Edit tour

Windows Analysis Report
http://azgop.org/

Overview

General Information

Sample URL:	http://azgop.org/
Analysis ID:	1526476
Tags:	urlscan
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Performs DNS queries to domains with low reputation

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2216,i,6938888415660912267,15961725611878683228,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://azgop.org/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=HOQXCnJeB87xPbh5Gul8FkzS%2BeOPSfPwFc%2FV0Wl6gPiBv%2BFM8O9E7hOvpqcCwWvrhonm8YzVpKZbvoBQm976X8d9rB2jcJc9wLAjM0FQ5foOUSnO%2F301aj%2Bv0j7ftUNZjsc4 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 467Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	HTTPS traffic detected: 104.21.51.99:443 -> 192.168.2.5:50107 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 172.67.154.115:443 -> 192.168.2.5:50155 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49898 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: img.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: img.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: img.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: img.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi2.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi2.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wp.api-football.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wp.api-football.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi2.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: spapi2.vbfast.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wp.api-football.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wp.api-football.xyz
Source:	DNS query: wp.api-football.xyz
Source:	DNS query: wp.api-football.xyz
Source:	DNS query: wp.api-football.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: "https://www.youtube.com/channel/UCFHEJT-sYDrZROz77bAqc5Q/about", equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: <a target="_blank" class="mr-1" rel="nofollow" href="https://www.facebook.com/90phutnettv/"> equals www.facebook.com (Facebook)
Source: chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: "https://www.facebook.com/90phutnettv/", equals www.facebook.com (Facebook)
Source: chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: "https://www.linkedin.com/in/90phutnettv/", equals www.linkedin.com (Linkedin)
Source: chromecache_222.2.dr, chromecache_371.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: "https://www.facebook.com/vonhuchi81/", equals www.facebook.com (Facebook)
Source: chromecache_304.2.dr	String found in binary or memory: "https://www.linkedin.com/in/vonhuchi81/", equals www.linkedin.com (Linkedin)
Source: chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	String found in binary or memory: "https://www.linkedin.com/in/vonhuchi81/", equals www.linkedin.com (Linkedin)
Source: chromecache_190.2.dr, chromecache_439.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/90phutnettv/" /> equals www.facebook.com (Facebook)
Source: chromecache_361.2.dr, chromecache_306.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_361.2.dr, chromecache_306.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_222.2.dr, chromecache_371.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1017095638","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: azgop.org
Source: global traffic	DNS traffic detected: DNS query: vokrugsveta.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 90phuti.cc
Source: global traffic	DNS traffic detected: DNS query: 90phutz37.live
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: cdn.lfastcdn.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: images.dmca.com
Source: global traffic	DNS traffic detected: DNS query: img.vbfast.xyz
Source: global traffic	DNS traffic detected: DNS query: cdn.90phutz37.live
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.90phutr.cc
Source: global traffic	DNS traffic detected: DNS query: spapi.vbfast.xyz
Source: global traffic	DNS traffic detected: DNS query: spapi2.vbfast.xyz
Source: global traffic	DNS traffic detected: DNS query: wp.api-football.xyz
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 05 Oct 2024 22:14:25 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closevary: Accept-Encodingaccess-control-allow-origin: *Cache-Control: public, no-transformCF-Cache-Status: HITAge: 12Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dyCXtD8IUrXffbOr8PmkkKhvTR6mZt9bYDbDyexM6DIECA8CQKcg9eswQkehYY%2BPn4pM2VBasA%2B5FE4keQZwF3DHiXdpSYufTvyrshIgFiPYPUaBruzW%2FF9j4tysmeKekg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8ce0c3b71be68c96-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 05 Oct 2024 22:15:17 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zxCiOnRGk09TFgyxAxKLCf%2FueUErpp8Woc52Jxqv4lBhyZtmCg%2FNt7Dcve%2FNk0Xilvy7jM7zdjGwvWg4cfdkLDA1jE3rlq%2BSiKLWLJcdfCGT5PnEShcReY368NoUKaxwMw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8ce0c4fd5c477c6a-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2216,i,6938888415660912267,15961725611878683228,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://azgop.org/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2216,i,6938888415660912267,15961725611878683228,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.178.136	cdn.lfastcdn.com	United States	13335	CLOUDFLARENETUS	false
169.150.247.37	dmca-images.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.21.8.244	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.32.198	wp.api-football.xyz	United States	13335	CLOUDFLARENETUS	true
172.67.154.115	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.9.228	spapi2.vbfast.xyz	United States	13335	CLOUDFLARENETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	cdn.90phutz37.live	European Union	13335	CLOUDFLARENETUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
188.114.96.3	90phutz37.live	European Union	13335	CLOUDFLARENETUS	false
104.21.52.89	vokrugsveta.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.130.198	cdn.90phutr.cc	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.8.228	img.vbfast.xyz	United States	13335	CLOUDFLARENETUS	true

IP
192.168.2.9
192.168.2.5

Name	Malicious	Reputation
https://cdn.90phutr.cc/2022/06/cap-nhat-tin-tuc-bong-da-moi-nhat-tai-90phut-tv.jpg	false	unknown
https://connect.facebook.net/vi_VN/sdk.js	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/styles/home.css?ver=5.4.10	false	unknown
https://img.vbfast.xyz/football/competition/gx7lm7phy4m2wdk/image/small	false	unknown
https://img.vbfast.xyz/football/team/4jwq2gh4nglm0ve/image/small	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/calendar.svg	false	unknown
https://img.vbfast.xyz/football/team/318q66hop3jqo9j/image/small	false	unknown
https://spapi.vbfast.xyz/football/vote/undefined/match	false	unknown
https://img.vbfast.xyz/football/team/dn1m1gh4o8dmoep/image/small	false	unknown
https://img.vbfast.xyz/football/team/d23xmvkhjj6qg8n/image/small	false	unknown
https://img.vbfast.xyz/football/team/vjxm8gh4ox4r6od/image/small	false	unknown
https://img.vbfast.xyz/football/competition/9vjxm8ghdnr6odg/image/small	false	unknown
https://img.vbfast.xyz/football/team/6ypq3nhzvglmd7o/image/small	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0	false	unknown
https://cdn.90phutz37.live/c.1/450x240/62c34ce95b/2024/09/ian-wright-do-la-pha-bong-ngu-ngoc-nhat-ma-toi-tung-chung-kien.png	false	unknown
https://cdn.90phutz37.live/c.1/450x240/868c3a61dc/2024/09/HLV-Enzo-Maresca.png	false	unknown
https://img.vbfast.xyz/football/team/v2y8m4zhk64ql07/image/small	false	unknown
https://cdn.lfastcdn.com/2024/07/a5f1296f.gif	false	unknown
https://cdn.90phutz37.live/c.1/430x265/9bf9096d99/2024/10/photo_2024-10-06_06-09-40-1.jpg	false	unknown
https://img.vbfast.xyz/football/team/p4jwq2gh3kpm0ve/image/small	false	unknown
https://90phutz37.live/wp-content/plugins/api-sport/public/js/result.js?id=45bc7881c2efcc70977a674680c1443b	false	unknown
https://img.vbfast.xyz/football/competitor/yl5ergphjd4r8k0/image	false	unknown
https://cdn.lfastcdn.com/2024/09/MON-1.jpg	false	unknown
https://img.vbfast.xyz/football/team/kn54qllhyn2qvy9/image/small	false	unknown
https://img.vbfast.xyz/football/competition/z318q6ntky6mo9j/image/small	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/rating.png	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/flag.svg	false	unknown
https://cdn.90phutz37.live/c.1/450x240/415e50c33b/2024/09/that-dang-tiec-cho-u20-viet-nam.png	false	unknown
https://90phutz37.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	unknown
https://cdn.90phutz37.live/c.1/450x240/e39976b806/2024/09/sao-arsenal-noi-dieu-that-long-sau-khi-giup-doi-nha-mang-ve-3-diem.png	false	unknown
https://img.vbfast.xyz/football/team/pxwrxlhgngvryk0/image/small	false	unknown
https://cdn.90phutr.cc/2022/06/tin-bong-da-cap-nhat-24h-hom-nay.jpg	false	unknown
https://90phutz37.live/nha-cai-uy-tin/	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/fire.svg	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/styles/custom.css?ver=1726501197	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/live-ind.svg	false	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/bongda.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://img.vbfast.xyz/basketball/team/d23xmv1tz63mg8n/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/tin-tuc/page/4/	chromecache_280.2.dr	false		unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/social/icon-scoop.svg	chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://cdn.90phutz37.live/c.1/450x240/d8e7ec6200/2024/10/riccardo-calafiori-la-ban-hop-dong-chat-lu	chromecache_280.2.dr	false		unknown
https://www.youtube.com/channel/UCFHEJT-sYDrZROz77bAqc5Q/about	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://90phutz37.live/highlight/west-ham-vs-ipswich-town-2100-05-10/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/gx7lm73tdjlr2wd/image/small	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/z318q6ntd82mo9j/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/social/icon-behance.svg	chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/dn1m17te5vdmoep/image/small	chromecache_304.2.dr	false		unknown
https://www.diigo.com/profile/90phutnettv/	chromecache_304.2.dr	false		unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/social/icon-flickr.svg	chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://www.internalfb.com/intern/invariant/	chromecache_222.2.dr, chromecache_371.2.dr	false	URL Reputation: safe	unknown
https://90phutz37.live/tin-tuc/page/3/	chromecache_280.2.dr	false		unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_222.2.dr, chromecache_371.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_382.2.dr, chromecache_316.2.dr	false		unknown
https://90phutz37.live/wp-json/oembed/1.0/embed?url=https%3A%2F%2F90phutz37.live%2F&format=xml	chromecache_304.2.dr	false		unknown
https://90phutz37.live/highlight/union-berlin-vs-dortmund-2030-05-10/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/d23xmv1tzy3mg8n/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/wp-json/	chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/kn54ql7t0xlrvy9/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/tin-tuc/page/2/	chromecache_280.2.dr	false		unknown
https://90phutnettv.tumblr.com/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/4zp5rzkte37r82w/image/small	chromecache_304.2.dr	false		unknown
https://15.235.211.177/xoilac	chromecache_304.2.dr	false		unknown
https://90phutr.cc/tin-tuc/	chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://90phutz37.live/truc-tiep/corinthians-sp-vs-internacional-rs-luc-0500-ngay-06-10-2024/?link=0	chromecache_304.2.dr	false		unknown
https://vi.gravatar.com/baloidinh91#photo-2	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://spapi.vbfast.xyz/football/odds-live-changes/$	chromecache_484.2.dr, chromecache_209.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/e4wyrn1t16oq86p/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/highlight/as-saint-etienne-vs-aj-auxerre-2200-05-10/	chromecache_304.2.dr	false		unknown
https://www.flickr.com/people/90phutnettv/	chromecache_304.2.dr	false		unknown
https://t.me/s/tv90phutnet	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://medium.com/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/v2y8m4ptdeeml07/image/small	chromecache_304.2.dr	false		unknown
https://github.com/FezVrasta/popper.js/pull/715	chromecache_382.2.dr, chromecache_316.2.dr	false		unknown
https://90phutz37.live/highlight/al-nassr-vs-al-orubah-2215-05-10/	chromecache_304.2.dr	false		unknown
https://soundcloud.com/baloidinh91/	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://90phutz37.live/tin-tuc/sao-arsenal-noi-dieu-that-long-sau-khi-giup-doi-nha-mang-ve-3-diem-qu	chromecache_280.2.dr	false		unknown
https://cdn.90phutr.cc/2022/06/kqbd-hom-nay-nhanh-va-chinh-xac-nhat-tai-90phut-tv-768x480.jpg	chromecache_439.2.dr	false		unknown
https://www.producthunt.com/	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://cdn.90phutr.cc/2022/06/kqbd-hom-nay-nhanh-va-chinh-xac-nhat-tai-90phut-tv-372x233.jpg	chromecache_439.2.dr	false		unknown
https://90phutz37.live/wp-json/oembed/1.0/embed?url=https%3A%2F%2F90phutz37.live%2Fket-qua%2F	chromecache_439.2.dr	false		unknown
https://90phutz37.live/wp-content/plugins/api-sport/public/js/manifest.js?id=b83f1846ec3ef751c1df37f	chromecache_439.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/e4wyrn1t1yoq86p/image/small	chromecache_304.2.dr	false		unknown
https://github.com/webpack-contrib/sass-loader#imports	chromecache_481.2.dr	false		unknown
https://90phutz37.live/tin-tuc/liverpool-gia-nhap-cuoc-dua-chieu-mo-hau-ve-sevilla-cung-chelsea-real	chromecache_280.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/kn54ql7ty45rvy9/image/small	chromecache_304.2.dr	false		unknown
https://90phutr.cc/ty-le-keo/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/4zp5rzkteo7r82w/image/small	chromecache_304.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_382.2.dr, chromecache_481.2.dr, chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://90phutz37.live/wp-content/themes/bongda2/dist/images/social/icon-messages.svg	chromecache_190.2.dr, chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://goo.gl/pxwQGp)	chromecache_382.2.dr, chromecache_316.2.dr	false		unknown
https://90phutr.cc/#Nhung_ly_do_ma_ban_nen_xem_bong_da_truc_tiep_tai_90_Phut_TV	chromecache_304.2.dr	false		unknown
https://90phutr.cc/livescore/	chromecache_304.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/ednm9kt9434ryox/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/truc-tiep/los-angeles-clippers-vs-golden-state-warriors-luc-0600-ngay-06-10-2	chromecache_304.2.dr	false		unknown
https://www.pinterest.com/baloidinh91/	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
https://90phutr.cc/highlight/	chromecache_304.2.dr	false		unknown
https://ok.ru/tv90phutnet/	chromecache_439.2.dr, chromecache_280.2.dr, chromecache_304.2.dr	false		unknown
http://127.0.0.1/bongda/wp-content/themes/bongda/dist/images/bg-stadium.jpg)	chromecache_481.2.dr	false		unknown
https://img.vbfast.xyz/basketball/team/56ypq3kty49md7o/image/small	chromecache_304.2.dr	false		unknown
https://90phutz37.live/tin-tuc/jackson-da-biet-cach-de-toa-sang-o-chelsea/	chromecache_280.2.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526476
Start date and time:	2024-10-06 00:13:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://azgop.org/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.troj.win@20/512@64/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://90phutz37.live/tin-tuc/ Browse: https://90phutz37.live/nha-cai-uy-tin/ Browse: https://90phutz37.live/ket-qua/

Input	Output
URL: https://90phutz37.live/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://90phutz37.live/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://90phutz37.live/tin-tuc/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://90phutz37.live/tin-tuc/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://90phutz37.live/nha-cai-uy-tin/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://90phutz37.live/ket-qua/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:14:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982261872194635
Encrypted:	false
SSDEEP:	48:8HdzT7DOHMZidAKZdA19ehwiZUklqehRy+3:8drxqy
MD5:	D46E41C9034C294B1BD049DB80050100
SHA1:	C4C7A8D4B096C3D02538D720C37CDADF4A9FAA9B
SHA-256:	A7157A874DA656549D5BA4BA4BBEF547E0C155471DC5ECF28B0FAA0E16E331E7
SHA-512:	59089459087096C3ED84470F3EEEEF06A83FC7061592E611EE0621BD283087BF161C817859BD5DAB831820AEB2522550BA6A2168B7EBD5EBD135F18113D73576
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....6k..s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IEY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............v.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 00:14:15.170530081 CEST	192.168.2.5	1.1.1.1	0x2186	Standard query (0)	azgop.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.173295021 CEST	192.168.2.5	1.1.1.1	0x9759	Standard query (0)	azgop.org	65	IN (0x0001)	false
Oct 6, 2024 00:14:15.191277027 CEST	192.168.2.5	1.1.1.1	0xdf0e	Standard query (0)	azgop.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.191426039 CEST	192.168.2.5	1.1.1.1	0x5d28	Standard query (0)	azgop.org	65	IN (0x0001)	false
Oct 6, 2024 00:14:16.337426901 CEST	192.168.2.5	1.1.1.1	0x7615	Standard query (0)	vokrugsveta.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:16.337738037 CEST	192.168.2.5	1.1.1.1	0xdb0a	Standard query (0)	vokrugsveta.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:17.501486063 CEST	192.168.2.5	1.1.1.1	0x44d4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:17.501974106 CEST	192.168.2.5	1.1.1.1	0x1dc8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:18.147192955 CEST	192.168.2.5	1.1.1.1	0xc266	Standard query (0)	90phuti.cc	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:18.147360086 CEST	192.168.2.5	1.1.1.1	0x1c5d	Standard query (0)	90phuti.cc	65	IN (0x0001)	false
Oct 6, 2024 00:14:19.579495907 CEST	192.168.2.5	1.1.1.1	0xa2d8	Standard query (0)	90phutz37.live	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.579847097 CEST	192.168.2.5	1.1.1.1	0x7af5	Standard query (0)	90phutz37.live	65	IN (0x0001)	false
Oct 6, 2024 00:14:21.170202971 CEST	192.168.2.5	1.1.1.1	0x74ba	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:21.170485020 CEST	192.168.2.5	1.1.1.1	0x70b5	Standard query (0)	s.w.org	65	IN (0x0001)	false
Oct 6, 2024 00:14:22.155891895 CEST	192.168.2.5	1.1.1.1	0x9430	Standard query (0)	cdn.lfastcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.156033993 CEST	192.168.2.5	1.1.1.1	0x6bd8	Standard query (0)	cdn.lfastcdn.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:23.121753931 CEST	192.168.2.5	1.1.1.1	0xf369	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.123214006 CEST	192.168.2.5	1.1.1.1	0x912c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:23.650913000 CEST	192.168.2.5	1.1.1.1	0xff84	Standard query (0)	90phutz37.live	65	IN (0x0001)	false
Oct 6, 2024 00:14:23.650913000 CEST	192.168.2.5	1.1.1.1	0xb504	Standard query (0)	90phutz37.live	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.766953945 CEST	192.168.2.5	1.1.1.1	0x6189	Standard query (0)	images.dmca.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.767215967 CEST	192.168.2.5	1.1.1.1	0xb9b9	Standard query (0)	images.dmca.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:23.771404982 CEST	192.168.2.5	1.1.1.1	0x1e41	Standard query (0)	img.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.771667004 CEST	192.168.2.5	1.1.1.1	0x560	Standard query (0)	img.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:24.756150961 CEST	192.168.2.5	1.1.1.1	0xbb4d	Standard query (0)	cdn.90phutz37.live	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.756361008 CEST	192.168.2.5	1.1.1.1	0xf3bb	Standard query (0)	cdn.90phutz37.live	65	IN (0x0001)	false
Oct 6, 2024 00:14:24.830845118 CEST	192.168.2.5	1.1.1.1	0x7c93	Standard query (0)	img.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.831007004 CEST	192.168.2.5	1.1.1.1	0xb0af	Standard query (0)	img.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:24.999329090 CEST	192.168.2.5	1.1.1.1	0x787e	Standard query (0)	images.dmca.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.999546051 CEST	192.168.2.5	1.1.1.1	0x8798	Standard query (0)	images.dmca.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:26.221730947 CEST	192.168.2.5	1.1.1.1	0xc569	Standard query (0)	cdn.90phutz37.live	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.221929073 CEST	192.168.2.5	1.1.1.1	0x4671	Standard query (0)	cdn.90phutz37.live	65	IN (0x0001)	false
Oct 6, 2024 00:14:28.269581079 CEST	192.168.2.5	1.1.1.1	0xd9c8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.269750118 CEST	192.168.2.5	1.1.1.1	0x8760	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:29.507802010 CEST	192.168.2.5	1.1.1.1	0xb5a4	Standard query (0)	cdn.90phutr.cc	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.508198023 CEST	192.168.2.5	1.1.1.1	0x9d1c	Standard query (0)	cdn.90phutr.cc	65	IN (0x0001)	false
Oct 6, 2024 00:14:30.249279976 CEST	192.168.2.5	1.1.1.1	0x760d	Standard query (0)	spapi.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.249808073 CEST	192.168.2.5	1.1.1.1	0xc101	Standard query (0)	spapi.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.173918962 CEST	192.168.2.5	1.1.1.1	0x6a83	Standard query (0)	spapi2.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.174312115 CEST	192.168.2.5	1.1.1.1	0xc33e	Standard query (0)	spapi2.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.541811943 CEST	192.168.2.5	1.1.1.1	0x662e	Standard query (0)	cdn.lfastcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.542242050 CEST	192.168.2.5	1.1.1.1	0x3dc0	Standard query (0)	cdn.lfastcdn.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.565356016 CEST	192.168.2.5	1.1.1.1	0x4244	Standard query (0)	cdn.90phutr.cc	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.565628052 CEST	192.168.2.5	1.1.1.1	0x1fae	Standard query (0)	cdn.90phutr.cc	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.247564077 CEST	192.168.2.5	1.1.1.1	0xd9d6	Standard query (0)	wp.api-football.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.247734070 CEST	192.168.2.5	1.1.1.1	0x1d4	Standard query (0)	wp.api-football.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.494201899 CEST	192.168.2.5	1.1.1.1	0xc194	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.494443893 CEST	192.168.2.5	1.1.1.1	0x1305	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.649678946 CEST	192.168.2.5	1.1.1.1	0x338e	Standard query (0)	spapi.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.649837017 CEST	192.168.2.5	1.1.1.1	0xd3f3	Standard query (0)	spapi.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.670116901 CEST	192.168.2.5	1.1.1.1	0x27e3	Standard query (0)	spapi2.vbfast.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.670258999 CEST	192.168.2.5	1.1.1.1	0x5e1a	Standard query (0)	spapi2.vbfast.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:33.619469881 CEST	192.168.2.5	1.1.1.1	0x99d8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:33.619705915 CEST	192.168.2.5	1.1.1.1	0xd757	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:34.101015091 CEST	192.168.2.5	1.1.1.1	0xdd96	Standard query (0)	wp.api-football.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.101444006 CEST	192.168.2.5	1.1.1.1	0xee23	Standard query (0)	wp.api-football.xyz	65	IN (0x0001)	false
Oct 6, 2024 00:14:34.215827942 CEST	192.168.2.5	1.1.1.1	0xf7dd	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.216057062 CEST	192.168.2.5	1.1.1.1	0x46e1	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:35.485657930 CEST	192.168.2.5	1.1.1.1	0x7067	Standard query (0)	cdn.lfastcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:38.351398945 CEST	192.168.2.5	1.1.1.1	0xe98e	Standard query (0)	wp.api-football.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:07.032895088 CEST	192.168.2.5	1.1.1.1	0x588e	Standard query (0)	wp.api-football.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:23.139998913 CEST	192.168.2.5	1.1.1.1	0xad90	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:23.140374899 CEST	192.168.2.5	1.1.1.1	0xfa23	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 00:15:26.796941042 CEST	192.168.2.5	1.1.1.1	0x2779	Standard query (0)	wp.api-football.xyz	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 00:14:15.183474064 CEST	1.1.1.1	192.168.2.5	0x9759	No error (0)	azgop.org			65	IN (0x0001)	false
Oct 6, 2024 00:14:15.195512056 CEST	1.1.1.1	192.168.2.5	0x2186	No error (0)	azgop.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.195512056 CEST	1.1.1.1	192.168.2.5	0x2186	No error (0)	azgop.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.203634024 CEST	1.1.1.1	192.168.2.5	0xdf0e	No error (0)	azgop.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.203634024 CEST	1.1.1.1	192.168.2.5	0xdf0e	No error (0)	azgop.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:15.209285975 CEST	1.1.1.1	192.168.2.5	0x5d28	No error (0)	azgop.org			65	IN (0x0001)	false
Oct 6, 2024 00:14:16.351526022 CEST	1.1.1.1	192.168.2.5	0x7615	No error (0)	vokrugsveta.com		104.21.52.89	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:16.351526022 CEST	1.1.1.1	192.168.2.5	0x7615	No error (0)	vokrugsveta.com		172.67.197.73	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:16.351913929 CEST	1.1.1.1	192.168.2.5	0xdb0a	No error (0)	vokrugsveta.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:17.508809090 CEST	1.1.1.1	192.168.2.5	0x44d4	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:17.508825064 CEST	1.1.1.1	192.168.2.5	0x1dc8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:18.159112930 CEST	1.1.1.1	192.168.2.5	0xc266	No error (0)	90phuti.cc		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:18.159112930 CEST	1.1.1.1	192.168.2.5	0xc266	No error (0)	90phuti.cc		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:18.159425974 CEST	1.1.1.1	192.168.2.5	0x1c5d	No error (0)	90phuti.cc			65	IN (0x0001)	false
Oct 6, 2024 00:14:19.591798067 CEST	1.1.1.1	192.168.2.5	0x7af5	No error (0)	90phutz37.live			65	IN (0x0001)	false
Oct 6, 2024 00:14:19.592192888 CEST	1.1.1.1	192.168.2.5	0xa2d8	No error (0)	90phutz37.live		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.592192888 CEST	1.1.1.1	192.168.2.5	0xa2d8	No error (0)	90phutz37.live		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:21.177561045 CEST	1.1.1.1	192.168.2.5	0x74ba	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.163316965 CEST	1.1.1.1	192.168.2.5	0x9430	No error (0)	cdn.lfastcdn.com		172.67.178.136	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.163316965 CEST	1.1.1.1	192.168.2.5	0x9430	No error (0)	cdn.lfastcdn.com		104.21.51.99	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.171320915 CEST	1.1.1.1	192.168.2.5	0x6bd8	No error (0)	cdn.lfastcdn.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:23.129882097 CEST	1.1.1.1	192.168.2.5	0xf369	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.774643898 CEST	1.1.1.1	192.168.2.5	0xb9b9	No error (0)	images.dmca.com	dmca-images.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:23.775584936 CEST	1.1.1.1	192.168.2.5	0x6189	No error (0)	images.dmca.com	dmca-images.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:23.775584936 CEST	1.1.1.1	192.168.2.5	0x6189	No error (0)	dmca-images.b-cdn.net		169.150.247.37	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.776998043 CEST	1.1.1.1	192.168.2.5	0xb504	No error (0)	90phutz37.live		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.776998043 CEST	1.1.1.1	192.168.2.5	0xb504	No error (0)	90phutz37.live		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.780509949 CEST	1.1.1.1	192.168.2.5	0x1e41	No error (0)	img.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.780509949 CEST	1.1.1.1	192.168.2.5	0x1e41	No error (0)	img.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.780509949 CEST	1.1.1.1	192.168.2.5	0x1e41	No error (0)	img.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:23.781707048 CEST	1.1.1.1	192.168.2.5	0x560	No error (0)	img.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:23.802731991 CEST	1.1.1.1	192.168.2.5	0xff84	No error (0)	90phutz37.live			65	IN (0x0001)	false
Oct 6, 2024 00:14:24.840116978 CEST	1.1.1.1	192.168.2.5	0xb0af	No error (0)	img.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:24.843594074 CEST	1.1.1.1	192.168.2.5	0x7c93	No error (0)	img.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.843594074 CEST	1.1.1.1	192.168.2.5	0x7c93	No error (0)	img.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.843594074 CEST	1.1.1.1	192.168.2.5	0x7c93	No error (0)	img.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.854197025 CEST	1.1.1.1	192.168.2.5	0xf3bb	No error (0)	cdn.90phutz37.live			65	IN (0x0001)	false
Oct 6, 2024 00:14:24.912997961 CEST	1.1.1.1	192.168.2.5	0xbb4d	No error (0)	cdn.90phutz37.live		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.912997961 CEST	1.1.1.1	192.168.2.5	0xbb4d	No error (0)	cdn.90phutz37.live		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.006622076 CEST	1.1.1.1	192.168.2.5	0x787e	No error (0)	images.dmca.com	dmca-images.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:25.006622076 CEST	1.1.1.1	192.168.2.5	0x787e	No error (0)	dmca-images.b-cdn.net		169.150.247.37	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.007651091 CEST	1.1.1.1	192.168.2.5	0x8798	No error (0)	images.dmca.com	dmca-images.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:26.238847017 CEST	1.1.1.1	192.168.2.5	0x4671	No error (0)	cdn.90phutz37.live			65	IN (0x0001)	false
Oct 6, 2024 00:14:26.379853964 CEST	1.1.1.1	192.168.2.5	0xc569	No error (0)	cdn.90phutz37.live		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.379853964 CEST	1.1.1.1	192.168.2.5	0xc569	No error (0)	cdn.90phutz37.live		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.217468023 CEST	1.1.1.1	192.168.2.5	0xe397	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:28.217468023 CEST	1.1.1.1	192.168.2.5	0xe397	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.277498007 CEST	1.1.1.1	192.168.2.5	0xd9c8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.277498007 CEST	1.1.1.1	192.168.2.5	0xd9c8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.277707100 CEST	1.1.1.1	192.168.2.5	0x8760	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:29.522677898 CEST	1.1.1.1	192.168.2.5	0x9d1c	No error (0)	cdn.90phutr.cc			65	IN (0x0001)	false
Oct 6, 2024 00:14:29.524226904 CEST	1.1.1.1	192.168.2.5	0xb5a4	No error (0)	cdn.90phutr.cc		172.67.130.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.524226904 CEST	1.1.1.1	192.168.2.5	0xb5a4	No error (0)	cdn.90phutr.cc		104.21.8.244	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.260138988 CEST	1.1.1.1	192.168.2.5	0x760d	No error (0)	spapi.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.260138988 CEST	1.1.1.1	192.168.2.5	0x760d	No error (0)	spapi.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.260138988 CEST	1.1.1.1	192.168.2.5	0x760d	No error (0)	spapi.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.260423899 CEST	1.1.1.1	192.168.2.5	0xc101	No error (0)	spapi.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:31.185264111 CEST	1.1.1.1	192.168.2.5	0x6a83	No error (0)	spapi2.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.185264111 CEST	1.1.1.1	192.168.2.5	0x6a83	No error (0)	spapi2.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.185264111 CEST	1.1.1.1	192.168.2.5	0x6a83	No error (0)	spapi2.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.193423033 CEST	1.1.1.1	192.168.2.5	0xc33e	No error (0)	spapi2.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:31.558228016 CEST	1.1.1.1	192.168.2.5	0x3dc0	No error (0)	cdn.lfastcdn.com			65	IN (0x0001)	false
Oct 6, 2024 00:14:31.578149080 CEST	1.1.1.1	192.168.2.5	0x4244	No error (0)	cdn.90phutr.cc		104.21.8.244	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.578149080 CEST	1.1.1.1	192.168.2.5	0x4244	No error (0)	cdn.90phutr.cc		172.67.130.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.581434965 CEST	1.1.1.1	192.168.2.5	0x1fae	No error (0)	cdn.90phutr.cc			65	IN (0x0001)	false
Oct 6, 2024 00:14:31.599270105 CEST	1.1.1.1	192.168.2.5	0x662e	No error (0)	cdn.lfastcdn.com		172.67.178.136	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.599270105 CEST	1.1.1.1	192.168.2.5	0x662e	No error (0)	cdn.lfastcdn.com		104.21.51.99	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.995201111 CEST	1.1.1.1	192.168.2.5	0xb6b5	No error (0)	windowsupdatebg.s.llnwi.net		46.228.146.0	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.995201111 CEST	1.1.1.1	192.168.2.5	0xb6b5	No error (0)	windowsupdatebg.s.llnwi.net		46.228.146.128	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.255610943 CEST	1.1.1.1	192.168.2.5	0xd9d6	No error (0)	wp.api-football.xyz		104.21.32.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.255610943 CEST	1.1.1.1	192.168.2.5	0xd9d6	No error (0)	wp.api-football.xyz		172.67.154.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.259696960 CEST	1.1.1.1	192.168.2.5	0x1d4	No error (0)	wp.api-football.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:32.600524902 CEST	1.1.1.1	192.168.2.5	0xc194	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:32.600524902 CEST	1.1.1.1	192.168.2.5	0xc194	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.600539923 CEST	1.1.1.1	192.168.2.5	0x1305	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:32.600539923 CEST	1.1.1.1	192.168.2.5	0x1305	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:32.600539923 CEST	1.1.1.1	192.168.2.5	0x1305	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:32.687239885 CEST	1.1.1.1	192.168.2.5	0x338e	No error (0)	spapi.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687239885 CEST	1.1.1.1	192.168.2.5	0x338e	No error (0)	spapi.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687239885 CEST	1.1.1.1	192.168.2.5	0x338e	No error (0)	spapi.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687272072 CEST	1.1.1.1	192.168.2.5	0xd3f3	No error (0)	spapi.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:32.687403917 CEST	1.1.1.1	192.168.2.5	0x27e3	No error (0)	spapi2.vbfast.xyz		104.26.8.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687403917 CEST	1.1.1.1	192.168.2.5	0x27e3	No error (0)	spapi2.vbfast.xyz		104.26.9.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687403917 CEST	1.1.1.1	192.168.2.5	0x27e3	No error (0)	spapi2.vbfast.xyz		172.67.73.74	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.687427998 CEST	1.1.1.1	192.168.2.5	0x5e1a	No error (0)	spapi2.vbfast.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:33.626597881 CEST	1.1.1.1	192.168.2.5	0xd757	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:33.628638983 CEST	1.1.1.1	192.168.2.5	0x99d8	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:33.662873030 CEST	1.1.1.1	192.168.2.5	0xdfa7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:33.662873030 CEST	1.1.1.1	192.168.2.5	0xdfa7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.111537933 CEST	1.1.1.1	192.168.2.5	0xee23	No error (0)	wp.api-football.xyz			65	IN (0x0001)	false
Oct 6, 2024 00:14:34.112720966 CEST	1.1.1.1	192.168.2.5	0xdd96	No error (0)	wp.api-football.xyz		172.67.154.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.112720966 CEST	1.1.1.1	192.168.2.5	0xdd96	No error (0)	wp.api-football.xyz		104.21.32.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.222775936 CEST	1.1.1.1	192.168.2.5	0xf7dd	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:34.222775936 CEST	1.1.1.1	192.168.2.5	0xf7dd	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:34.222790003 CEST	1.1.1.1	192.168.2.5	0x46e1	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:34.222790003 CEST	1.1.1.1	192.168.2.5	0x46e1	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:34.222790003 CEST	1.1.1.1	192.168.2.5	0x46e1	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:35.519613981 CEST	1.1.1.1	192.168.2.5	0x7067	No error (0)	cdn.lfastcdn.com		104.21.51.99	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:35.519613981 CEST	1.1.1.1	192.168.2.5	0x7067	No error (0)	cdn.lfastcdn.com		172.67.178.136	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:38.360124111 CEST	1.1.1.1	192.168.2.5	0xe98e	No error (0)	wp.api-football.xyz		172.67.154.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:38.360124111 CEST	1.1.1.1	192.168.2.5	0xe98e	No error (0)	wp.api-football.xyz		104.21.32.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:07.049568892 CEST	1.1.1.1	192.168.2.5	0x588e	No error (0)	wp.api-football.xyz		104.21.32.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:07.049568892 CEST	1.1.1.1	192.168.2.5	0x588e	No error (0)	wp.api-football.xyz		172.67.154.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:23.146748066 CEST	1.1.1.1	192.168.2.5	0xad90	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:26.832431078 CEST	1.1.1.1	192.168.2.5	0x2779	No error (0)	wp.api-football.xyz		172.67.154.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:15:26.832431078 CEST	1.1.1.1	192.168.2.5	0x2779	No error (0)	wp.api-football.xyz		104.21.32.198	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:16 UTC	652	OUT	GET / HTTP/1.1 Host: azgop.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:16 UTC	647	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 05 Oct 2024 22:14:16 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Sat, 05 Oct 2024 23:14:16 GMT Location: https://vokrugsveta.com/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HOvjCdLGqMlf%2Ff2Q8VgHBImYYAn4jURA5h3VBToh8KCOPhED45emXffJLpQQzzKRqKKGSt0DSLaLD3hsNvZFtsUX0xq0MUsldzUlZ1KqnpF1RLdW0IcHqZx2U9o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce0c37fbbf67cff-EWR
2024-10-05 22:14:16 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	658	OUT	GET / HTTP/1.1 Host: vokrugsveta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:18 UTC	728	IN	HTTP/1.1 302 Moved Temporarily Date: Sat, 05 Oct 2024 22:14:18 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://90phuti.cc/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2Ws3WTbR4g0ng739w9tJMp6oI5VddS62TIX4LfdMRyQhy1QVF3oIVipwHU%2FibPI%2Bb495y8%2Bx5gnJsjH4KOy%2FBLDeR33egysBrTXCzmFhxk3s1gHZ%2B6Fjac3e6XVHXqlafI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce0c38b19ab72ab-EWR
2024-10-05 22:14:18 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:14:19 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=66654 Date: Sat, 05 Oct 2024 22:14:19 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://azgop.org/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Windows Analysis Report
http://azgop.org/

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:19 UTC	653	OUT	GET / HTTP/1.1 Host: 90phuti.cc Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:19 UTC	718	IN	HTTP/1.1 302 Moved Temporarily Date: Sat, 05 Oct 2024 22:14:19 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://90phutz37.live/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8dOiC6BmM6lhC18qOZXOigXTrppBvP2JdREZbM04%2Bi%2FPUnL5nK51JkF0hsDnVNt1DYNmQosJlifozCanpW1hYVaiqYDAQ6CwdfIunRZk%2FES3jeqQUeblCU4nsV33"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce0c39208ed43ca-EWR
2024-10-05 22:14:19 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:14:20 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66728 Date: Sat, 05 Oct 2024 22:14:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-05 22:14:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	657	OUT	GET / HTTP/1.1 Host: 90phutz37.live Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:20 UTC	880	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding link: <https://90phutz37.live/wp-json/>; rel="https://api.w.org/" link: <https://90phutz37.live/>; rel=shortlink Cache-Control: public, s-maxage=14400, max-age=1 x-fastcgi-cache: HIT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 8 Last-Modified: Sat, 05 Oct 2024 22:14:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vC7L4M4EijFHfzHh2j159%2FWoNkfTaYovIlya%2BaY3ymL4W0PLfRy%2FXqyPxmkFHoWay%2Be45F0HI3tdTfULNbRUGyJXjIhOgrEuCvnayOfPspPzBtLwAtrVw2WHnYxLsYNpCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce0c39af9f8c343-EWR
2024-10-05 22:14:20 UTC	489	IN	Data Raw: 37 63 32 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 39 30 70 68 75 74 7a 33 37 2e 6c 69 76 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 6f 6e 67 64 61 32 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0d 0a Data Ascii: 7c2e<!doctype html><html lang="vi"> <head> <link rel="icon" href="https://90phutz37.live/wp-content/themes/bongda2/dist/images/favicon.png" type="image/x-icon"> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge">
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 22 2f 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 39 30 50 68 75 74 20 54 56 20 54 72 e1 bb b1 63 20 54 69 e1 ba bf 70 20 42 c3 b3 6e 67 20 c4 90 c3 a1 20 2d 20 4c 69 6e 6b 20 78 65 6d 20 54 72 e1 bb b1 63 20 54 75 79 e1 ba bf 6e 20 68 c3 b4 6d 20 6e 61 79 3c 2f 74 69 74 6c 65 3e 0a 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 c6 b0 e1 bb 9d 6e 67 20 74 68 75 e1 ba ad 74 20 74 72 e1 bb b1 63 20 74 69 e1 ba bf 70 20 62 c3 b3 6e 67 20 c4 91 c3 a1 20 74 e1 ba a1 69 20 39 30 50 68 75 74 72 2e 74 76 e2 9c 85 20 4c 69 Data Ascii: , max-snippet:-1, max-video-preview:-1, max-image-preview:large"/> <title>90Phut TV Trc Tip Bng - Link xem Trc Tuyn hm nay</title><meta name="description" content="Tng thut trc tip bng ti 90Phutr.tv Li
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 54 c6 b0 e1 bb 9d 6e 67 20 74 68 75 e1 ba ad 74 20 74 72 e1 bb b1 63 20 74 69 e1 ba bf 70 20 62 c3 b3 6e 67 20 c4 91 c3 a1 20 74 e1 ba a1 69 20 39 30 50 68 75 74 72 2e 74 76 e2 9c 85 20 4c 69 6e 6b 20 78 65 6d 20 62 c3 b3 6e 67 20 c4 91 c3 a1 20 74 72 e1 bb b1 63 20 74 75 79 e1 ba bf 6e 20 56 61 6f 72 6f 69 20 54 56 2c 20 56 54 43 2c 20 56 54 56 2c 20 4b 2b 2c 20 46 50 54 20 73 69 c3 aa 75 20 6e c3 a9 74 20 74 e1 ba a1 69 20 6b c3 aa 6e 68 20 74 72 75 63 74 69 65 70 62 6f 6e 67 64 61 20 39 30 50 68 75 74 20 54 56 2e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 39 30 50 68 75 74 20 54 56 20 54 72 e1 bb b1 63 20 54 69 e1 ba bf 70 20 42 c3 b3 6e 67 20 c4 90 Data Ascii: ontent="Tng thut trc tip bng ti 90Phutr.tv Link xem bng trc tuyn Vaoroi TV, VTC, VTV, K+, FPT siu nt ti knh tructiepbongda 90Phut TV." /><meta name="twitter:title" content="90Phut TV Trc Tip Bng
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 76 65 72 3d 31 37 32 36 35 30 31 31 39 37 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 61 67 65 2f 68 6f 6d 65 2e 63 73 73 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 39 30 70 68 75 74 7a 33 37 2e 6c 69 76 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 6f 6e 67 64 61 32 2f 64 69 73 74 2f 73 74 79 6c 65 73 2f 68 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 35 2e 34 2e 31 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 61 67 65 2f 64 65 74 61 69 6c 2d 73 74 79 Data Ascii: ver=1726501197' type='text/css' media='all' /><link rel='stylesheet' id='sage/home.css-css' href='https://90phutz37.live/wp-content/themes/bongda2/dist/styles/home.css?ver=5.4.10' type='text/css' media='all' /><link rel='stylesheet' id='sage/detail-sty
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 61 6e 73 2b 50 72 6f 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 34 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 39 30 30 3b 31 2c 34 30 30 3b 31 2c 36 30 30 3b 31 2c 37 30 30 3b 31 2c 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 77 67 68 74 40 34 30 30 3b 36 30 30 26 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 3a 77 67 68 74 40 34 30 30 3b 36 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 3e 0d 0a 20 20 Data Ascii: ans+Pro:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900&display=swap'); </style> <link href="//fonts.googleapis.com/css2?family=Poppins:wght@400;600&family=Nunito:wght@400;600&display=swap" rel="stylesheet" type='text/css' media='all'>
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 70 78 3b 7d 0d 0a 20 20 23 6d 65 6e 75 2d 6d 61 69 6e 2d 6d 65 6e 75 20 6c 69 2e 73 74 79 6c 65 2d 31 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 38 61 37 34 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 70 65 6e 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: n-items: center;-webkit-box-pack: center;-ms-flex-pack: center;justify-content: center;padding-left: 12px;} #menu-main-menu li.style-1 a{background: #28a745 !important;color: #fff !important;border-radius: 4px;font-family: Open Sans;font-style: normal;
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 23 6d 65 6e 75 2d 6d 61 69 6e 2d 6d 65 6e 75 20 6c 69 2e 73 74 79 6c 65 2d 33 20 61 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 37 61 32 62 38 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 70 65 6e 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: background-size: contain !important; } #menu-main-menu li.style-3 a { background: #17a2b8; color: #fff; border-radius: 4px;font-family: Open Sans;font-style: normal;font-weight: 700;font-size: 12px;line-height: 17px;text-transform:
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 70 2e 6d 62 2d 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 20 20 2e 6d 61 74 63 68 65 73 5f 5f 69 74 65 6d 20 70 2e 6d 62 2d 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 20 20 40 6d 65 64 69 61 20 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 0d 0a 20 20 20 20 70 2e 6d 62 2d 30 20 69 6d 67 20 7b 68 65 69 67 68 74 3a 20 35 30 70 78 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0d 0a 20 20 20 20 23 6d 6f 70 68 6f 6e 67 20 7b 68 65 69 67 68 74 3a 20 33 31 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 20 20 20 20 2e 73 74 69 63 6b 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: p.mb-0{margin-bottom: 5px !important;} .matches__item p.mb-0{margin-bottom: 0px !important;} @media screen and (max-width: 991px) { p.mb-0 img {height: 50px;width: 100%;} #mophong {height: 315px !important;} .sticky { width:
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 20 23 66 66 66 3b 7d 0d 0a 20 20 2e 6d 61 69 6e 2d 6d 65 6e 75 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 62 74 6e 2d 63 75 6f 63 2e 6d 65 6e 75 2d 63 75 6f 63 2d 31 38 38 62 65 74 20 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 32 70 78 3b 7d 0d 0a 20 20 2e 6d 61 69 6e 2d 6d 65 6e 75 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 62 74 6e 4c 6f 67 69 6e 53 6f 63 69 61 6c 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 7d 0d 0a 20 20 2e 6d 61 74 63 68 65 73 5f 5f 69 74 65 6d 20 2e 63 6f 6d 6d 65 6e 74 61 74 6f 72 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 20 23 64 65 65 39 65 30 3b 7d 0d 0a 20 20 2e 6d 61 74 63 68 65 73 5f 5f 69 74 65 6d 20 2e 63 6f 6d 6d 65 6e 74 61 74 6f 72 20 73 70 61 6e 3a 3a 61 Data Ascii: #fff;} .main-menu .navbar-nav .btn-cuoc.menu-cuoc-188bet {padding-right: 12px;} .main-menu .navbar-nav .btnLoginSocial {margin-left: 0;} .matches__item .commentator span {margin-right: 10px;color: #dee9e0;} .matches__item .commentator span::a
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 65 20 7b 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0d 0a 20 20 2e 62 74 6e 2d 6f 64 64 73 2d 64 65 74 61 69 6c 20 7b 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 20 20 2e 62 74 6e 2d 6f 64 64 73 2d 64 65 74 61 69 6c 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 38 61 37 34 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 40 6d 65 64 69 61 20 20 20 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 20 7b 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 36 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 7d 0d 0a 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d Data Ascii: e {max-width: 100%;} .btn-odds-detail {color: #fff !important;} .btn-odds-detail:before { background: #28a745 !important; } @media screen and (min-width: 1280px) { .container { max-width: 1360px; } } @media (min-

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:22 UTC	582	OUT	GET /wp-includes/css/dist/block-library/style.css?ver=5.4.10 HTTP/1.1 Host: 90phutz37.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:22 UTC	766	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sun, 10 Jul 2022 06:55:24 GMT vary: Accept-Encoding etag: W/"62ca77dc-fc38" access-control-allow-origin: * Cache-Control: max-age=2592000 expires: Mon, 04 Nov 2024 22:14:12 GMT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 10 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYPvtVgdWJkMZupQsthBO5TvD%2BqXF9E8FGNSff8csixXTE%2BcklKig3sLJo1cFyMu6rwIJ5SeoFBLTk%2FRe4OA%2BCOgSNQfgQvDZQ8FL0g8B%2BKLvQ7W4QrxopbK2hcSe0tipg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a6088a437b-EWR
2024-10-05 22:14:22 UTC	603	IN	Data Raw: 37 63 61 30 0d 0a 2f 2a 2a 0a 20 2a 20 43 6f 6c 6f 72 73 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 42 72 65 61 6b 70 6f 69 6e 74 73 20 26 20 4d 65 64 69 61 20 51 75 65 72 69 65 73 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 43 6f 6c 6f 72 73 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 66 74 65 6e 20 72 65 2d 75 73 65 64 20 76 61 72 69 61 62 6c 65 73 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 47 72 69 64 20 53 79 73 74 65 6d 2e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 61 6b 65 2e 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 64 65 73 69 67 6e 2f 32 30 31 39 2f 31 30 2f 33 31 2f 70 72 6f 70 6f 73 61 6c 2d 61 2d 63 6f 6e 73 69 73 74 65 6e 74 2d 73 70 61 63 69 6e 67 2d 73 79 73 74 65 6d 2d 66 6f 72 2d 77 6f 72 64 70 72 65 73 73 2f 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 42 72 65 61 6b 70 6f 69 Data Ascii: 7ca0/** * Colors //* * Breakpoints & Media Queries //* * Colors //* * Often re-used variables //* * Grid System. * https://make.wordpress.org/design/2019/10/31/proposal-a-consistent-spacing-system-for-wordpress/ //* * Breakpoi
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 75 74 20 6f 66 20 61 6e 69 6d 61 74 69 6f 6e 73 20 76 69 61 20 4f 53 2d 6c 65 76 65 6c 20 70 72 65 66 65 72 65 6e 63 65 73 2e 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 52 65 73 65 74 20 64 65 66 61 75 6c 74 20 73 74 79 6c 65 73 20 66 6f 72 20 4a 61 76 61 53 63 72 69 70 74 20 55 49 20 62 61 73 65 64 20 70 61 67 65 73 2e 0a 20 2a 20 54 68 69 73 20 69 73 20 61 20 57 50 2d 61 64 6d 69 6e 20 61 67 6e 6f 73 74 69 63 20 72 65 73 65 74 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 52 65 73 65 74 20 74 68 65 20 57 50 20 41 64 6d 69 6e 20 70 61 67 65 20 73 74 79 6c 65 73 20 66 6f 72 20 47 75 74 65 6e 62 65 72 67 2d 6c 69 6b 65 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f Data Ascii: ut of animations via OS-level preferences. //* * Reset default styles for JavaScript UI based pages. * This is a WP-admin agnostic reset //* * Reset the WP Admin page styles for Gutenberg-like pages. */.wp-block-audio figcaption { margin-to
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 3b 20 7d 0a 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 20 7d 0a 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 61 6c 69 67 6e 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b Data Ascii: background-color: transparent; border: 2px solid; }.wp-block-buttons .wp-block-button { display: inline-block; margin-right: 8px; margin-bottom: 8px; }.wp-block-buttons.alignright .wp-block-button { margin-right: none; margin-left: 8px;
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 33 30 70 78 3b 20 7d 0a 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 20 7b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 39 39 70 78 29 20 7b 0a 20 20 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 20 7b 0a 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 Data Ascii: padding: 20px 30px; }.wp-block-column { flex-grow: 1; min-width: 0; word-break: break-word; overflow-wrap: break-word; } @media (max-width: 599px) { .wp-block-column { flex-basis: 100% !important; } } @media (min-width: 600px)
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2c 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 34 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 Data Ascii: width: 100%; }.wp-block-cover-image,.wp-block-cover { position: relative; background-color: #000; background-size: cover; background-position: center center; min-height: 430px; height: 100%; width: 100%; display: flex; justify-cont
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e Data Ascii: wp-block-cover-image .wp-block-cover__gradient-background, .wp-block-cover.has-background-dim:not(.has-background-gradient)::before, .wp-block-cover .wp-block-cover__gradient-background { opacity: 0.5; } .wp-block-cover-image.has-background-dim.
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 33 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 33 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 33 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 34 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 Data Ascii: -background-dim-30 .wp-block-cover__gradient-background, .wp-block-cover.has-background-dim.has-background-dim-30 .wp-block-cover__gradient-background { opacity: 0.3; } .wp-block-cover-image.has-background-dim.has-background-dim-40:not(.has-backgr
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 Data Ascii: radient-background, .wp-block-cover.has-background-dim.has-background-dim-60 .wp-block-cover__gradient-background { opacity: 0.6; } .wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient)::before, .wp-block-c
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 Data Ascii: .has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background { opacity: 0.9; } .wp-block-cover-image.has-background-dim.has-background-dim-100:not(.has-background-gradient)::before, .wp-block-cover.has-background-dim.has-backgrou
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 70 78 29 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 38 66 39 66 39 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 70 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 31 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 33 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 Data Ascii: px); z-index: 1; color: #f8f9f9; } .wp-block-cover-image p:not(.has-text-color), .wp-block-cover-image h1:not(.has-text-color), .wp-block-cover-image h2:not(.has-text-color), .wp-block-cover-image h3:not(.has-text-color), .wp-block-cover

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:22 UTC	583	OUT	GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 Host: 90phutz37.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:22 UTC	769	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sun, 10 Jul 2022 06:55:26 GMT vary: Accept-Encoding etag: W/"62ca77de-176" access-control-allow-origin: * Cache-Control: max-age=2592000 expires: Mon, 04 Nov 2024 22:14:12 GMT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 10 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fGn8WG6lZxLEl9Ep9hEadYn%2FGwOzLovv8vLlundtwbZ04%2BxhCxM%2BxM%2FSSa5HzfIP39Lwnx5X7LYVY617MYZqgofzkXbZnA%2FSxENbzSENLEl3GP0%2FVpps%2FtfpntRh30nyyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a61d1ec484-EWR
2024-10-05 22:14:22 UTC	381	IN	Data Raw: 31 37 36 0d 0a 2f 2a 0a 44 65 66 61 75 6c 74 20 73 74 79 6c 65 20 66 6f 72 20 57 50 2d 50 61 67 65 4e 61 76 69 20 70 6c 75 67 69 6e 0a 0a 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 70 61 67 65 6e 61 76 69 2f 0a 2a 2f 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 61 2c 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 73 70 61 6e 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 46 42 46 42 46 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 70 78 3b 0a 7d 0a 0a Data Ascii: 176/Default style for WP-PageNavi pluginhttp://wordpress.org/extend/plugins/wp-pagenavi//.wp-pagenavi {clear: both;}.wp-pagenavi a, .wp-pagenavi span {text-decoration: none;border: 1px solid #BFBFBF;padding: 3px 5px;margin: 2px;}
2024-10-05 22:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:22 UTC	588	OUT	GET /wp-content/themes/bongda2/dist/styles/main.css?ver=1726715160 HTTP/1.1 Host: 90phutz37.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:22 UTC	795	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Sep 2024 03:06:00 GMT vary: Accept-Encoding etag: W/"66eb9518-a1e49" access-control-allow-origin: * Cache-Control: max-age=2592000 expires: Mon, 04 Nov 2024 22:14:12 GMT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 10 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NmP7Z3KEXJ7MmHzwEwkjiELtX4aCxh8%2F5IoGqRt%2FhrKMpFmcSMuJ6vhci3Mfhte81n8CxT1tfmEjEXhdQTgt7PwHJu4KNLcm4L%2Bl5%2BiCpP6rziTl9csDXZX680icA8cUBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a62f37726e-EWR alt-svc: h3=":443"; ma=86400
2024-10-05 22:14:22 UTC	574	IN	Data Raw: 37 63 39 34 0d 0a 2e 67 72 69 64 2d 6d 61 74 63 68 23 67 6f 67 6f 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 72 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 62 61 6e 6e 65 72 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 62 61 6e 6e 65 72 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 62 61 6e 6e 65 72 20 2e 6c 65 66 74 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 0d 0a 20 20 2f 2a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 39 30 70 78 3b 2a 2f 0d 0a 20 20 Data Ascii: 7c94.grid-match#gogo { height: 0;}.card { border-radius: 0 !important;}.logo-banner { padding: 15px 0;}.logo-banner a { color: #000;}.logo-banner .left { width: auto; float: left; /line-height: 90px;/
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 69 6c 65 20 7b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 61 76 2d 6d 6f 62 69 6c 65 20 2e 6c 6f 67 6f 2d 63 6e 74 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 61 76 2d 6d 6f 62 69 6c 65 20 2e 6c 6f 67 6f 2d 63 6e 74 20 61 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 61 76 2d 6d 6f 62 69 6c 65 20 2e 6c 6f 67 6f 2d 63 6e 74 20 2e 6c 6f 67 6f 20 7b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 30 70 78 3b 0d 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 Data Ascii: ile { box-shadow: 1px 2px 4px rgba(0, 0, 0, 0.1);}.nav-mobile .logo-cnt { display: block; text-align: center;}.nav-mobile .logo-cnt a { display: inline-block;}.nav-mobile .logo-cnt .logo { max-width: 130px; max-height:
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 2e 66 65 61 74 75 72 65 64 20 2e 74 68 75 6d 62 5f 62 69 67 20 61 20 68 32 2e 74 69 74 6c 65 5f 6e 65 77 73 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 65 61 74 75 72 65 64 20 2e 74 68 75 6d 62 5f 62 69 67 20 61 20 68 32 2e 74 69 74 6c 65 5f 6e 65 77 73 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 65 61 74 75 72 65 64 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0d 0a 20 20 6f 76 65 72 66 6c Data Ascii: .featured .thumb_big a h2.title_news { font-size: 1rem; line-height: 26px; color: #fff;}.featured .thumb_big a h2.title_news:hover { text-decoration: none;}.featured .description { margin-bottom: 15px; height: 60px; overfl
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 0a 20 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 2e 32 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 74 65 67 6f 72 79 2d 6c 61 62 65 6c 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 61 30 61 30 61 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 2e 38 65 6d 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 Data Ascii: height: 18px; margin-right: 0.2rem;}.category-label { background-color: #0a0a0a; color: #fff; display: inline-block; font-size: 11px; font-weight: 400; position: relative; height: 1.8em; line-height: 1.8; padding: 0
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 6f 73 74 2d 69 63 6f 6e 2d 78 6c 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 34 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 34 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 6f 73 74 2d 69 63 6f 6e 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 74 6f 70 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 Data Ascii: ine-height: 0; font-size: 1rem;}.post-icon-xl { width: 48px!important; height: 48px!important;}.post-icon { position: absolute!important; right: 0!important; left: 0!important; top: 0!important; bottom: 0!important;
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 70 78 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 65 77 73 5f 63 6f 6e 74 65 6e 74 20 2e 74 61 67 2d 6c 69 73 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 65 77 73 5f 63 6f 6e 74 65 6e 74 20 2e 74 61 67 2d 6c 69 73 74 20 6c 69 20 7b 0d 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 37 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6e 65 77 73 5f 63 6f 6e 74 65 6e 74 20 2e 74 61 67 2d 6c 69 73 74 20 6c 69 20 61 20 7b 0d 0a 20 20 62 Data Ascii: px; line-height: 28px;}.news_content .tag-list { margin: 0; padding: 0;}.news_content .tag-list li { list-style: none; display: inline-block; margin-right: 7px; margin-bottom: 7px;}.news_content .tag-list li a { b
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6c 6f 63 6b 5f 74 61 67 5f 70 61 64 64 69 6e 67 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 39 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 6e 65 6c 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 6e 65 6c 20 6c 69 20 7b 0d 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 74 63 68 65 73 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 70 65 74 69 74 69 6f Data Ascii: { margin-bottom: 1rem;}.block_tag_padding { padding-left: 89px;}.panel { margin-bottom: 15px;}.panel li { list-style-type: none;}.matches { padding-left: 0; margin-bottom: 0; list-style: none;}.competitio
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 72 3a 20 23 30 66 37 35 62 63 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 36 32 35 72 65 6d 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 66 37 35 62 63 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 69 76 65 2d 69 63 6f 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 69 76 65 2d 69 63 6f 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 74 63 68 2d 2d 69 73 2d Data Ascii: r: #0f75bc; font-size: 0.625rem; line-height: 1; font-weight: 400; border: 1px solid #0f75bc; -webkit-animation: live-icon 1s infinite; animation: live-icon 1s infinite; text-align: center; vertical-align: middle;}.match--is-
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 69 76 65 2d 69 63 6f 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 69 76 65 2d 69 63 6f 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 72 69 64 2d 6d 61 74 63 68 2d 2d 69 73 2d 6c 69 76 65 2d 6e 6f 77 20 2e 67 72 69 64 2d 6d 61 74 63 68 5f 5f 6c 69 76 65 2d 6e 6f 77 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 72 69 64 2d 6d 61 74 63 68 2d 2d 69 73 2d 6c 69 76 65 2d 6e 6f 77 20 2e 67 72 69 64 2d 6d 61 74 63 68 5f 5f 64 61 79 20 7b 0d Data Ascii: it-animation: live-icon 1s infinite; animation: live-icon 1s infinite; text-align: center; vertical-align: middle;}.grid-match--is-live-now .grid-match__live-now { display: inline-block;}.grid-match--is-live-now .grid-match__day {
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 65 61 6d 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 72 69 64 2d 6d 61 74 63 68 5f 5f 6c 69 76 65 2d 74 69 6d 65 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 31 65 6d 20 30 2e 35 65 6d 3b 0d 0a 20 20 66 Data Ascii: min-width: 0;}.team { display: -webkit-box; display: -ms-flexbox; display: flex; -webkit-box-align: center; -ms-flex-align: center; align-items: center;}.grid-match__live-time { color: #fff; padding: 0.1em 0.5em; f

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:22 UTC	592	OUT	GET /2024/07/23asd5.gif HTTP/1.1 Host: cdn.lfastcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:22 UTC	650	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 X-Powered-By: WordOps CF-Cache-Status: HIT Age: 452893 Last-Modified: Mon, 30 Sep 2024 16:26:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HOQXCnJeB87xPbh5Gul8FkzS%2BeOPSfPwFc%2FV0Wl6gPiBv%2BFM8O9E7hOvpqcCwWvrhonm8YzVpKZbvoBQm976X8d9rB2jcJc9wLAjM0FQ5foOUSnO%2F301aj%2Bv0j7ftUNZjsc4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a7fd981815-EWR
2024-10-05 22:14:22 UTC	719	IN	Data Raw: 33 61 61 66 0d 0a 47 49 46 38 39 61 d8 02 5a 00 e6 7f 00 a1 6c 5a fa fc fc d8 5d 6b 00 42 84 5b 6a 54 af d2 f8 67 8d b1 f6 d8 a1 ff ce 00 b5 89 69 02 38 71 92 af d0 ce 99 6d 00 8c ef d7 b2 06 c9 12 22 03 44 7a 92 5f 1a cf d9 ea b5 74 80 6f 90 ca da e9 f8 b3 0d 16 d5 cf d0 aa ba d2 1a 15 15 e6 d5 6a 90 b8 ea d7 aa 8d 9c c9 f4 ed b5 93 b6 c8 db 23 4e 71 55 88 d0 50 78 ab 68 8f ea ef ba 00 ef b6 ad 72 82 45 70 4b 36 ff d6 00 f7 d2 d1 23 52 8e 4f 78 d2 b8 8a 88 8e 92 35 b0 a7 24 8a 95 b0 4c 6a 91 d8 37 49 45 2c 22 af 87 2c cd 93 86 d8 ba a9 f1 c7 03 f2 f7 fc 41 48 82 eb 87 8f eb ef f7 73 71 8c cb 24 37 97 a8 bb 6d b7 f7 30 67 96 e9 18 21 bb 94 00 8e 90 8b f3 e9 d5 ab ac b9 11 32 82 11 94 df f3 bd c2 fe e7 e9 e7 ea ef 4e b2 f6 7d a4 d5 3b 69 ab 74 7d a5 ca b1 Data Ascii: 3aafGIF89aZlZ]kB[jTgi8qm"Dz_toj#NqUPxhrEpK6#ROx5$Lj7IE,",AHsq$7m0g!2N};it}
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 36 45 39 31 45 37 39 33 43 36 31 31 31 45 46 39 35 43 35 41 34 43 30 31 31 35 30 38 45 41 38 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 Data Ascii: .adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:B6E91E793C6111EF95C5A4C011508EA8" xmpMM:DocumentID
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 88 26 aa 68 a0 1c 74 60 1d 76 7a b1 b8 11 08 6c a2 87 9c 54 88 51 53 63 66 69 1a 17 d8 a7 39 5e ba d9 82 dd 3c 15 6a 5b 6d 41 15 de 5b 70 81 e0 82 0b 6f ec 29 6b 5f 8d 60 70 c1 a2 b8 e6 aa eb ae 84 0e d1 83 3b 67 10 33 59 1a 1c 41 c0 66 a5 6e 51 53 1c 00 11 00 e0 6c 66 67 ae 37 a7 72 74 9e 10 6b 9c df 9d 1a 23 9d ab 66 65 87 19 59 64 01 42 1a 28 b8 d6 8d 14 66 d8 60 43 0b ff a4 a1 6e 19 70 4e 84 ae ba e6 ce ea 52 ad b7 f2 aa ef be fc 02 ea eb 3b 2a 46 ba 51 8e da 1e cb 59 a6 d2 10 80 a6 c2 cd 3e 7b c2 99 83 01 48 98 60 a4 62 e3 94 ff a5 c7 a6 2a 03 c2 40 b5 80 82 0d 59 a0 60 c7 1b 52 c4 b7 0d 08 21 9b f4 8f 1d 28 a0 e0 82 c9 04 81 60 c6 c7 f5 da cb 27 23 b6 f6 ab f3 ce 8a fe fb 5b 97 61 11 9b 11 a5 b4 ed e8 69 8c 6b 69 6a e0 c3 ce 42 2c ed 72 52 15 68 ed Data Ascii: &ht`vzlTQScfi9^<j[mA[po)k_`p;g3YAfnQSlfg7rtk#feYdB(f`CnpNR;FQY>{H`b@Y`R!(`'#[aikijB,rRh
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: a1 3f 01 02 ef 81 cb ad b1 6a 74 cb 22 dd 32 17 98 d0 77 80 5e 86 09 6d 00 ae 24 be 30 c1 10 60 2b 27 24 cd c5 70 b9 d2 74 3e f4 c3 9e d1 9b 44 4d 78 82 c3 15 f1 70 a0 40 8c 83 0b 1c 76 07 79 d8 41 3a 75 90 87 15 27 01 d7 82 f5 b1 8c 0d 55 e3 40 15 80 b2 05 e8 03 1c 28 ff 1b 82 3e dc 00 b4 40 06 01 67 9b 10 ed 26 cc 78 6f a4 05 89 1e 49 f2 4c 82 34 f9 7f 87 53 ae ff c0 6d 48 67 25 40 61 ec a1 91 b3 38 d0 3f de 2e f7 08 47 d8 72 bc ff 37 81 46 72 00 a4 2e ed 76 34 8e 4b 5b d7 ca db a1 2a 65 c0 74 13 10 05 16 a4 45 ce 14 31 e5 c7 42 6d d5 fd 02 9a 78 2d 0b ab 7d 5b 56 2f ff 9a 84 2c b5 d4 84 83 8b 3a cb 0d 37 63 bc 62 95 65 10 55 1d f1 2b 02 3a 86 32 9d 70 84 45 ae 44 68 54 f8 0d 10 97 a5 c4 bd da 55 00 bf 45 a7 b8 83 35 45 64 dd 07 09 80 00 07 49 08 80 0e Data Ascii: ?jt"2w^m$0`+'$pt>DMxp@vyA:u'U@(>@g&xoIL4SmHg%@a8?.Gr7Fr.v4K[*etE1Bmx-}[V/,:7cbeU+:2pEDhTUE5EdI
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 15 ff 00 12 50 74 e5 a4 01 9e 85 8f 6e e0 06 43 10 28 6a 70 02 77 f0 6b 4d 10 58 20 80 01 83 72 9a cc 16 07 7d 50 75 3b d6 07 1f a0 02 46 36 9a 7c 08 02 47 d6 2b d9 46 14 56 80 91 c5 a0 91 13 21 04 85 53 8a 02 47 77 89 38 70 d4 15 05 35 f0 81 27 80 9e d3 00 03 be b5 77 fe 33 78 5c 96 80 63 ea 01 57 a0 38 d5 19 8a 23 25 94 ad 85 41 32 10 41 8d e7 92 ad e8 7f 0a 23 18 c5 92 06 8a 9a 06 2e 60 07 df c5 2a 67 d1 02 bc 97 05 23 f3 16 e3 a2 a8 74 73 a9 5d 63 4c 8a 1a 9f db a8 a8 6a a3 9f 26 90 06 e0 92 06 2d 10 2f 6a 49 aa 5c 73 aa 61 d4 a9 57 a4 a8 7a 39 aa a6 da 55 8a 7a 2d 76 b6 a8 54 84 ab 72 b3 a8 be a7 ab c4 e4 aa ad 3a ab 7e a0 9f 6f e0 02 a5 ea 6a cd a0 67 96 66 06 69 30 32 29 41 a5 1d ca 03 3c f0 00 d2 4a ad d3 5a ad d8 7a ad da 6a ad dc 9a ad dd ba ad Data Ascii: PtnC(jpwkMX r}Pu;F6\|G+FV!SGw8p5'w3x\cW8#%A2A#.`*g#ts]cLj&-/jI\saWz9Uz-vTr:~ojgfi02)A<JZzj
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: a3 2a 20 dc c6 2d 02 d1 50 dc c6 2d 52 c6 ed 05 c0 cd 0c 06 60 dc 06 d0 0c 22 60 dc 39 bd 0c d1 ed 05 22 55 dc 18 a0 3e 06 80 49 d5 ed 05 d3 ed 07 e1 3d de e1 dd dc c8 5d 98 5e 80 01 18 b0 00 e9 4d 01 cd 2d dd e4 1d df 5e 80 dc ca 2d dc 06 70 dd d2 c0 db 1a e2 05 d7 7d df ea 4d df f5 6d dc cc 20 df 13 81 bf 29 70 04 78 ac d5 51 ed bf 56 9d 4f 01 50 02 fb bb d5 7d cc 03 57 30 07 4f 3d c0 64 5d a3 66 dd 07 03 4b 90 80 92 a3 3f 20 04 1f 8c 7e 30 20 06 62 60 00 23 b0 04 d8 77 02 4b 00 e2 7d d0 7c 30 00 ff d8 83 62 87 e9 a7 9a e7 77 03 20 6c 59 64 77 ca f5 f7 d8 8f bd ca 2e fc 05 98 d0 d1 00 21 04 aa 68 6e 85 c4 29 a0 34 5d d3 09 4a 3b 30 05 ac 0d 0d 42 20 78 1a c5 51 2d 45 1b a0 d2 cb db c0 02 81 04 00 1c e0 5c cb 65 cd 71 67 1e 94 37 01 27 30 41 19 a1 02 25 Data Ascii: * -P-R`"`9"U>I=]^M-^-p}Mm )pxQVOP}W0O=d]fK? ~0 b`#wK}\|0bw lYdw.!hn)4]J;0B xQ-E\eqg7'0A%
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 46 18 30 88 b0 44 02 53 34 41 04 36 3d 80 30 25 3c 2f c1 74 c8 4d 5c 86 50 41 4e 32 2d 41 41 08 01 dc c0 25 05 4b 10 65 94 8f 6c b2 49 86 0d 70 42 15 15 09 53 39 60 d5 55 41 7c c1 15 57 26 f0 e8 a7 1f 3b f0 85 16 66 71 15 0a 57 02 6e 99 ff e0 56 14 a4 29 70 59 02 80 31 c0 01 0d 94 0a 76 82 18 32 84 36 d8 09 09 14 e6 98 63 38 08 61 17 32 6f 0c f6 59 02 1e 94 a0 aa 59 9d c1 05 da 14 7f c6 6a 0c 7f 7d 3c 82 1e 7c 83 08 48 6b 39 01 d4 42 4c 23 a1 f4 51 89 20 c1 c2 a6 02 3f d7 01 37 2a 73 7d 30 2b 81 2c 8e 40 00 1c 06 ac 6d 77 9c 96 1f c4 e2 0b 36 b0 f1 2a 89 30 10 74 27 88 b5 c8 71 3b 40 23 cd 96 3b 2a 2a d2 05 10 5e 30 7e 88 5b 6b 2c 10 20 c7 db 76 b8 c6 07 af ac 7e 4e 12 46 13 5c e4 90 43 3e f4 3c 60 cd 3d d1 e4 10 61 0e d5 a8 63 1f 3b d3 b8 78 48 00 0b 12 Data Ascii: F0DS4A6=0%</tM\PAN2-AA%KelIpBS9`UA\|W&;fqWnV)pY1v26c8a2oYYj}<\|Hk9BL#Q ?7s}0+,@mw60t'q;@#;**^0~[k, v~NF\C><`=ac;xH
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 6c 00 63 50 05 69 c6 a3 0a c6 ec 47 00 3c c4 30 66 0a a0 04 49 93 87 31 4f c6 03 20 68 96 45 65 7e 00 10 3a 0b 90 c3 6e 68 cd d3 c8 50 3f ba e9 4d f9 e5 80 0b 38 20 27 9b cc d9 92 24 dc 81 bf b3 48 02 4a 5e 20 e8 3e f4 20 14 01 e8 41 6b 53 e8 db df 3e 6f 03 71 e0 c9 12 86 2b a6 80 ee 24 4d d8 40 68 73 95 42 86 ad a8 cd d3 63 9b ae 0e ad db c3 3c a9 cd 0c 7d f5 6b 0d 34 e5 96 27 8a e1 04 04 f8 9c 4f 01 10 05 91 26 c3 00 05 80 03 1c 0a 50 82 03 94 e0 6f 84 83 0b 0d 72 20 b8 bb 85 c6 89 27 78 29 7e 19 33 85 29 dc 01 06 cf 6e 42 13 90 11 85 28 1c 78 c0 ad 86 a3 0c 08 c0 e4 d2 5c 38 3e 85 80 89 1f 68 85 3c 62 f0 07 03 f9 4a c2 5e 5f 73 ad fe 88 e0 dd c1 f2 c2 1d 5f 13 8c 60 39 42 93 a6 3c c4 1f 05 71 af 3a b6 1b 1b 4d 55 dd 21 2a 20 ff 0c fe b8 2b 15 2d 69 2a Data Ascii: lcPiG<0fI1O hEe~:nhP?M8 '$HJ^ > AkS>oq+$M@hsBc<}k4'O&Por 'x)~3)nB(x\8>h<bJ^_s_`9B<q:MU!* +-i*
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 3a a0 04 5a a0 06 6a a0 85 09 74 29 90 02 4d 90 67 03 d2 98 91 19 a1 12 0a 99 93 79 76 56 60 99 97 89 99 a1 e6 14 a3 46 6a 5f a0 07 40 75 71 51 70 04 98 93 16 66 11 05 0c 10 05 49 a4 a2 29 75 28 3b 80 01 1d 90 5e 8b e7 01 80 c7 05 44 80 01 bd 43 9b 73 90 02 14 e9 9c 18 b9 45 04 80 29 1f 75 02 19 30 05 be 19 53 fb d5 24 d2 16 85 38 50 9c c4 a0 02 42 e0 01 07 80 78 c8 89 9c 3d 6a 37 ce 99 9a fb b9 a5 5c 7a 46 d3 a7 03 7f c2 04 ff 41 01 5d 2a 96 fd 69 7e d4 90 80 07 ba ff a6 6c da a6 6e 5a 98 db 58 5a 0b da a0 04 02 a1 13 7a a7 78 aa 25 15 ba 69 4e 80 a1 25 e8 50 0f a5 99 d6 65 07 8b 39 44 3d 80 9c 98 b3 78 33 6a a2 66 11 18 6a 74 01 0c 09 69 99 b3 78 90 b2 39 09 f0 74 af d5 4f 01 c0 a3 1c c0 05 18 c9 44 79 97 29 7b c7 84 32 a0 00 8e 31 05 52 d0 24 22 f0 02 Data Ascii: :Zjt)MgyvV`Fj_@uqQpfI)u(;^DCsE)u0S$8PBx=j7\zFA]*i~lnZXZzx%iN%Pe9D=x3jfjtix9tODy){21R$"
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: d2 76 5b 61 b0 03 4b 42 d8 96 7d d9 98 2d d8 72 80 bc c9 db 26 79 e0 53 16 5d cf f7 3c d1 11 8d 06 0f ed 06 4e 20 d0 05 7d 00 6d c0 da 09 8d 9c ad 1d db 07 c0 d0 1a 20 d0 4e 50 db 0f 5d da 13 8d cf 7a 10 ff da 68 2c ae 1c ed a7 6a e3 50 3a 28 93 0b 90 04 4d 34 d5 a5 5c c7 73 b0 c7 5d 97 cb 07 5c 78 12 d0 a8 14 29 84 1e d0 78 71 51 03 ba 76 d3 05 2c 01 3a 50 26 e0 cb 8a 3d 20 d2 2f 90 d4 42 a2 02 fb 6b d4 90 63 00 35 f5 02 02 dc 6c fa 6a c0 a4 50 01 89 7c 03 3c 8a a8 27 8a a5 27 70 01 17 d0 86 2f 20 02 69 d5 d7 fc 12 0c 30 20 71 d6 e2 1b c8 41 3b e1 77 cb b2 74 95 90 e0 1d 91 10 cb f1 f2 3c fc 21 6f a7 50 0e 8a 24 cc c4 00 48 c0 21 e0 7d fd 32 24 4b 2f 13 54 4e f2 2c cf a2 3d da f9 3c 03 a5 7d da b4 3d d0 af dd da ae 5d a5 0b dd e2 a8 fd d0 4e 10 d1 2a ae Data Ascii: v[aKB}-r&yS]<N }m NP]zh,jP:(M4\s]\x)xqQv,:P&= /Bkc5ljP\|<''p/ i0 qA;wt<!oP$H!}2$K/TN,=<}=]N*

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:23 UTC	558	OUT	GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 Host: 90phutz37.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:23 UTC	783	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sun, 10 Jul 2022 06:55:24 GMT vary: Accept-Encoding etag: W/"62ca77dc-17a69" access-control-allow-origin: * Cache-Control: max-age=2592000 expires: Mon, 04 Nov 2024 22:14:12 GMT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 11 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zf0DUL5QI1S26%2FECqQxd01NeE4g%2Ft7QtrrtDlupEBFp3GliOloTkAnYhn129eJhP%2FIbSDAauuwyTI%2BtOgkzf4Wtnes4gyX%2FPlsDn%2Bl1TL6cMWtSol2aqbqamayLcSSHJog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3acefaac47c-EWR
2024-10-05 22:14:23 UTC	586	IN	Data Raw: 37 63 38 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 7c 20 57 6f 72 64 50 72 65 73 73 20 32 30 31 39 2d 30 35 2d 31 36 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 Data Ascii: 7c8e/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license \| WordPress 2019-05-16 /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery re
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3c 30 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 Data Ascii: ,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?a<0?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 3d 3d 61 2e 77 69 6e 64 6f 77 7d 2c 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c Data Ascii: {},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray\|\|function(a){return"array"===n.type(a)},isWindow:function(a){return null!=a&&a==a.window},isNumeric:function(a){var b=a&&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 3d 62 2e 6c 65 6e 67 74 68 2c 63 3d 63 3f 63 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 64 2b 63 29 3a 63 3a 30 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 62 26 26 62 5b 63 5d 3d 3d 3d 61 29 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 2d 31 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 64 3c 63 29 61 5b 65 2b 2b 5d 3d 62 5b 64 2b 2b 5d 3b 69 66 28 63 21 3d 3d 63 29 77 68 69 6c 65 28 76 6f 69 64 20 30 21 3d 3d 62 5b 64 5d 29 61 5b 65 2b 2b 5d 3d 62 5b 64 2b 2b 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c Data Ascii: =b.length,c=c?c<0?Math.max(0,d+c):c:0;c<d;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.length,d=0,e=a.length;while(d<c)a[e++]=b[d++];if(c!==c)while(void 0!==b[d])a[e++]=b[d++];return a.length=e,a},grep:function(a,b,c){for(var d,
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c Data Ascii: function(a,b){for(var c=0,d=a.length;c<d;c++)if(a[c]===b)return c;return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 5d 7b 31 2c 36 7d 22 2b 4c 2b 22 3f 7c 28 22 2b 4c 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 64 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 Data Ascii: ]{1,6}"+L+"?\|("+L+")\|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:d<0?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.lengt
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 78 61 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 Data Ascii: .replace(Q,"$1"),b,d,e)}function fa(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ga(a){return a[u]=!0,a}function ha(a){var b=n.createElement("div");try{return!!a(b)}catch(xa){return!1}fina
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 62 75 74 65 73 3d 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 5a 2e 74 65 73 74 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 Data Ascii: butes=ha(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ha(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.ge
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c Data Ascii: pture^='']").length&&q.push("[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"*(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySel
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 6e 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 6e 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 Data Ascii: wnerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n\|\|a.ownerDocument===v&&t(v,a)?-1:b===n\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:23 UTC	626	OUT	GET /wp-content/themes/bongda2/dist/images/90phut-tv.png?v HTTP/1.1 Host: 90phutz37.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:23 UTC	756	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:23 GMT Content-Type: image/png Content-Length: 9005 Connection: close last-modified: Thu, 08 Aug 2024 13:44:07 GMT etag: "66b4cba7-232d" access-control-allow-origin: * Cache-Control: max-age=315360000 expires: Thu, 31 Dec 2037 23:55:55 GMT x-frame-options: SAMEORIGIN CF-Cache-Status: HIT Age: 11 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HNBCnARTVUC3Z0DyZpU7QMT4bYTW2NjtDdwdCONDA6WLN85peqxoW53vLFqyoFydQFyDSa%2FPpI81gWlncNdRn7ddC7Qs%2FyIi%2FCwmPALOe556dkaBChqDPeSxw5X8xaB5RQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3ad6f0c0f87-EWR
2024-10-05 22:14:23 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e0 00 00 00 4c 08 06 00 00 00 74 f3 bb 74 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0c 47 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRLttpHYsGiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 70 64 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 64 66 2f 31 2e 33 2f 22 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 34 2d 30 32 2d 32 32 54 30 39 3a 33 38 3a 30 34 2b 30 Data Ascii: .adobe.com/xap/1.0/sType/ResourceRef#" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2024-02-22T09:38:04+0
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 6f 73 68 6f 70 3a 64 61 64 63 61 32 66 63 2d 65 39 63 30 2d 66 31 34 32 2d 62 61 38 33 2d 30 30 63 62 32 34 31 39 38 35 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 61 66 66 65 37 38 62 2d 32 62 36 33 2d 30 35 34 39 2d 38 33 64 36 2d 31 62 61 66 65 32 33 66 61 39 37 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 32 2d 32 32 54 30 39 3a 33 38 3a 30 34 2b 30 37 3a 30 30 22 20 73 Data Ascii: oshop:dadca2fc-e9c0-f142-ba83-00cb241985e5</rdf:li> </rdf:Bag> </photoshop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:3affe78b-2b63-0549-83d6-1bafe23fa976" stEvt:when="2024-02-22T09:38:04+07:00" s
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: a6 12 c0 8a 8a 71 64 72 fd 2f 5d 5d 5d e3 35 8f 8a 92 90 5a 3c 1b 98 09 ec ed 5e ea 02 f6 04 b6 01 0f 01 0f 00 f7 19 95 6c 2f 6b cc 6a 1b 13 4f 57 fd 87 57 09 e0 df 07 52 8b 49 c0 5c e0 a5 c0 1c e0 30 e0 45 c0 2c 60 37 8f 2e 46 80 3f 01 bf 05 7e 05 5c 07 ac 8d 15 ca 4a 00 e3 79 da 0b a0 d4 62 2f e0 24 e0 55 c0 e1 c0 f3 81 e9 ee a7 0b 78 02 b8 1f 18 02 6e 00 fe 07 f8 a9 51 c9 a3 1d 9c e3 54 e0 d5 c0 eb 80 63 80 23 80 a9 25 0f f3 20 f0 03 60 a9 51 c9 2f 43 1a 56 02 18 4f b4 00 4a 2d ba 80 a3 00 e1 fe 3d 04 fb 04 de dd 5d b2 13 78 18 f8 2b b0 1e 7b 03 ff 01 58 0b fc d2 a8 64 5b eb d3 8f 47 6a f1 06 e0 fd c0 3c 9a 96 e2 1e 0c 03 df 06 2e 33 2a b9 bb ec b9 01 48 2d 9e 07 9c 0a bc 05 fb 70 78 46 3b c6 c9 e0 5a a0 cf a8 64 ad cf c5 95 00 c6 13 2c 80 52 8b 5d 81 Data Ascii: qdr/]]]5Z<^l/kjOWWRI\0E,`7.F?~\Jyb/$UxnQTc#% `Q/CVOJ-=]x+{Xd[Gj<.3*H-pxF;Zd,R]
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 6e 05 70 55 40 93 d9 55 68 5a 6b 34 08 a0 5b c6 ec e1 d9 76 63 09 e3 9f 8f 35 b0 f8 92 ba 3c 76 79 74 a1 86 1d b0 da 2f 3a d4 ce a8 64 33 f0 ae 8c b7 37 a7 bc 36 4f 6a f1 cc d8 f1 ea 91 5a 4c 92 5a 1c 29 b5 78 2e 36 44 ac c6 1e c0 87 80 3b a5 16 8b 22 ba 4e 02 ae dd 05 38 20 62 8c 0a 47 b3 06 2c e5 e6 f0 c5 65 93 2f 0b 68 72 6c c6 eb af 22 ce 87 76 b5 51 49 e8 5e b4 01 a3 92 1f 91 be 1f 1c 4c 79 6d 77 e0 8d 31 e3 48 2d 76 95 5a 1c 2b b5 e8 93 5a 24 58 cb ea f5 d8 7a 30 2f 4b 69 32 09 78 76 c4 50 a1 f1 a8 fb 44 8c 51 e1 68 25 ce 73 56 49 73 b8 22 e0 da 39 ce 6c de 4c ac f1 e5 fb 91 ed 9a f9 57 ac 36 ad e7 36 e0 8f 29 d7 8a d0 ce a5 16 57 00 5b b1 7b ce 4f 03 6f e0 c9 40 89 97 90 ed 9f 4c d3 c2 45 dc 8f 2d 27 e2 4b 59 f7 c1 d3 92 66 01 0c 29 0d f1 e2 92 e6 Data Ascii: npU@UhZk4[vc5<vyt/:d376OjZLZ)x.6D;"N8 bG,e/hrl"vQI^Lymw1H-vZ+Z$Xz0/Ki2xvPDQh%sVIs"9lLW66)W[{Oo@LE-'KYf)
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: fb 9c c0 e9 b4 93 07 b0 85 ab da b6 f7 73 37 f0 d2 36 74 3d e0 b4 dd 28 ee f7 22 41 1f c2 16 87 5e 46 f1 77 7c 20 61 7b 48 bf b4 13 a3 92 5f 60 d3 68 62 62 0b 8b d8 8e 0d 49 0b f1 cb 35 5f 7b 47 c4 b8 31 19 14 79 84 ac 12 42 04 30 76 0f 58 36 0f 01 b2 a8 34 64 09 9c 45 eb cb c1 34 d2 dc 17 45 63 f5 19 95 1c 64 54 d2 67 54 d2 8b 7d 68 17 25 90 2f 0a d1 82 de e6 70 a3 92 eb 81 97 63 8f fb 2a 83 11 6c 42 ec 5c 6c 6d 18 ef c3 29 5d 51 a4 7a d2 e2 2e 8b 38 2c d0 1d 50 44 88 43 c8 2b 87 4e 6a b1 1b 13 e3 d0 ce 07 81 1e a3 92 5f b7 73 10 77 e3 16 69 a4 61 a0 6f c5 c2 c1 ae 15 0b 07 bb 8c 4a ba b0 82 d1 e7 31 c4 22 a9 45 fd 72 33 cf 7a 79 a9 51 49 c3 b1 08 46 25 c3 4e 10 f3 c2 35 a7 17 f4 db 40 d0 0d e8 4a f2 9d 8c ad a8 1c 7b 96 dd 66 ec 19 ed 73 8c 4a e6 1b 95 Data Ascii: s76t=("A^Fw\| a{H_`hbbI5_{G1yB0vX64dE4EcdTgT}h%/pc*lB\lm)]Qz.8,PDC+Nj_swiaoJ1"Er3zyQIF%N5@J{fsJ
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: f8 d2 80 51 c9 66 77 60 4a e8 99 e7 35 0e 03 6e 94 5a 2c 07 be 8b dd 7f 6e c2 6a a4 13 b1 5f 58 4c 3e e1 8f 8d 4a bc ce de 70 75 6f 62 ac d4 ed 48 19 83 ba a7 fd a9 fb 3e c0 b4 c9 db 39 6e 9f bb 98 b1 db 36 2e bf fd 58 4e 99 75 17 07 3f eb c9 42 6c e6 9e c3 b8 ea de e7 d5 7e 3d 8e e2 a5 77 96 00 d6 c6 0e 39 47 12 6c 81 a6 23 b0 16 e1 2c bb 40 2d 62 66 31 4f e6 fd f9 6a c3 22 ed e7 f5 c0 f0 fd 82 b7 61 97 1c 47 01 9f 23 ee 30 94 18 86 81 33 22 62 4b c1 06 12 2f c4 a6 50 c5 30 09 5b e1 fa ad 91 ed d3 f8 42 c0 b5 b1 89 b8 ed 2a 15 3f ba c4 9c b3 e7 5f 38 7c c6 fa d1 37 5e b2 d7 d8 7b 6d da e4 86 22 05 3e 3e b1 75 64 df d4 41 02 e8 52 8e 6a c1 d6 69 63 d7 f6 7c f5 f1 a7 d3 03 4b 1a 96 a2 01 7d f7 80 97 60 9d c7 5f c7 3e 61 1f f3 6c d7 0a 3b b1 c2 17 75 82 ad Data Ascii: Qfw`J5nZ,nj_XL>JpuobH>9n6.XNu?Bl~=w9Gl#,@-bf1Oj"aG#03"bK/P0[B*?_8\|7^{m">>udARjic\|K}`_>al;u
2024-10-05 22:14:23 UTC	178	IN	Data Raw: 48 2d 0e c6 66 5e cc c3 c6 2c be 22 e3 ba dd da b9 bf 5e b0 ac 7b 26 fe e5 34 2e 1c 98 bf f2 93 65 8e df d3 df bd 88 ec 03 50 2e c5 1e 51 dd 92 61 c5 1d 65 56 3b 19 37 6d 6f b8 0c eb 4f bc 02 a0 d5 23 aa bb 5a ed a0 e2 e9 45 ef f2 79 9f c4 1e a6 93 c7 46 e0 f0 81 f9 2b db ad 91 db ae 34 ea ce 16 1c 4a 33 e4 54 02 58 d1 71 7a 97 cf 9b 89 cb 86 77 2f 9d e2 7e 5f 83 f5 7f 2e e9 84 f0 3d 15 a8 04 b0 a2 62 1c 79 da 5b 41 2b 2a c6 93 4a 00 2b 2a c6 91 4a 00 2b 2a c6 91 ff 07 76 cb 00 df 62 2c da ab 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: H-f^,"^{&4.eP.QaeV;7moO#ZEyF+4J3TXqzw/~_.=by[A+J+J+*vb,IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:23 UTC	592	OUT	GET /2024/07/vfa38d.gif HTTP/1.1 Host: cdn.lfastcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://90phutz37.live/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:23 UTC	649	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:23 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 X-Powered-By: WordOps CF-Cache-Status: HIT Age: 1119814 Last-Modified: Sun, 22 Sep 2024 23:10:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=THUUiZ0XOcYScj0P9ec4kQULLx8TvaPy8BYLm2g72CEjzUSTKU60%2Fp8a12M2e3Njyt%2BbMQdFy7jioD4e2OHEGS%2FZKwR0gElpTHrPXtyjz9lvu%2FJTDW49PUPTx0cdHtrLHBu7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3ae0da65e7c-EWR
2024-10-05 22:14:23 UTC	720	IN	Data Raw: 37 64 30 65 0d 0a 47 49 46 38 39 61 32 05 3c 00 e6 7f 00 57 b5 f3 6d 8f ae 8d 99 ae fb fa fb eb 9b a4 c8 14 21 fe ce 00 d0 b6 12 df cc 9d 00 39 6d a1 78 9f a4 9e 76 ad bb cc 09 93 ec b4 11 1b 00 45 81 d6 e9 f8 8d 8f 2f 97 ac c6 00 41 7b d2 dc e6 91 5e 18 65 6d 35 c7 d0 dc b7 c7 d9 7a 85 3a f6 cc d0 36 54 8b 4f 6d 91 51 6d 51 01 2e 58 28 54 70 cb 4a 65 e7 d7 70 ab 85 2f ac a5 28 b0 d5 f3 72 6f 92 ed c8 05 52 7c a6 cd b6 65 ef f5 fa d1 47 52 33 64 91 d9 64 73 a2 62 77 d3 36 48 63 7b 4c c9 23 37 ee b6 00 e8 ed f4 2c 4f 4f f7 d1 02 92 d0 f7 f9 ec ea e4 18 21 b7 a6 19 e0 e6 ec 19 18 19 a9 9e 1f 4b 57 8b 4d 42 7e e3 bb ba eb 23 2c 7c 79 72 e3 78 84 43 69 63 c2 b0 1f e9 44 4f 5e 0b 10 a3 37 4d 39 a8 f1 55 31 57 0e 4b 7a 31 60 68 10 51 8a 09 35 84 48 5c 47 70 c0 Data Ascii: 7d0eGIF89a2<Wm!9mxvE/A{^em5z:6TOmQmQ.X(TpJep/(roR\|eGR3ddsbw6Hc{L#7,OO!KWMB~#,\|yrxCicDO^7M9U1WKz1`hQ5H\Gp
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 31 34 38 37 37 35 42 33 44 31 46 31 31 45 46 38 31 38 33 43 35 44 42 34 44 44 42 33 41 36 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 Data Ascii: be.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:F148775B3D1F11EF8183C5DB4DDB3A61" xmpMM:DocumentID="x
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: e0 56 0d 34 48 09 4f 66 92 82 64 92 49 12 99 24 0e 57 4c f0 c0 2e 1f 98 40 29 0d 2f 6c 2a 4e 12 43 50 ba 47 1d a2 02 34 c5 17 a6 86 1a e9 ab ac 9c 30 80 6a 01 f0 e2 45 6a 14 c0 01 ab 1f 1b f4 ea eb af c0 06 2b ec b0 c4 16 6b ec b1 c3 86 a9 0b 87 b4 6e 80 01 03 03 4a 40 a2 00 02 48 80 81 04 1f 10 aa da 8a 8a f6 49 c2 00 7d de 2a 80 a0 5a 60 70 c1 a1 3c f0 d8 e3 82 5a 31 55 8d 12 bb 7e f2 02 a5 9e ee 31 84 10 1d 34 e1 41 02 9a ea 32 05 16 94 62 a1 46 bf e2 8c f0 e9 0b 04 ff f3 2f a5 5f 0c 9c 6a bc 10 83 22 eb 69 32 dc d8 47 ff 0a ca e2 72 42 6a 0c 24 91 b0 90 5a 6c 50 02 0b 20 94 6c f2 c9 28 a7 ac f2 ca 2c b7 ec f2 cb 29 e7 a1 40 1a cb da 54 9a 6a 6a 5e 90 03 b5 64 c4 29 81 b4 0c f4 77 01 03 1f a8 8b 5a 9e 14 7b 9b 42 9f 5d f4 31 40 9d 21 47 a1 45 14 16 2b Data Ascii: V4HOfdI$WL.@)/lNCPG40jEj+knJ@HI}Z`p<Z1U~14A2bF/_j"i2GrBj$ZlP l(,)@Tjj^d)wZ{B]1@!GE+
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 1a 0c a4 6a b8 7d 48 42 aa 18 cd 1a c3 8a 37 00 a2 ba 34 95 7f 4b 31 51 71 ba 0f 70 78 00 77 59 93 82 25 66 b6 35 a1 16 b5 6b 0c 3b 8a 51 ab c6 b0 90 f6 c2 a6 ec bc 1a 2f c4 5a 54 9e ed c3 09 e2 f6 00 c2 b6 26 d1 9b 38 2e 6a 58 bb 58 b7 96 97 b3 fc c1 b3 9e 35 ff 61 d9 fc a6 ea 01 13 38 35 6a bc a0 66 51 3d 40 d8 92 5e 64 6c 8e 3d 4a 5f 9f a6 b7 5a 7a 80 c8 7c a0 01 16 24 d0 bd 0e 74 81 06 34 00 02 28 ac fb dc f1 8d a0 bb c9 e0 83 f9 72 ae be b8 48 5d 00 a2 70 9a fe 2e 60 00 02 0e 81 c0 e3 60 83 3e a0 21 0a 88 e3 c0 6d 21 4b 01 de 31 2d 0a 75 86 a7 d4 aa b0 01 61 1f d4 26 01 c0 42 0c 12 aa d0 6b d8 e7 01 66 8d ea 47 35 21 84 1f 43 94 06 24 7d 40 8c 93 a4 86 bc 3d a0 a9 51 05 6a 91 4d 8e aa 4e 08 35 aa 44 ed 44 92 65 1c 81 4d 71 79 0f 11 98 00 c9 4d 15 74 Data Ascii: j}HB74K1QqpxwY%f5k;Q/ZT&8.jXX5a85jfQ=@^dl=J_Zz\|$t4(rH]p.``>!m!K1-ua&BkfG5!C$}@=QjMN5DDeMqyMt
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 50 40 00 eb 56 90 ef 87 39 35 8a a2 e7 16 04 29 9a a2 e7 26 a3 db 04 91 f6 45 13 f8 d5 07 10 87 68 5e 00 04 5d b0 3b 5e 10 05 5e 00 00 2c 89 06 9d 75 1a 1c a0 9a 48 53 88 59 70 2d be 23 03 51 da 05 b3 e2 05 59 d0 34 1b 06 93 35 41 0f 2e 68 81 1b a7 50 07 60 00 39 57 1e 48 f8 94 44 69 2a 43 b0 29 53 69 2a d2 b3 47 2a 06 1d 6a 60 82 da c3 94 1e 80 86 5a c9 46 9a b0 72 07 50 94 49 82 05 58 17 75 34 90 44 fb 42 98 da e3 86 60 73 a8 94 ba 44 17 45 03 1b 35 01 17 f5 05 73 d9 98 a3 17 52 66 45 63 7e d0 81 2c 47 76 4d b5 98 89 09 36 5f 79 46 77 43 3d 44 97 9d 9a 22 97 69 47 29 63 b8 44 5a 08 94 7c 4a ab 4d 95 01 d9 99 9d 77 a8 5b 14 f3 9f 81 c9 2f a7 6a 9c bc 56 35 39 30 3d dc 75 7d ad 79 5c 29 62 a1 d3 08 58 6e f5 95 8e f8 01 0e 7a 46 1c aa 28 9b 42 8a 1b 20 ff Data Ascii: P@V95)&Eh^];^^,uHSYp-#QY45A.hP`9WHDiC)SiG*j`ZFrPIXu4DB`sDE5sRfEc~,GvM6_yFwC=D"iG)cDZ\|JMw[/jV590=u}y\)bXnzF(B
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 29 dd 3c 03 55 39 01 61 a9 bc 92 bb 75 69 26 0a 20 47 2f c1 2c ca 26 f6 97 bd bd 76 ce 4c 74 e3 ec ca 49 62 86 31 eb 09 a4 38 be e5 b5 68 a9 f1 01 bc 96 7a 80 47 40 ed 2c d3 da d2 77 a1 a5 b0 a8 61 de a3 a4 d4 fc 42 5c a2 42 8a 57 b0 70 13 60 34 d4 76 8d a9 21 00 be cb 74 b9 d6 1a 7d b8 29 ef ba 1a 92 06 6d 1f 60 67 14 a0 48 dd cb 74 0e 6d 7d c6 ed 79 bf 4d d3 f3 18 e0 c8 f4 5d c1 4c 69 e1 aa 68 13 50 7d 00 8e e1 4c 27 6d 3d bd 09 e2 95 bf a1 05 89 c8 44 e2 90 b3 9d 18 4e de c4 c1 d0 b7 d7 ff 56 d9 e5 c2 a8 d1 5b 35 5d 8f a8 51 e2 9e 70 6a 03 e0 8c a7 16 8f 5b 12 32 93 13 d5 2e c0 5e 0c 54 a3 a8 51 90 68 2d d7 66 cd 5e 5b 6b d6 72 9d d5 41 3b b4 48 3b 1c 49 4b 00 56 0b b4 05 70 e4 9c 53 d6 43 ab b3 98 53 c6 03 30 2b 36 c0 e5 98 83 d7 2a c0 02 7b dd c7 f7 Data Ascii: )<U9aui& G/,&vLtIb18hzG@,waB\BWp`4v!t})m`gHtm}yM]LihP}L'm=DNV[5]Qpj[2.^TQh-f^[krA;H;IKVpSCS0+6*{
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: ac a4 cb 0a cf 65 58 c9 12 4d 26 39 c0 8f 55 65 a9 e5 96 5c 72 c9 43 1e d8 28 54 80 0a 84 04 e1 82 0b e7 f4 31 00 01 2e 90 41 63 39 50 c8 03 85 3d f3 10 f1 cf 20 6c fe 10 04 3f 37 14 70 c3 0d 77 f6 a1 81 9b 7d d8 00 c5 9f 37 b4 ff 89 67 9f 0a c1 40 44 10 04 28 10 d1 96 42 55 6a 29 1f 4e 78 f4 51 4b 2a 09 90 83 04 18 50 10 85 0d 7d 60 d0 12 40 aa 24 39 13 09 24 c8 d0 45 0e 36 a5 e0 45 19 24 10 62 c3 4f 97 e6 aa d1 1b 47 f5 9a 94 09 31 1c f0 41 97 c4 16 6b 2c 97 ef 25 10 96 56 58 78 75 c5 67 87 01 38 87 58 5f 08 c3 da 1e 58 00 f8 40 56 5b 91 65 4c 12 62 0d e1 9b 61 7b e9 95 81 5f e4 ee f1 c5 8e 7e 38 35 d7 b4 bc b9 5b 89 bc 2f 88 95 c1 66 09 58 20 96 65 8e 74 b6 d5 0c b0 7c 51 d9 04 13 e8 bb 97 b8 94 74 40 1b be 06 6b 95 81 94 08 62 a6 95 b7 8d ac b6 2f be Data Ascii: eXM&9Ue\rC(T1.Ac9P= l?7pw}7g@D(BUj)NxQK*P}`@$9$E6E$bOG1Ak,%VXxug8X_X@V[eLba{_~85[/fX et\|Qt@kb/
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 77 e4 5c 7d 61 a9 bd da c1 83 b7 cc e5 6c b2 b5 88 5e 59 12 18 22 58 ae 21 a4 8d af 55 ed e6 03 a6 28 8c 10 de e1 41 3c 44 cc 6f 66 f0 c5 bd a0 85 18 13 00 43 9d f5 32 84 5a 94 b0 b2 79 0d 97 2e 3e b6 c5 4d d4 10 61 70 dd 4b 6e 1c 01 d9 b5 95 30 5b 0c 26 f4 1e 1e 66 09 d1 ec d5 0f 08 d4 8a 57 7f d3 86 3d 8b c5 04 33 10 dc 04 38 93 59 65 bc e7 03 eb 93 89 67 fd 20 5c ea 2e 97 b9 1f 80 d8 23 08 11 33 24 c9 00 43 13 d2 51 7e 1e 44 35 0a 98 42 3c b6 05 db 23 e7 e9 d7 28 a8 2a 0a d5 55 9c 23 b6 59 8b 7a 5a c8 2f e7 9c 49 cc 3e 24 21 45 c4 9a 47 c8 55 84 30 9f 2b 1f 82 19 9b 10 18 78 6b 02 36 99 a4 b9 05 c9 0b 72 f9 2e 81 d9 66 21 02 cf 45 bf de ad 92 0c 1e 74 cc 66 fa 05 de d9 9c c0 06 52 dd 34 56 c3 88 12 cc dc 25 92 94 f0 ff a0 da 62 91 dc 34 a2 00 86 9c 06 Data Ascii: w\}al^Y"X!U(A<DofC2Zy.>MapKn0[&fW=38Yeg \.#3$CQ~D5B<#(*U#YzZ/I>$!EGU0+xk6r.f!EtfR4V%b4
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 06 97 ff 01 20 c3 f1 95 f8 d2 89 8d 10 a0 f8 42 6d 0e 9a 9d 11 7a 17 ef 11 a0 5c d9 95 84 61 a1 07 da 84 11 2a 19 c9 b2 a0 b0 a0 36 1e 3a a0 10 2a a0 b0 30 a1 27 4a a2 9b a5 a2 15 d3 a1 29 0a a2 3c f2 a1 1b ca a0 1f 2a 20 36 9a 9d c8 e0 84 06 ca 7a b8 29 a0 24 3a a1 22 fa 55 35 6a 97 3f 3a a0 a0 b9 35 5e 29 a2 2e da a2 26 8a 20 5f e9 15 33 0a 36 2a aa a0 18 0a a4 6a f3 a2 17 6a 4a 1a 72 a5 da e9 a3 0f 7a 78 03 da a0 41 aa 1a 0a 7a a1 4d 38 a6 4c 0a a3 94 88 ff a4 c4 b9 a4 60 8a 2f 4b 00 2a f4 38 a4 ef c4 a2 64 aa a1 3c aa a3 30 4a a7 47 fa a5 95 80 a2 15 53 a6 37 da 89 13 9a a0 6e fa 9f 88 6a 2c 1b 60 04 e4 49 9e ec f9 a8 90 1a a9 92 3a a9 94 ca 9e e3 c9 10 90 12 53 33 95 9f 18 e1 04 15 f0 a9 a0 0a aa 22 30 aa a4 2a 02 66 70 aa a7 8a 02 66 80 02 ac da aa Data Ascii: Bmz\a6:0'J)<* 6z)$:"U5j?:5^).& _36jjJrzxAzM8L`/K8d<0JGS7nj,`I:S3"0*fpf
2024-10-05 22:14:23 UTC	1369	IN	Data Raw: 92 3d d9 84 ad d8 96 8d 81 2f 70 14 58 4d d9 9c dd d9 9e fd d9 4e 7d d9 a2 7d 54 7a 70 00 48 61 d6 a0 9d da aa bd da ac fd cc 81 00 00 21 f9 04 05 19 00 7f 00 2c 7d 00 0e 00 96 04 2e 00 00 07 ff 80 7f 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 88 7e 98 98 49 1f 9c 49 96 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 8b 49 5a bb 5a b8 be bf c0 b6 99 98 82 c3 7e 43 7b 7b 07 9e a7 c6 7e c1 8a ce cf d0 a3 ce d4 d7 d8 d9 da db dc d2 ad d6 dc e1 e2 e3 8f ba 5a 1b 1b 3c 3c 1b bc e4 ee ef b5 c6 11 26 f4 26 43 7e 2f c9 38 49 0f cd 99 49 c8 92 ed a9 93 6d 18 41 81 cb e0 45 f3 a3 84 86 a0 3d 34 3a 28 9c 48 b1 a2 45 59 01 fa 68 d4 48 c1 d8 29 2e 03 36 a6 e0 e2 f1 a2 c9 93 ab d4 f1 b0 52 42 81 4b 01 0c 08 08 70 69 45 1d ca Data Ascii: =/pXMN}}TzpHa!,}.~IIIZZ~C{{~Z<<&&C~/8IImAE=4:(HEYhH).6RBKpiE