sli="+ca}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: IE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_384.2.dr	String found in binary or memory: Jo.prototype.Ia=function(){return this.C};var pna=(new Date).getTime();var ula="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),vla=/\bocr\b/;var xla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var abb=0,bbb=0,cbb=0;var So;g.Lo=null;g.No=!1;g.To=1;So=Symbol("SIGNAL");g.Uo={version:0,r_:0,Qm:!1,fg:void 0,Ry:void 0,Dn:void 0,KL:0,ij:void 0,Ru:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: N+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":N={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}N=void 0}return N}, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},w5b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_384.2.dr	String found in binary or memory: RIa=function(a,b){if(!a.j["0"]){var c=new iG("0","fakesb",{video:new eG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CN(new g.kM("http://www.youtube.com/videoplayback"),c,"fake"):new TN(new g.kM("http://www.youtube.com/videoplayback"),c,new nN(0,0),new nN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Ti+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ti+"&dc_pubid="+ca+"&dc_exteid="+Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Fd+"&cid="+da+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Wd+"&el="+Ug+"&len="+rc+"&of="+cc+"&uga="+yb+"&vm="+uf},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+Bb+"&oid="+cc+"&plid="+N+"&pltype="+Bs+"&ptchn="+cc+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+Ab+"&docid="+y+"&ei="+V+"&event="+Gn+"&feature="+m+"&fexp="+lf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Wd},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: Zb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+da+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ca+";dc_exteid="+Zb+";met="+ca+";ecn"+ca+"="+ca+";etm1="+ca+";eid1="+yb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var Xlb=ka(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),Ylb=Zg(Xlb),IA;function Zlb(){return IA?IA:window.lottie?IA=Promise.resolve(window.lottie):IA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_384.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Vi(a,{hl:d})),this.Dd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.BY(a.errorMessage)):this.Dd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Vi(c, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.firstChild);return Lpc=a},{mode:Fz("kevlar_poly_si_batch_j044")?1:2});var Npc;var Opc=Kw(yv("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var Ppc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.firstChild);return Nic=a},{mode:1});var Qic;var Ric=function(){var a=J.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.firstChild);return QBc=a},{mode:1});var SBc;var Y_=function(){var a=J.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.firstChild);return Qic=a},{mode:1});var Sic;var Tic=function(){var a=J.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return Uic=a},{mode:1});var Vic;var JV=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15323_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$15323_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$15323_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return Vic=a},{mode:Fz("kevlar_poly_si_batch_j056")?1:2});var Wic;var Xic=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15326_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$15326_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$15326_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return r5b=a},{mode:2});var v5b;var w5b={autoplay:!1,loop:!1},x5b={simpleText:""},y5b=function(){var a=J.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=z("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},w5b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,RF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Wt)(),uT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_497.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/html; charset=UTF-8link: <https://novanutrix.com/wp-json/>; rel="https://api.w.org/"expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0x-litespeed-cache: hitcontent-length: 6184date: Thu, 03 Oct 2024 21:38:13 GMTalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:24 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:24 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:25 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:25 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:26 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Thu, 03 Oct 2024 21:39:26 GMTServer: gvs 1.0

Source: chromecache_424.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_424.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_497.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_497.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_497.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_497.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_553.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_553.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_553.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_553.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_498.2.dr, chromecache_522.2.dr, chromecache_384.2.dr, chromecache_497.2.dr, chromecache_553.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_497.2.dr, chromecache_440.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_497.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_600.2.dr	String found in binary or memory: http://www.burocratik.com
Source: chromecache_498.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_497.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_497.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_384.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_424.2.dr	String found in binary or memory: http://zurb.com/playground/foundation-icon-fonts-3
Source: chromecache_497.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_497.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_497.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_497.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_497.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_497.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_497.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_522.2.dr, chromecache_384.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_604.2.dr	String found in binary or memory: https://af.wordpress.org/
Source: chromecache_547.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_604.2.dr	String found in binary or memory: https://am.wordpress.org/
Source: chromecache_522.2.dr, chromecache_384.2.dr, chromecache_497.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_497.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_604.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_497.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_497.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_604.2.dr	String found in binary or memory: https://ar.wordpress.org/

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=2016,i,6677689535463657053,12754423354720722395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://support.google.com	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
stats.wp.com	192.0.76.3	true	false	unknown
wordpress.org	198.143.164.252	true	false	unknown
i.ytimg.com	142.250.186.182	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
static.doubleclick.net	142.250.186.102	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
rr2.sn-4g5ednz7.googlevideo.com	74.125.173.231	true	false	unknown
youtube.com	216.58.212.142	true	false	unknown
youtube-ui.l.google.com	142.250.185.206	true	false	unknown
googleads.g.doubleclick.net	142.250.184.226	true	false	unknown
play.google.com	142.250.186.174	true	false	unknown
pixel.wp.com	192.0.76.3	true	false	unknown
s-part-0015.t-0009.t-msedge.net	13.107.246.43	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
bunnyfonts.b-cdn.net	169.150.236.104	true	false	unknown
novanutrix.com	66.23.236.90	true	true	unknown
s.w.org	192.0.77.48	true	false	unknown
fonts.bunny.net	unknown	unknown	false	unknown
es.wordpress.org	unknown	unknown	false	unknown
rr2---sn-4g5ednz7.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2	false	unknown
https://novanutrix.com/wp-login.php?action=lostpassword	true	unknown
https://i.ytimg.com/vi/vEcz7DrjYvY/hqdefault.jpg?sqp=-oaymwEoCKgBEF5IWvKriqkDGwgBFQAAiEIYAdgBAeIBDAgcEAIYBiABOAFAAQ==&rs=AOn4CLCWnURlCLaYjRAwus4UDABA6PnqwA	false	unknown
https://wordpress.org/files/2024/09/wcus-topography.png	false	unknown
https://novanutrix.com/	false	unknown
https://es.wordpress.org/wp-content/plugins/gutenberg/build-module/block-library/navigation/view.min.js?ver=19.3.0-20240308	false	unknown
https://i.ytimg.com/vi/Os6TC6-drsM/hqdefault.jpg?sqp=-oaymwEoCKgBEF5IWvKriqkDGwgBFQAAiEIYAdgBAeIBDAgcEAIYBiABOAFAAQ==&rs=AOn4CLBEmBaPyz0JkhId6X1vjbLhOBSi8A	false	unknown
https://novanutrix.com/wp-content/plugins/maintenance/load/css/style.css?ver=1669317391	false	unknown
https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	false	unknown
https://novanutrix.com/wp-admin/js/user-profile.min.js?ver=6.6.2	false	unknown
https://www.youtube.com/s/player/96d06116/www-player.css	false	unknown
https://es.wordpress.org/wp-content/mu-plugins/pub-sync/global-fonts/style.css?ver=1722966445	false	unknown
https://novanutrix.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1669317391	false	unknown
https://wordpress.org/files/2024/04/feature-build.png	false	unknown
https://www.youtube.com/app_shell	false	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	unknown
https://novanutrix.com/wp-includes/css/dashicons.min.css?ver=6.6.2	false	unknown
https://novanutrix.com/wp-admin/js/password-strength-meter.min.js?ver=6.6.2	false	unknown
https://es.wordpress.org/wp-content/mu-plugins/pub-sync/blocks/time/build/view.js?ver=362338b9e6592dcf125b	false	unknown
https://www.youtube.com/s/desktop/72b8c307/cssbin/www-main-desktop-home-page-skeleton.css	false	unknown
https://es.wordpress.org/wp-content/mu-plugins/pub-sync/blocks/language-suggest/build/front.js?ver=f70e0af5cebcea62a448	false	unknown
https://wordpress.org/files/2023/10/tech-crunch.png	false	unknown
https://www.youtube.com/s/desktop/72b8c307/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	unknown
https://s.w.org/favicon.ico?2	false	unknown
https://i.ytimg.com/vi/Z5Q_HeZbhF8/hqdefault.jpg?sqp=-oaymwEoCKgBEF5IWvKriqkDGwgBFQAAiEIYAdgBAeIBDAgcEAIYBiABOAFAAQ==&rs=AOn4CLC7Czsmqie3dmqE0Fq8NdshTsIn6w	false	unknown
https://wordpress.org/files/2024/07/6-6-whats-new-i1.png	false	unknown
https://www.youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx&feature=shared	false	unknown
https://www.youtube.com/generate_204?xBA-ow	false	unknown
https://novanutrix.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://es.wordpress.org/comments/feed/	chromecache_604.2.dr	false		unknown
https://support.google.com	chromecache_497.2.dr	false	URL Reputation: safe	unknown
https://wordpress.org/showcase/	chromecache_604.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://sa.wordpress.org/	chromecache_604.2.dr	false		unknown
https://kk.wordpress.org/	chromecache_604.2.dr	false		unknown
https://s.youtube.com	chromecache_497.2.dr	false		unknown
https://i.ytimg.com/an/	chromecache_497.2.dr	false		unknown
https://ja.wordpress.org/	chromecache_604.2.dr	false		unknown
https://kin.wordpress.org/	chromecache_604.2.dr	false		unknown
https://wordpress.com/?ref=wporg-footer	chromecache_604.2.dr	false		unknown
https://snd.wordpress.org/	chromecache_604.2.dr	false		unknown
https://ga.wordpress.org/	chromecache_604.2.dr	false		unknown
https://da.wordpress.org/	chromecache_604.2.dr	false		unknown
https://dzo.wordpress.org/	chromecache_604.2.dr	false		unknown
https://novanutrix.com	chromecache_651.2.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_522.2.dr, chromecache_384.2.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_497.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_497.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_497.2.dr	false		unknown
https://ur.wordpress.org/	chromecache_604.2.dr	false		unknown
https://fr-ca.wordpress.org/	chromecache_604.2.dr	false		unknown
https://ltz.wordpress.org/	chromecache_604.2.dr	false		unknown
https://css-tricks.com/the-priority-navigation-pattern/	chromecache_410.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_497.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/watch?v=	chromecache_497.2.dr	false		unknown
https://es.wordpress.org/wp-content/plugins/gutenberg/build-module/interactivity/index.min.js?ver=19	chromecache_604.2.dr	false		unknown
https://bel.wordpress.org/	chromecache_604.2.dr	false		unknown
https://en-au.wordpress.org/	chromecache_604.2.dr	false		unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_497.2.dr	false		unknown
https://wordpress.org/news/2024/09/pdx-wcus-2024-a-recap/	chromecache_604.2.dr	false		unknown
https://it.wordpress.org/	chromecache_604.2.dr	false		unknown
https://lt.wordpress.org/	chromecache_604.2.dr	false		unknown
https://ssw.wordpress.org/	chromecache_604.2.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_497.2.dr	false		unknown
https://github.com/WordPress/wporg-parent-2021	chromecache_586.2.dr	false		unknown
https://mn.wordpress.org/	chromecache_604.2.dr	false		unknown
https://play.google.com	chromecache_497.2.dr	false		unknown
https://events.wordpress.org/	chromecache_604.2.dr	false		unknown
https://es-uy.wordpress.org/	chromecache_604.2.dr	false		unknown
https://angular.dev/license	chromecache_522.2.dr, chromecache_384.2.dr, chromecache_497.2.dr	false		unknown
https://wordpress.org/files/2024/04/wordpress-homepage-ogimage-202404.png	chromecache_604.2.dr	false		unknown
https://youtu.be/	chromecache_522.2.dr, chromecache_384.2.dr	false	URL Reputation: safe	unknown
https://es-ar.wordpress.org/	chromecache_604.2.dr	false		unknown
https://make.wordpress.org/	chromecache_604.2.dr	false		unknown
http://mths.be/fromcodepoint	chromecache_497.2.dr	false		unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_497.2.dr	false		unknown
https://apis.google.com	chromecache_497.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://es-pr.wordpress.org/	chromecache_604.2.dr	false		unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_497.2.dr	false		unknown
https://ta-lk.wordpress.org/	chromecache_604.2.dr	false		unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_497.2.dr	false		unknown
https://en-ca.wordpress.org/	chromecache_604.2.dr	false		unknown
https://es.wordpress.org/gutenberg/	chromecache_604.2.dr	false		unknown
https://es.wordpress.org/patterns/	chromecache_604.2.dr	false		unknown
https://www.youtube.com/pagead/adview?ai=C	chromecache_497.2.dr	false		unknown
http://hammerjs.github.io/	chromecache_497.2.dr	false	URL Reputation: safe	unknown
https://sq.wordpress.org/	chromecache_604.2.dr	false		unknown
https://learn.wordpress.org/	chromecache_604.2.dr	false		unknown
https://wordpress.org/documentation/	chromecache_604.2.dr	false		unknown
https://lug.wordpress.org/	chromecache_604.2.dr	false		unknown
https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg	chromecache_497.2.dr	false		unknown
https://wordpress.org/five-for-the-future/	chromecache_604.2.dr	false		unknown
https://bre.wordpress.org/	chromecache_604.2.dr	false		unknown
https://is.wordpress.org/	chromecache_604.2.dr	false		unknown
https://am.wordpress.org/	chromecache_604.2.dr	false		unknown
http://youtube.com/drm/2012/10/10	chromecache_522.2.dr, chromecache_384.2.dr	false		unknown
https://os.wordpress.org/	chromecache_604.2.dr	false		unknown
https://cs.wordpress.org/	chromecache_604.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.212.142	youtube.com	United States	15169	GOOGLEUS	false
142.250.186.174	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
192.0.77.48	s.w.org	United States	2635	AUTOMATTICUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
66.23.236.90	novanutrix.com	United States	19318	IS-AS-1US	true
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.173.231	rr2.sn-4g5ednz7.googlevideo.com	United States	15169	GOOGLEUS	false
198.143.164.252	wordpress.org	United States	32475	SINGLEHOP-LLCUS	false
142.250.186.182	i.ytimg.com	United States	15169	GOOGLEUS	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
169.150.236.104	bunnyfonts.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
142.250.186.102	static.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525246
Start date and time:	2024-10-03 23:37:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@26/613@56/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://novanutrix.com/wp-login.php?action=lostpassword Browse: https://novanutrix.com/ Browse: https://novanutrix.com/wp-login.php Browse: https://es.wordpress.org/ Browse: https://youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx&feature=shared

Input	Output
URL: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://novanutrix.com/wp-login.php?action=lostpassword Model: jbxai	{ "brand":["WordPress"], "contains_trigger_text":true, "trigger_text":"Por favor, introduce tu nombre de usuario o direccin de correo electrnico. Recibirs un mensaje de correo electrnico con instrucciones sobre cmo restablecer tu contrasea.", "prominent_button_name":"Obtener una contrasea nueva", "text_input_field_labels":["Nombre de usuario o correo electrnico"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://novanutrix.com/wp-login.php?action=lostpassword Model: jbxai	{ "phishing_score":8, "brands":"WordPress", "legit_domain":"wordpress.com", "classification":"wellknown", "reasons":["The brand 'WordPress' is a well-known content management system with a legitimate domain of 'wordpress.com'.", "The URL 'novanutrix.com' does not match the legitimate domain associated with WordPress.", "The domain 'novanutrix.com' does not have any known association with WordPress.", "The presence of input fields for 'Nombre de usuario o correo electrnico' suggests a login page, which is suspicious if not hosted on the legitimate WordPress domain."], "brand_matches":[false], "url_match":false, "brand_input":"WordPress", "input_fields":"Nombre de usuario o correo electrnico"}

URL: https://novanutrix.com/wp-login.php Model: jbxai	{ "brand":["WordPress"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Acceder", "text_input_field_labels":["Nombre de usuario o correo electrnico", "Contrasea"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://novanutrix.com/wp-login.php Model: jbxai	{ "phishing_score":8, "brands":"WordPress", "legit_domain":"wordpress.com", "classification":"wellknown", "reasons":["The brand 'WordPress' is a well-known content management system with a legitimate domain of 'wordpress.com'.", "The URL 'novanutrix.com' does not match the legitimate domain associated with WordPress.", "The domain 'novanutrix.com' does not have any known association with WordPress, which raises suspicion.", "The presence of input fields for 'Nombre de usuario o correo electrnico' suggests a login page, which is a common target for phishing.", "The URL does not contain any direct reference to WordPress, which is unusual for a legitimate WordPress-related site."], "brand_matches":[false], "url_match":false, "brand_input":"WordPress", "input_fields":"Nombre de usuario o correo electrnico"}

URL: https://es.wordpress.org/ Model: jbxai	{ "brand":["WordPress"], "contains_trigger_text":true, "trigger_text":"Prueba el editor de bloques", "prominent_button_name":"Consigue WordPress", "text_input_field_labels":["Disea", "Ampla"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play all", "text_input_field_labels":["Search"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PL1pJFUVKQ7EQixhsOkTHpy9-VIF3hxqsx Model: jbxai	{ "brand":["YouTube"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play all", "text_input_field_labels":["Shuffle"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 5
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	3.8488255736198
Encrypted:	false
SSDEEP:	3:CN+ltRPQEsJen2sSX:xvQEsJ42sSX
MD5:	E4D673A55C5656F19EF81563FB10884C
SHA1:	1F2D8ED221D39329251AD3A6FF1EDB20B7219443
SHA-256:	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
SHA-512:	E0B03411282A979CF772F700D9E5634B0C25C612E380AD33C0D59059B1B479D027016D5BEB148403EF185430DB35F5FAED362F36CE2C8ECAD0E6D8E30CEA97B4
Malicious:	false
Reputation:	low
URL:	https://pixel.wp.com/g.gif?v=ext&blog=13096054&post=671&tz=0&srv=es.wordpress.org&j=1%3A13.9&host=es.wordpress.org&ref=&fcp=3971&rand=0.38818547902683176
Preview:	GIF89a.............!.......,............bx..j....;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 23:38:12.366126060 CEST	192.168.2.4	1.1.1.1	0x1393	Standard query (0)	novanutrix.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:12.366255999 CEST	192.168.2.4	1.1.1.1	0xfa99	Standard query (0)	novanutrix.com	65	IN (0x0001)	false
Oct 3, 2024 23:38:13.317701101 CEST	192.168.2.4	1.1.1.1	0x164c	Standard query (0)	fonts.bunny.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:13.317842960 CEST	192.168.2.4	1.1.1.1	0x2c9c	Standard query (0)	fonts.bunny.net	65	IN (0x0001)	false
Oct 3, 2024 23:38:14.826750040 CEST	192.168.2.4	1.1.1.1	0xf03b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:14.827368021 CEST	192.168.2.4	1.1.1.1	0x5c98	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 23:38:16.039017916 CEST	192.168.2.4	1.1.1.1	0x7cdc	Standard query (0)	novanutrix.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:16.039458036 CEST	192.168.2.4	1.1.1.1	0xde7d	Standard query (0)	novanutrix.com	65	IN (0x0001)	false
Oct 3, 2024 23:38:55.588994980 CEST	192.168.2.4	1.1.1.1	0xdd82	Standard query (0)	es.wordpress.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:55.589370012 CEST	192.168.2.4	1.1.1.1	0x15e7	Standard query (0)	es.wordpress.org	65	IN (0x0001)	false
Oct 3, 2024 23:38:56.843333006 CEST	192.168.2.4	1.1.1.1	0xdeb3	Standard query (0)	stats.wp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:56.843564987 CEST	192.168.2.4	1.1.1.1	0xeb9a	Standard query (0)	stats.wp.com	65	IN (0x0001)	false
Oct 3, 2024 23:38:57.137963057 CEST	192.168.2.4	1.1.1.1	0xd835	Standard query (0)	wordpress.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:57.138473034 CEST	192.168.2.4	1.1.1.1	0xc550	Standard query (0)	wordpress.org	65	IN (0x0001)	false
Oct 3, 2024 23:38:58.466308117 CEST	192.168.2.4	1.1.1.1	0x7ec2	Standard query (0)	wordpress.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:58.466907978 CEST	192.168.2.4	1.1.1.1	0xfb8	Standard query (0)	wordpress.org	65	IN (0x0001)	false
Oct 3, 2024 23:38:59.998725891 CEST	192.168.2.4	1.1.1.1	0xe95e	Standard query (0)	es.wordpress.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:59.999114037 CEST	192.168.2.4	1.1.1.1	0xe515	Standard query (0)	es.wordpress.org	65	IN (0x0001)	false
Oct 3, 2024 23:39:00.270402908 CEST	192.168.2.4	1.1.1.1	0x9cd9	Standard query (0)	stats.wp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.270761013 CEST	192.168.2.4	1.1.1.1	0x8b6d	Standard query (0)	stats.wp.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:00.324639082 CEST	192.168.2.4	1.1.1.1	0x4ab1	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.324806929 CEST	192.168.2.4	1.1.1.1	0x21cd	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:00.892667055 CEST	192.168.2.4	1.1.1.1	0xc05f	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.893220901 CEST	192.168.2.4	1.1.1.1	0x7984	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:02.842289925 CEST	192.168.2.4	1.1.1.1	0x5ebc	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:02.842488050 CEST	192.168.2.4	1.1.1.1	0xb391	Standard query (0)	s.w.org	65	IN (0x0001)	false
Oct 3, 2024 23:39:03.735193968 CEST	192.168.2.4	1.1.1.1	0xcdff	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:03.735480070 CEST	192.168.2.4	1.1.1.1	0x953b	Standard query (0)	s.w.org	65	IN (0x0001)	false
Oct 3, 2024 23:39:13.078641891 CEST	192.168.2.4	1.1.1.1	0x3ab6	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:13.078793049 CEST	192.168.2.4	1.1.1.1	0xbaa4	Standard query (0)	youtube.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:14.037743092 CEST	192.168.2.4	1.1.1.1	0xdd53	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.038183928 CEST	192.168.2.4	1.1.1.1	0x9aa9	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:15.244602919 CEST	192.168.2.4	1.1.1.1	0xe77b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.245129108 CEST	192.168.2.4	1.1.1.1	0xc263	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:16.405205965 CEST	192.168.2.4	1.1.1.1	0xce28	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.406100988 CEST	192.168.2.4	1.1.1.1	0x5726	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:23.411434889 CEST	192.168.2.4	1.1.1.1	0x8221	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:23.411802053 CEST	192.168.2.4	1.1.1.1	0x81b4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 23:39:23.714027882 CEST	192.168.2.4	1.1.1.1	0x7526	Standard query (0)	rr2---sn-4g5ednz7.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:23.714165926 CEST	192.168.2.4	1.1.1.1	0xc1ab	Standard query (0)	rr2---sn-4g5ednz7.googlevideo.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:24.931056023 CEST	192.168.2.4	1.1.1.1	0x1f4b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:24.931195974 CEST	192.168.2.4	1.1.1.1	0x50e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:25.940038919 CEST	192.168.2.4	1.1.1.1	0x1626	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.940176964 CEST	192.168.2.4	1.1.1.1	0x6299	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:26.395340919 CEST	192.168.2.4	1.1.1.1	0x660a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.395486116 CEST	192.168.2.4	1.1.1.1	0xad05	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:26.837883949 CEST	192.168.2.4	1.1.1.1	0x16e9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.838146925 CEST	192.168.2.4	1.1.1.1	0xd22b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 23:39:26.839452982 CEST	192.168.2.4	1.1.1.1	0xbdba	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.839649916 CEST	192.168.2.4	1.1.1.1	0xaa27	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:28.874784946 CEST	192.168.2.4	1.1.1.1	0x1a45	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:28.874921083 CEST	192.168.2.4	1.1.1.1	0xd031	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 23:39:35.736907005 CEST	192.168.2.4	1.1.1.1	0x1ba	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:35.737024069 CEST	192.168.2.4	1.1.1.1	0xaf94	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 23:39:36.700263977 CEST	192.168.2.4	1.1.1.1	0x4801	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:36.700393915 CEST	192.168.2.4	1.1.1.1	0x13d0	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Windows Analysis Report
https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 23:38:12.536544085 CEST	1.1.1.1	192.168.2.4	0x1393	No error (0)	novanutrix.com		66.23.236.90	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:13.325182915 CEST	1.1.1.1	192.168.2.4	0x2c9c	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:13.325347900 CEST	1.1.1.1	192.168.2.4	0x164c	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:13.325347900 CEST	1.1.1.1	192.168.2.4	0x164c	No error (0)	bunnyfonts.b-cdn.net		169.150.236.104	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:14.833616018 CEST	1.1.1.1	192.168.2.4	0xf03b	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:14.833859921 CEST	1.1.1.1	192.168.2.4	0x5c98	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:38:16.228024006 CEST	1.1.1.1	192.168.2.4	0x7cdc	No error (0)	novanutrix.com		66.23.236.90	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:22.795227051 CEST	1.1.1.1	192.168.2.4	0x729d	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:22.795227051 CEST	1.1.1.1	192.168.2.4	0x729d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:22.795227051 CEST	1.1.1.1	192.168.2.4	0x729d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:24.856616974 CEST	1.1.1.1	192.168.2.4	0xa67	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:24.856616974 CEST	1.1.1.1	192.168.2.4	0xa67	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:36.886408091 CEST	1.1.1.1	192.168.2.4	0x77d8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:36.886408091 CEST	1.1.1.1	192.168.2.4	0x77d8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:55.604687929 CEST	1.1.1.1	192.168.2.4	0xdd82	No error (0)	es.wordpress.org	wordpress.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:55.604687929 CEST	1.1.1.1	192.168.2.4	0xdd82	No error (0)	wordpress.org		198.143.164.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:55.610378027 CEST	1.1.1.1	192.168.2.4	0x15e7	No error (0)	es.wordpress.org	wordpress.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:38:56.850212097 CEST	1.1.1.1	192.168.2.4	0xdeb3	No error (0)	stats.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:57.144594908 CEST	1.1.1.1	192.168.2.4	0xd835	No error (0)	wordpress.org		198.143.164.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:38:58.473869085 CEST	1.1.1.1	192.168.2.4	0x7ec2	No error (0)	wordpress.org		198.143.164.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.007657051 CEST	1.1.1.1	192.168.2.4	0xe95e	No error (0)	es.wordpress.org	wordpress.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:00.007657051 CEST	1.1.1.1	192.168.2.4	0xe95e	No error (0)	wordpress.org		198.143.164.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.014780045 CEST	1.1.1.1	192.168.2.4	0xe515	No error (0)	es.wordpress.org	wordpress.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:00.277597904 CEST	1.1.1.1	192.168.2.4	0x9cd9	No error (0)	stats.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.331310034 CEST	1.1.1.1	192.168.2.4	0x4ab1	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:00.901181936 CEST	1.1.1.1	192.168.2.4	0xc05f	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:01.380243063 CEST	1.1.1.1	192.168.2.4	0xa8b4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:01.380243063 CEST	1.1.1.1	192.168.2.4	0xa8b4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:02.849551916 CEST	1.1.1.1	192.168.2.4	0x5ebc	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:03.742496014 CEST	1.1.1.1	192.168.2.4	0xcdff	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:13.085746050 CEST	1.1.1.1	192.168.2.4	0xbaa4	No error (0)	youtube.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:13.101936102 CEST	1.1.1.1	192.168.2.4	0x3ab6	No error (0)	youtube.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045212030 CEST	1.1.1.1	192.168.2.4	0xdd53	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045792103 CEST	1.1.1.1	192.168.2.4	0x9aa9	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:14.045792103 CEST	1.1.1.1	192.168.2.4	0x9aa9	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:15.268589020 CEST	1.1.1.1	192.168.2.4	0xe77b	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.427800894 CEST	1.1.1.1	192.168.2.4	0xce28	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:16.428548098 CEST	1.1.1.1	192.168.2.4	0x5726	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:16.428548098 CEST	1.1.1.1	192.168.2.4	0x5726	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:23.418936968 CEST	1.1.1.1	192.168.2.4	0x8221	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:23.419076920 CEST	1.1.1.1	192.168.2.4	0x81b4	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 23:39:23.722045898 CEST	1.1.1.1	192.168.2.4	0xc1ab	No error (0)	rr2---sn-4g5ednz7.googlevideo.com	rr2.sn-4g5ednz7.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:23.722045898 CEST	1.1.1.1	192.168.2.4	0xc1ab	No error (0)	rr2.sn-4g5ednz7.googlevideo.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:23.723056078 CEST	1.1.1.1	192.168.2.4	0x7526	No error (0)	rr2---sn-4g5ednz7.googlevideo.com	rr2.sn-4g5ednz7.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:23.723056078 CEST	1.1.1.1	192.168.2.4	0x7526	No error (0)	rr2.sn-4g5ednz7.googlevideo.com		74.125.173.231	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:24.151245117 CEST	1.1.1.1	192.168.2.4	0x358b	No error (0)	shed.dual-low.s-part-0015.t-0009.t-msedge.net	s-part-0015.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:39:24.151245117 CEST	1.1.1.1	192.168.2.4	0x358b	No error (0)	s-part-0015.t-0009.t-msedge.net		13.107.246.43	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:24.937606096 CEST	1.1.1.1	192.168.2.4	0x1f4b	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:24.937892914 CEST	1.1.1.1	192.168.2.4	0x50e9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:25.947231054 CEST	1.1.1.1	192.168.2.4	0x1626	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.402139902 CEST	1.1.1.1	192.168.2.4	0x660a	No error (0)	play.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.844584942 CEST	1.1.1.1	192.168.2.4	0x16e9	No error (0)	googleads.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.845185995 CEST	1.1.1.1	192.168.2.4	0xd22b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 23:39:26.846211910 CEST	1.1.1.1	192.168.2.4	0xbdba	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:26.846438885 CEST	1.1.1.1	192.168.2.4	0xaa27	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:39:28.881525993 CEST	1.1.1.1	192.168.2.4	0x1a45	No error (0)	play.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:35.743773937 CEST	1.1.1.1	192.168.2.4	0x1ba	No error (0)	static.doubleclick.net		142.250.186.102	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:39:36.707083941 CEST	1.1.1.1	192.168.2.4	0x4801	No error (0)	static.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:13 UTC	774	OUT	GET /vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:13 UTC	506	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html; charset=UTF-8 link: <https://novanutrix.com/wp-json/>; rel="https://api.w.org/" expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-litespeed-cache: hit content-length: 6184 date: Thu, 03 Oct 2024 21:38:13 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:13 UTC	862	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 53 69 74 65 20 69 73 20 75 6e 64 65 72 67 6f 69 6e 67 20 6d 61 69 6e 74 65 6e 61 6e 63 65 3c 2f 74 69 74 6c 65 3e 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 6e 75 74 72 69 78 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 31 31 2f 46 41 56 49 43 4f 4e 2d 31 30 30 78 31 30 30 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!DOCTYPE html><html lang="es"><head><meta charset="UTF-8" /><title>Site is undergoing maintenance</title><link rel="icon" href="https://novanutrix.com/wp-content/uploads/2022/11/FAVICON-100x100.png" sizes="32x32" /><link rel="icon" href="https://
2024-10-03 21:38:13 UTC	5322	IN	Data Raw: 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 69 73 20 75 6e 64 65 72 67 6f 69 6e 67 20 6d 61 69 6e 74 65 6e 61 6e 63 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 69 6e 74 65 6e 61 6e 63 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 6e 75 74 72 69 78 2e 63 6f 6d 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 73 6f 6f 6e 2e 20 54 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 79 6f 75 72 Data Ascii: y="og:title" content="Site is undergoing maintenance"/><meta property="og:type" content="Maintenance"/><meta property="og:url" content="https://novanutrix.com"/><meta property="og:description" content="Site will be available soon. Thank you for your

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:13 UTC	708	OUT	GET /wp-content/plugins/maintenance/load/css/style.css?ver=1669317391 HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:13 UTC	447	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 10 Oct 2024 21:38:13 GMT content-type: text/css last-modified: Thu, 24 Nov 2022 19:16:31 GMT accept-ranges: bytes content-length: 16448 date: Thu, 03 Oct 2024 21:38:13 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:13 UTC	921	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 20 7b 0d 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0d 0a 7d 0d 0a 0d 0a 2a 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 5b 63 6c 61 73 73 2a 3d 22 66 69 2d 22 5d 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 6c 69 6e 65 2d 68 65 Data Ascii: :before,:after {-moz-box-sizing: border-box;-webkit-box-sizing: border-box;box-sizing: border-box}* {margin: 0;padding: 0;border: 0;outline: none}[class*="fi-"] {display: inline;width: auto;height: auto;line-he
2024-10-03 21:38:13 UTC	14994	IN	Data Raw: 20 35 30 70 78 20 23 34 38 34 39 34 61 20 69 6e 73 65 74 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 66 69 6c 6c 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 3e 20 23 77 72 61 70 70 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 3e 20 2e 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c Data Ascii: 50px #48494a inset;-webkit-text-fill-color: #fff}body > #wrapper {height: 100%;min-height: 100%;width: 100%;display: inline-block}body > .main-container {height: 100%;min-height: 100%;min-width: 100%;transition: all
2024-10-03 21:38:13 UTC	533	IN	Data Raw: 2e 6c 61 73 74 5b 64 69 72 3d 27 72 74 6c 27 5d 7b 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 65 66 74 3a 20 32 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 23 6f 75 74 64 61 74 65 64 20 23 62 74 6e 43 6c 6f 73 65 55 70 64 61 74 65 42 72 6f 77 73 65 72 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 40 73 75 70 70 6f 72 Data Ascii: .last[dir='rtl']{right: auto !important; left: 25px !important;}#outdated #btnCloseUpdateBrowser{display: block; position: relative; width: 100%; height: 100%;text-decoration: none; color: #ffffff; font-size: 36px; line-height: 36px;}@suppor

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:13 UTC	708	OUT	GET /wp-content/plugins/maintenance/load/css/fonts.css?ver=1669317391 HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:14 UTC	447	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 10 Oct 2024 21:38:13 GMT content-type: text/css last-modified: Thu, 24 Nov 2022 19:16:31 GMT accept-ranges: bytes content-length: 48476 date: Thu, 03 Oct 2024 21:38:13 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:14 UTC	921	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0'
2024-10-03 21:38:14 UTC	14994	IN	Data Raw: 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 66 77 7b 77 69 64 74 68 3a 31 2e 32 38 35 37 31 34 32 39 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 75 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 66 61 2d 75 6c 3e 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 61 2d 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 77 69 64 74 Data Ascii: 2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14285714em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14285714em;widt
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 66 31 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 Data Ascii: nt:"\f161"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before{content:"\f163"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-youtube:before{content:"\f167"}.f
2024-10-03 21:38:14 UTC	16177	IN	Data Raw: 6b 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 69 70 62 6f 61 72 64 2d 6e 6f 74 65 73 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 69 70 62 6f 61 72 64 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 6f 63 6b 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 6f 73 65 64 2d 63 61 70 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6f 6d 6d 65 6e 74 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6f 6d 6d 65 6e 74 2d 71 75 6f 74 65 73 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6f 6d 6d 65 6e 74 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 2c 2e 66 69 2d 63 6f 6d 6d 65 6e 74 3a 62 65 Data Ascii: k:before,.fi-checkbox:before,.fi-clipboard-notes:before,.fi-clipboard-pencil:before,.fi-clipboard:before,.fi-clock:before,.fi-closed-caption:before,.fi-cloud:before,.fi-comment-minus:before,.fi-comment-quotes:before,.fi-comment-video:before,.fi-comment:be

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:13 UTC	626	OUT	GET /css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:Latin HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://novanutrix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:14 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:38:13 GMT Content-Type: text/css; charset=utf-8 Content-Length: 6158 Connection: close Vary: Accept-Encoding Server: BunnyCDN-IL1-1206 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 Last-Modified: Thu, 05 Sep 2024 19:32:35 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/05/2024 19:32:35 CDN-EdgeStorageId: 894 CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: fea97df6d7001f8004eebe4776d0825a CDN-Cache: HIT Accept-Ranges: bytes
2024-10-03 21:38:14 UTC	6158	IN	Data Raw: 2f 2a 20 6d 61 74 68 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 6f 70 65 6e 2d 73 61 6e 73 2f 66 69 6c 65 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6d 61 74 68 2d 34 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 6f 70 65 6e 2d 73 61 6e 73 2f Data Ascii: /* math */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; font-stretch: 100%; src: url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2) format('woff2'), url(https://fonts.bunny.net/open-sans/

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:13 UTC	675	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:14 UTC	375	IN	HTTP/1.1 200 OK Connection: close content-type: text/javascript last-modified: Wed, 08 Nov 2023 06:19:56 GMT accept-ranges: bytes content-length: 87553 date: Thu, 03 Oct 2024 21:38:13 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:14 UTC	993	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-03 21:38:14 UTC	14994	IN	Data Raw: 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 76 61 72 20 74 3d 22 33 2e 37 2e 31 22 2c 6c 3d 2f 48 54 4d 4c 24 2f 69 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 65 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 78 28 65 29 3b 72 65 74 75 72 6e 21 Data Ascii: .removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|"object":typeof e}var t="3.7.1",l=/HTML$/i,ce=function(e,t){return new ce.fn.init(e,t)};function c(e){var t=!!e&&"length"in e&&e.length,n=x(e);return!
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 Data Ascii: (e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:func
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b Data Ascii: l(e,function(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 6e 44 61 74 61 28 53 65 28 74 2c 21 31 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3b 74 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 Data Ascii: nData(Se(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return $e(this,arguments,function(e){var t=this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 63 65 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b Data Ascii: tend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&ce.isXMLDoc(e)\|\|(t=ce.propFix[t]\|\|t,i=ce.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{
2024-10-03 21:38:14 UTC	6030	IN	Data Raw: 26 69 28 29 7d 7d 7d 29 3b 76 61 72 20 4a 74 2c 4b 74 3d 5b 5d 2c 5a 74 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 63 65 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 74 2e 70 6f 70 28 29 7c 7c 63 65 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 6a 74 2e 67 75 69 64 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 3d 21 30 2c 65 7d 7d 29 2c 63 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 Data Ascii: &i()}}});var Jt,Kt=[],Zt=/(=)\?(?=&\|$)\|\?\?/;ce.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=Kt.pop()\|\|ce.expando+"_"+jt.guid++;return this[e]=!0,e}}),ce.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"u

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:14 UTC	741	OUT	GET /wp-content/uploads/2022/11/mt-sample-background.jpg HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:14 UTC	450	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 10 Oct 2024 21:38:14 GMT content-type: image/jpeg last-modified: Thu, 24 Nov 2022 19:16:35 GMT accept-ranges: bytes content-length: 217593 date: Thu, 03 Oct 2024 21:38:14 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:14 UTC	918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 05 00 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fe 6c 3b 73 58 0a 49 55 50 Data Ascii: JFIFC!"$"$C"l;sXIUP
2024-10-03 21:38:14 UTC	14994	IN	Data Raw: b2 92 29 45 88 b2 8a 00 b2 89 42 14 02 ca 49 ac da 8a 95 60 b1 49 65 01 00 6a 04 50 0b 01 65 00 14 80 14 85 25 00 45 85 59 48 52 14 80 54 2c b0 b2 89 65 00 4a 1a c8 00 00 05 44 bb 9a f4 78 ea c9 44 05 94 4b 09 5d 39 d4 85 58 b2 c2 f4 5e 47 48 e6 5b 20 53 af 38 8b 48 95 13 a7 35 28 40 59 48 a2 4d 00 22 88 b2 16 28 00 84 d4 a9 65 58 eb ca 0a 20 01 11 6a 2a 12 c5 01 bc 58 42 80 4a 12 a2 16 a2 a2 28 92 96 e6 90 15 28 82 4b 05 8a 22 88 a2 01 2c 05 33 48 94 20 38 b7 8e 85 0d 64 02 cb 16 16 05 8b 6c 59 08 aa 52 58 2c a8 0a 14 4e dc 94 69 30 a0 10 55 94 4b 2c 51 44 a0 52 15 21 40 00 b1 56 29 00 01 65 27 7e 28 0a 2c 0a 21 40 00 b0 2c a2 50 01 28 35 90 01 6c 82 50 b0 25 35 9a 29 22 c1 45 94 8d 66 c1 60 15 25 95 61 52 14 8b 0a 04 a5 94 40 86 b2 52 c4 0a 16 20 01 4a Data Ascii: )EBI`IejPe%EYHRT,eJDxDK]9X^GH[ S8H5(@YHM"(eX j*XBJ((K",3H 8dlYRX,Ni0UK,QDR!@V)e'~(,!@,P(5lP%5)"Ef`%aR@R J
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: 1b 6b c5 cb d7 e4 e9 37 d3 9f 53 b7 2f 47 86 59 70 d4 6b 7d 25 9e df 3f 6c d9 c7 d1 ca 4f 2b 33 73 a6 f9 7b 0e 1c bb f2 39 67 4b 5b c7 78 e9 c7 bf 9a 4e 65 d5 5d e9 2e e5 8d 75 e5 d3 37 17 7c 8d 72 ed 82 73 b2 cc f6 e7 8a f5 67 29 7a 72 df 48 e7 79 ee b3 ab 93 7a cd 8b 26 8c ea 43 ad e1 d4 b8 ef c8 c3 a7 2b 37 be 5d 57 2e 7d 2c 8e 72 ce 98 80 82 90 a8 2a 54 11 75 01 72 00 a8 16 02 69 25 85 b3 ef 68 f8 04 2b 24 a8 02 82 04 aa 96 08 2a 29 09 44 12 c2 c0 10 b1 0a 42 a5 59 73 50 94 8a 52 54 96 14 94 11 15 16 80 80 11 29 40 95 05 80 00 00 25 10 2c b0 b1 49 60 00 01 0a 04 b0 a8 5b 00 10 16 54 4a 85 15 37 a9 b9 6e 33 12 76 e5 b1 ea f1 f4 97 b7 1d 48 f2 ac d2 2d 26 b7 11 ad 55 a9 b9 31 b4 2c c6 ce 37 1a d3 b6 71 63 b7 4e 5b cd c6 37 9b 3b 74 f2 a5 ee e6 8d f4 e1 Data Ascii: k7S/GYpk}%?lO+3s{9gK[xNe].u7\|rsg)zrHyz&C+7]W.},rTuri%h+$)DBYsPRT)@%,I`[TJ7n3vH-&U1,7qcN[7;t
2024-10-03 21:38:14 UTC	16384	IN	Data Raw: d9 38 77 8e 68 17 00 41 44 ef ba 6f f9 07 7f 39 58 ca 8a 2d 36 d3 68 da 6e 4d 52 9f 47 c6 19 03 44 f2 dc b8 23 75 c2 bb 47 64 10 45 0c 9a e2 05 da 8a 62 c0 f6 02 d3 b1 f0 87 a9 3b 6c 99 45 91 b9 cc 74 38 91 a6 3e 9e ac 74 05 05 0e 21 f1 17 e3 1c 9f 28 a6 cc 55 31 cc 63 66 8d d2 87 6a c3 e2 6e 23 2b f0 ee 8d ed 99 1f 43 df aa 48 c9 ac b6 5c 64 c7 d3 ae f3 b5 79 5a 19 15 b6 9e 54 8e f6 87 de 9e c6 a7 6e 38 47 b5 ae d8 20 a8 26 f2 72 29 bf e5 9b 93 7a 88 d8 e7 4a b6 3c b4 e4 72 f0 10 c8 da b4 db 5a 86 6e 3d 94 82 7e e3 b4 7b 4d 29 be 94 57 29 a8 aa 45 72 37 40 ad 41 6d 95 ed aa 93 5c ad 13 7f 24 af 1c 2b d8 f0 0f 67 08 15 b6 43 b2 09 4b 0c 95 22 24 82 81 dd e6 dd 68 3b 62 e2 0b 66 20 c1 3e 95 06 22 37 b7 1b 80 d0 35 ec 4a 6b d3 9b a5 cd 4c c4 39 ac 38 b7 15 Data Ascii: 8whADo9X-6hnMRGD#uGdEb;lEt8>t!(U1cfjn#+CH\dyZTn8G &r)zJ<rZn=~{M)W)Er7@Am\$+gCK"$h;bf >"75JkL98
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: cc 96 4b 25 92 b6 e0 8d 99 ee 42 e2 51 92 a6 47 34 70 71 7f a4 c0 78 d0 d0 25 41 60 c2 3a 16 da 16 46 e3 34 e6 3a 0b f4 b2 25 bf fb 91 a1 e4 45 d0 ab 8c e1 fe f0 9e 5a 4d 8e aa 5b 71 c9 5d b5 87 5e 35 0a 99 91 f9 4c 23 89 01 cd 6f ec a9 ec c9 8c ca 36 a5 c3 c4 c7 04 4e 23 7f d2 9b 87 82 04 45 8a a7 11 b7 e6 aa 2c 1f b2 9b c8 4f 06 61 a8 bc 34 bb e0 2e 30 48 88 40 b1 da dc 39 39 bc 17 39 68 8b 08 e0 37 69 53 29 c4 32 a1 f1 75 24 f0 91 79 4e 60 29 cd c4 8b 7e e9 b8 1f d4 32 fa 3e 51 76 13 aa 1c 8a a1 ed 2c 3c 90 05 e3 a2 38 b3 49 54 bb e4 6d 22 f0 73 b2 99 0d c5 19 ae 21 6e e2 c0 95 24 fd 90 b9 5c 26 7b 9c bb db 21 23 8e 2e a0 ab 2a 93 d8 22 4e a3 4d fb ee 49 f5 98 db 03 65 ca 81 b6 db d0 ae 36 47 73 7d db ab 77 32 b3 85 2a 48 b2 3c 8a 11 67 26 cf 86 a5 21 Data Ascii: K%BQG4pqx%A`:F4:%EZM[q]^5L#o6N#E,Oa4.0H@999h7iS)2u$yN`)~2>Qv,<8ITm"s!n$\&{!#."NMIe6Gs}w2H<g&!
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: 21 97 70 50 e4 62 3d 26 ee 66 23 a1 c0 02 d0 d0 7a 95 b0 37 f9 0d 7f a8 ba b6 91 58 40 3f 83 05 2a cb b7 b8 8e de dd cc 98 38 0e 3f e7 0e 69 32 01 4e 5f 92 dd 40 10 66 01 c0 1c 41 73 c7 82 50 3a 59 e0 10 85 9d d4 4c 71 20 14 52 8b f7 12 e5 71 83 0b 42 67 98 4f c0 33 14 93 41 cc 21 80 20 8e 44 6c cc 14 17 88 f3 50 0f 83 c4 33 81 ad df 70 ea 33 48 ca 96 82 3f 1c c5 50 13 00 c0 13 80 bb 80 cf dc 70 e9 70 bd 46 84 61 c3 b7 a0 38 7a 68 bc 3c e9 ce df af ca ad 0e da d0 68 a1 dc 77 1f 19 d5 2d 50 34 e6 36 23 c7 9c 0b 01 43 04 5f 94 c6 41 ee 73 83 16 28 81 54 0b 83 70 dc f0 60 e0 56 3b ab 54 3f 00 e2 59 85 76 00 7a 30 16 03 b0 62 ae 07 8d 11 24 7d 08 44 c8 10 c5 8e 1a 03 46 08 e4 45 31 89 60 12 19 84 36 44 19 04 4f 88 12 07 71 6b 3c 06 22 84 ed cc e9 9c 10 07 e7 Data Ascii: !pPb=&f#z7X@?*8?i2N_@fAsP:YLq RqBgO3A! DlP3p3H?PppFa8zh<hw-P46#C_As(Tp`V;T?Yvz0b$}DFE1`6DOqk<"
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: 04 62 21 78 85 c5 40 65 41 ee 06 6e 3b f7 01 5c 8a d8 94 e2 13 19 80 12 62 0b 33 05 28 11 6c ae 12 47 46 21 17 15 18 8e 20 4c 10 08 11 5c 20 77 04 18 35 01 c0 ca 50 37 98 0d 91 88 7c 4d a0 86 70 41 fc 47 c3 82 d0 ea 1f 88 88 3d 42 8a f6 e6 48 33 09 88 80 ca 4c 08 61 d0 99 84 c4 7d 02 1a d1 c3 23 dc c1 8a 8b 28 c0 08 09 10 34 60 7b 81 64 44 81 40 90 36 23 8a 29 8d 2b 51 5b 10 08 ac 84 02 2e 0e a0 21 50 43 67 52 1c c0 4a a8 c6 a1 2a 64 c3 ed 05 a0 00 42 11 84 31 1f 28 48 5a 29 43 18 06 8c 4c c6 f1 a1 80 c7 0c 06 54 5b 1e d1 e1 35 39 d0 e8 67 d6 a7 67 1b 5c 7b 6f c0 e3 d9 7a 9f 15 ee 1b 2e 63 43 e3 7e 52 90 06 3d 68 11 c3 10 22 13 8d 54 1e a3 59 82 3c 83 1f fd 20 21 48 01 10 71 79 d4 39 8c 58 68 30 0c 38 b8 86 8b 87 83 89 48 13 09 e8 82 01 08 c0 78 40 01 37 Data Ascii: b!x@eAn;\b3(lGF! L\ w5P7\|MpAG=BH3La}#(4`{dD@6#)+Q[.!PCgRJ*dB1(HZ)CLT[59gg\{oz.cC~R=h"TY< !Hqy9Xh08Hx@7
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: c1 69 d7 e7 c1 52 b7 cf 55 25 34 86 ba 43 23 95 2e 92 73 8b 8d c5 12 d3 4d dc 3f 7c 30 bf ef 00 ae 3b 26 ae e8 8e 00 09 15 30 56 0e 25 33 dd 3c 30 03 10 99 6b 9c 19 87 f7 90 d4 91 9d d4 55 9b ad b0 8a ac be d9 0f b4 fd 51 fc ca a4 d6 a8 4b e5 c0 98 9a e7 6a 8e 18 36 2f c3 80 11 5f cf 8a e5 f0 cd dc 3c f6 20 31 8a 22 f8 48 68 e4 49 5c d0 f9 c7 36 ee ce 6a ea 3d b8 e0 d8 a8 ba 49 a0 94 40 03 6c 44 14 18 f3 86 18 f2 49 08 ff c4 00 23 11 00 03 00 03 00 02 03 01 01 01 01 01 00 00 00 00 00 01 11 10 21 31 20 41 51 61 71 30 40 50 60 81 ff da 00 08 01 03 01 01 3f 10 11 7a 2b 9b 16 ca 31 10 89 f0 e8 d9 e8 4a a2 0f 0b 44 57 42 44 45 d1 48 d9 4b 44 3c 2d f4 db 36 86 51 e8 ff 00 e0 9d 1e 90 f6 52 11 5a 27 f4 7b c3 b0 f4 26 9f 83 82 d9 7e 4a b1 d2 b2 22 c2 8d e1 47 d3 Data Ascii: iRU%4C#.sM?\|0;&0V%3<0kUQKj6/_< 1"HhI\6j=I@lDI#!1 AQaq0@P`?z+1JDWBDEHKD<-6QRZ'{&~J"G
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: c6 f5 44 f9 95 8b 86 42 ca 25 44 db 05 cb 48 f9 b9 8e e7 cc c8 ee 1d c2 f8 a7 d4 41 cd c5 f3 0f 4c 7e 63 ac 4c d6 48 55 c6 98 55 cb c5 25 dc b2 f5 1a 95 7c cb 8f 8c 45 98 b8 31 03 17 33 d6 51 38 19 e2 a1 d4 aa 71 2c 16 96 56 a6 6f 51 15 c1 39 df 32 9e ae 64 63 93 2c 2f 55 55 29 ea a0 37 a9 45 f3 71 a7 0c 0e 89 40 5d 5b ea 73 d4 bc d7 ee 09 7b 9b 66 36 20 c2 d8 65 e2 62 71 b8 bb 97 6c 0a e6 63 77 29 3c c3 cc e3 50 63 24 e6 b0 4d 80 b9 29 ae 65 23 15 61 6b cc ad 76 94 ae 49 b7 1f 82 9f f2 99 b8 2b 49 ab c6 62 79 87 90 2d 4a 00 a3 5d e4 4f 88 63 8f dc bc ea 30 02 c0 ce 5f 52 ec a9 e6 e7 81 81 7c cc 8c c5 77 f8 65 05 6e 15 b6 e9 af 70 03 7f 70 6b 11 c3 a8 6e d8 53 cd 4e 73 35 9c 4b 27 2f c2 b9 d4 da ad c3 53 e2 56 67 cc 09 50 37 cc c3 f0 37 af dc a0 c6 85 00 Data Ascii: DB%DHAL~cLHUU%\|E13Q8q,VoQ92dc,/UU)7Eq@][s{f6 ebqlcw)<Pc$M)e#akvI+Iby-J]Oc0_R\|wenppknSNs5K'/SVgP77
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: 77 03 ea 56 37 1a f7 0c 4a c9 34 89 58 cc 0e e3 45 50 e3 f7 09 4f 50 3c 90 d6 cb f5 0b 95 e2 17 a3 31 1b a4 aa 98 37 29 08 67 89 5e 7f d4 2c ae 7c 47 7d 4d 5c b0 d3 29 82 e1 dc c1 ce 4e e6 38 97 8c 3d 47 1c 8b a3 34 66 ad d0 a1 02 b3 6c 2e 21 75 98 f8 9b 66 eb 35 2e 9f ee 02 b3 e6 1b 9f 13 0f 10 bd 67 ee 54 c1 28 ea 5f 15 50 ad 5c 2b a8 9b 95 d9 0f 33 1c 40 3b fd cc 21 4f b9 ae 27 39 26 0e 2f d4 df 13 89 54 62 1b ee 55 37 c4 1b b0 67 b0 9c e3 13 cd 4b 5c 71 ea 60 f3 00 73 63 38 61 57 93 11 7a fc 1e a6 d1 5e 5f 32 b4 d3 12 25 96 08 7b 85 77 52 83 4c a7 6f ea 00 ca 78 3a 9d f5 2c d9 55 dc 6b 83 e6 01 ce 65 17 98 87 19 9c e6 5b 70 33 d4 c3 dc f1 b8 e2 1e 19 99 ce e6 39 86 f7 88 fd ce 35 14 ea 68 ae fe e3 71 5b 56 0e a7 9a 99 ac e6 36 35 5c bc ee 69 e6 1d ba Data Ascii: wV7J4XEPOP<17)g^,\|G}M\)N8=G4fl.!uf5.gT(_P\+3@;!O'9&/TbU7gK\q`sc8aWz^_2%{wRLox:,Uke[p395hq[V65\i

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:14 UTC	683	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:14 UTC	375	IN	HTTP/1.1 200 OK Connection: close content-type: text/javascript last-modified: Wed, 09 Aug 2023 06:16:59 GMT accept-ranges: bytes content-length: 13577 date: Thu, 03 Oct 2024 21:38:14 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:14 UTC	993	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-10-03 21:38:14 UTC	12584	IN	Data Raw: 61 72 6e 69 6e 67 73 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 70 6c 75 67 69 6e 20 6c 6f 61 64 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 22 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 22 2b 28 73 2e 6d 69 67 72 61 74 65 4d 75 74 65 3f 22 22 3a 22 20 77 69 74 68 20 6c 6f 67 67 69 6e 67 20 61 63 74 69 76 65 22 29 2b 22 2c 20 76 65 72 73 69 6f 6e 20 22 2b 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 29 29 3b 76 61 72 20 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 63 6f 6e 73 6f 6c 65 3b 21 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 Data Ascii: arnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var o={};function u(e,t){var r=n.console;!s.migrateIsPatchE

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:15 UTC	688	OUT	GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://novanutrix.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:Latin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:15 UTC	991	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:38:15 GMT Content-Type: font/woff2 Content-Length: 18668 Connection: close Server: BunnyCDN-IL1-1206 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "66f3f824-48ec" Last-Modified: Wed, 25 Sep 2024 11:46:44 GMT CDN-StorageServer: NY-427 CDN-FileServer: 831 CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/26/2024 11:46:59 CDN-EdgeStorageId: 940 CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 64a7c1145c4615638199589e470712c5 CDN-Cache: HIT Accept-Ranges: bytes
2024-10-03 21:38:15 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 ec 00 12 00 00 00 00 8b 0c 00 00 48 82 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b 90 0a 1c 86 68 06 60 3f 53 54 41 54 5e 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 18 81 9b 2b 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 84 78 07 89 1f 0c 85 1f 1b b6 7a 27 6f 03 ee 77 3b 80 e3 fa fc 36 11 45 c9 9c 15 a2 08 36 0e 08 86 b4 45 f2 ff ff 27 24 48 19 23 93 a2 d7 02 c2 ab 6e 31 58 0a 91 4a 55 2f af 64 94 4f cd ab bc 4a 43 85 27 4a 22 b4 76 ef 76 89 6c c4 68 fe 11 0d ac d0 75 87 53 bd 07 d8 53 59 cb f6 88 80 10 42 88 68 7a a3 6f 0b 7d 86 12 ff d2 d3 09 57 06 97 de 95 e3 f5 bb 25 6d 36 ee d3 de 41 1a c7 3d ce b6 f4 fb 98 5c 82 86 6d 99 20 0c 5d fb f2 ac 98 7e d4 aa 5b 8f af 0a 9f f3 dc 0d 03 f4 f3 Data Ascii: wOF2HH\|h`?STAT^0\|+26$` xz'ow;6E6E'$H#n1XJU/dOJC'J"vvlhuSSYBhzo}W%m6A=\m ]~[
2024-10-03 21:38:15 UTC	2284	IN	Data Raw: fa c5 47 6c 87 78 5d 54 7b e4 2a 61 82 fd cb c7 ac 8d 2c c3 aa 22 a4 36 26 25 78 59 0e 5a 5a 7e 24 86 2b 77 d3 08 67 30 cd 71 3a 35 ab 06 9b 7e fa 06 51 58 f7 98 bb 5f f3 9e 94 f2 e8 46 fc b4 65 2d bb 9b 63 9c 8b c7 a6 86 aa 3e 86 81 e2 04 fb 86 f0 a8 05 53 6a cc 92 51 80 a6 5f 75 8a 2c 99 37 c2 03 fb 48 69 81 78 18 1e 08 97 d3 ac 80 0c 1a d1 b4 4c 63 fd 6a 36 a0 c0 1a 05 b5 72 24 ee c2 b7 83 37 cf 0e 07 e7 62 12 af 03 bb aa 60 31 e9 64 01 a6 57 31 43 32 f4 df 91 79 14 49 55 52 13 5b 0a 40 10 2b 44 93 44 be 03 36 7d f9 df 25 cc 65 6f 85 27 8e d1 7b 8d a8 0e 95 8d 6a 53 f7 d8 5b d1 e5 22 4f 12 89 b9 4b 07 5a 0d 28 23 d5 e8 ca 20 f2 41 85 21 3e 66 02 2f 66 be 7a 6f d6 ad 73 19 09 f9 11 68 e2 7a 27 8e ab 9b 1b 11 e6 26 cc 70 02 31 87 bf 3c ab d4 3d 3a 41 ed Data Ascii: Glx]T{*a,"6&%xYZZ~$+wg0q:5~QX_Fe-c>SjQ_u,7HixLcj6r$7b`1dW1C2yIUR[@+DD6}%eo'{jS["OKZ(# A!>f/fzoshz'&p1<=:A

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:38:16 UTC	736	OUT	GET /wp-content/uploads/2022/11/FAVICON-100x100.png HTTP/1.1 Host: novanutrix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:38:16 UTC	447	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Thu, 10 Oct 2024 21:38:16 GMT content-type: image/png last-modified: Wed, 16 Nov 2022 03:58:23 GMT accept-ranges: bytes content-length: 2738 date: Thu, 03 Oct 2024 21:38:16 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-03 21:38:16 UTC	921	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 0a 79 49 44 41 54 78 da ed 9d 7b 6c 1c 57 15 87 bf 99 7d 79 6d 67 9b 38 69 5a fa 0a 0d 49 4b 09 45 a0 f2 07 94 82 28 08 89 52 44 51 45 d7 02 c4 4b 16 72 5b a0 3c 2c 10 48 50 01 e5 a1 0a 56 48 e5 55 57 98 42 51 29 36 2a 14 04 54 4d 1f a4 21 a5 69 29 6a 2a a5 2d 71 93 2a 76 e2 c4 ce da 89 d7 fb 9a f7 f0 c7 bd 49 1d d7 af f5 ce cc ce 38 73 a4 95 fc 90 bd b3 f3 cd ef 9c 73 ef 3d f7 5c 85 d8 fc b3 be 21 05 48 01 eb 80 0b 81 8b 81 cd c0 65 c0 26 e0 6c a0 0b e8 04 da 80 94 12 df 35 5f 20 b4 01 17 00 57 03 ef 03 b6 02 e7 01 39 20 0d 2c 78 df 63 20 de 41 58 0b 5c 2e 21 bc 0d d8 06 9c 23 01 2c db 62 20 cd 41 e8 00 de 0c 5c 23 41 6c 93 2a 58 b1 c5 40 56 06 62 03 Data Ascii: PNGIHDRddpTyIDATx{lW}ymg8iZIKE(RDQEKr[<,HPVHUWBQ)6TM!i)j-qvI8ss=\!He&l5_ W9 ,xc AX\.!#,b A\#AlX@Vb
2024-10-03 21:38:16 UTC	1817	IN	Data Raw: c7 94 37 3f e1 b8 9c 3f 71 9c 2d 23 47 c9 ea 46 a4 a0 ac 0a 20 53 86 c5 48 dd 38 fd 83 b9 2e 5d d3 65 b6 1e 3c 42 67 4d 8b 0c 94 c8 03 71 5d 97 03 55 8d 9a ed cc 1b ed 3b ab 1a 5b 0f 1e a1 6b a6 12 09 28 2a 62 1d 3d b2 a6 3b 2e 87 e6 a8 63 2e 94 ac 66 b0 79 74 82 b5 e5 6a e8 a1 a8 88 e5 d7 c8 aa 63 42 33 99 32 ac 25 f3 e2 b4 61 f2 ba d1 71 ce aa d4 42 0d 45 45 2c 1a 45 d2 4c d7 65 ef 4c ed 54 30 5f 0a 4a 46 37 b9 f8 d0 44 a8 63 8a 0a ec 40 2c 1c 45 ce ca a6 cd 51 dd 6c 68 04 d9 5e d7 d9 32 1a de ec 4b 45 94 f6 4c 44 cf 5d c1 84 6e 52 b7 1b 1b 00 2a 40 7b 4d 67 d3 58 91 a4 6d 87 12 c8 7e e0 3f 91 03 82 08 e6 2b 79 c6 15 60 5d a9 cc 79 13 c7 51 1c 37 74 40 ea 88 42 e3 4a 94 80 68 b6 c3 a4 be 72 4f ab ba 70 6e f1 04 b9 4a b8 32 2f 55 ae be ed 06 86 23 15 3f Data Ascii: 7??q-#GF SH8.]e<BgMq]U;[k(b=;.c.fytjcB32%aqBEE,ELeLT0_JF7Dc@,EQlh^2KELD]nR@{MgXm~?+y`]yQ7t@BJhrOpnJ2/U#?