Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

Overview

General Information

Sample URL:	https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html
Analysis ID:	1527691
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1892,i,14227182136968852898,14144632763890290727,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for submitted file

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

Virustotal: Detection: 14%

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49746 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49743 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.8:49711 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49746 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-798464f3fd9d44d0b3d15c59379a2110.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:56 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZE517KF493J8QYC309RXContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:56 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZE55YMBC2027ZPDY487WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZF3S9M6QT5GA98PYJ0HWContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZF4XF7VMDACV681TZ86QContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZFE804ZD3ZRK05FPT77WContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZFEAFZ021H1RH58KW557Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:51:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZFEAF5DXCNQ0CKGNE2SBContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Mon, 07 Oct 2024 06:52:00 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9JVZHTFQDY5J8WRCBBQVXFVContent-Length: 50Connection: close

Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_89.1.dr, chromecache_88.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_81.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_81.1.dr	String found in binary or memory: https://bexernoajinz.publicvm.com/m.php
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_81.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_81.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_81.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_81.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_81.1.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49743 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@16/45@18/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1892,i,14227182136968852898,14144632763890290727,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1892,i,14227182136968852898,14144632763890290727,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	15%	Virustotal		Browse
https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gtomitsuka.github.io	185.199.108.153	true	false		unknown
code.jquery.com	151.101.130.137	true	false		unknown
cdnjs.cloudflare.com	104.17.25.14	true	false		unknown
www.google.com	142.250.186.68	true	false		unknown
pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev	172.66.0.235	true	false		unknown
bestfilltype.netlify.app	3.72.140.173	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html	true		unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bexernoajinz.publicvm.com/m.php	chromecache_81.1.dr	false		unknown
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_89.1.dr, chromecache_88.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_81.1.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_81.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_85.1.dr, chromecache_84.1.dr	false		unknown
https://sizzlejs.com/	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States		15169	GOOGLEUS	false
3.72.140.173	bestfilltype.netlify.app	United States		16509	AMAZON-02US	false
185.199.109.153	unknown	Netherlands		54113	FASTLYUS	false
151.101.130.137	code.jquery.com	United States		54113	FASTLYUS	false
151.101.2.137	unknown	United States		54113	FASTLYUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.66.0.235	pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev	United States		13335	CLOUDFLARENETUS	false
185.199.108.153	gtomitsuka.github.io	Netherlands		54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527691
Start date and time:	2024-10-07 08:50:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/45@18/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.184.238, 66.102.1.84, 34.104.35.123, 216.58.206.74, 142.250.184.234, 142.250.185.131, 172.217.16.138, 142.250.185.202, 142.250.185.170, 142.250.185.74, 142.250.186.106, 142.250.181.234, 172.217.23.106, 142.250.186.138, 142.250.185.234, 172.217.16.202, 142.250.185.106, 216.58.206.42, 142.250.186.170, 142.250.184.202, 172.217.18.10, 52.149.20.212, 192.229.221.95, 40.69.42.241, 13.85.23.206, 20.3.187.198, 172.217.18.3
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Access your wallet with your Secret Recovery Phrase MetaMask cannot recover your password. We will use your Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new password. First, enter the Secret Recovery Phrase that you were given when you created your wallet. Learn more", "has_visible_qrcode":false}

URL: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Access your wallet with your Secret Recovery Phrase MetaMask cannot recover your password. We will use your Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new password. First, enter the Secret Recovery Phrase that you were given when you created your wallet. Learn more", "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 05:51:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9756986311758356
Encrypted:	false
SSDEEP:	48:8HZ0d+T6mbHpidAKZdA1oehwiZUklqehr1ny+3:8HZ9HeS5y
MD5:	8EC740A4C44A7DBB21AFEC9C7C55F2AD
SHA1:	947CB8A38382C51093178FE5A18DF5CCBE6CDACA
SHA-256:	A6B59CABFEA3A41ACC0ECFB20E5C9E00DA591B0E5600C09AB17501B694077EF2
SHA-512:	9D3FFDFD6B630367248E248096AFF5E9F92CA1BFF637332168C0FE35A8436CADA2E563697C692D452B238A49F52044B3672D7D37D5CAF8DE94E3F0923949A0EC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..../.5e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY\|6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 05:51:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99195067313204
Encrypted:	false
SSDEEP:	48:8HFx0d+T6mbHpidAKZdA1leh/iZUkAQkqehC1ny+2:8HFx9Hc9Ql5y
MD5:	7EE21C43F3FA1394CD3B1610AF618B5A
SHA1:	FF9DC2C4A13FC25B677CCE0B1EE496F12B8FD74C
SHA-256:	1C62DE4F9011C28E8CC14445B19A3F69348CBE33203B27AE810185C5482BDE83
SHA-512:	7AF21C573DEBCD71CD0B63CE7146C8268986A17E8A3A65583A0974742A7B0128F3D8E13B02FE40FF2694D65DA2B004D9ECFBE86D82C71225C381077B98FD7277
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....ze....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY\|6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004263875582967
Encrypted:	false
SSDEEP:	48:8b0d+T6mbHpidAKZdA14t5eh7sFiZUkmgqeh7sc1ny+BX:8b9HknW5y
MD5:	DB7A2D8F42E6DB4987990B07F7F352C2
SHA1:	033661B8552CE375EEE5BE5A55F1AC5728585129
SHA-256:	E55BF54283B0333A956D17D407AA4C66C1DA21D70E31049FDB0B8B385B1EA32B
SHA-512:	DA07D03A4D870235129E772142A50F8CBD2C12126F926971400E98332F32953FD5BDF0797255F82FA0BC8D44FFDEA69C5D2B5C2BAE9B4D7AA2860ECF37097359
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 05:51:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990297662455359
Encrypted:	false
SSDEEP:	48:8b0d+T6mbHpidAKZdA16ehDiZUkwqeh+1ny+R:8b9H3E5y
MD5:	8BB1EFBEAB07520CAD32178A1970B29E
SHA1:	D102E690B932D8B4D23AE91AC0A4AF7C5FD67DD1
SHA-256:	A894BF174150ACAA2A306BF71BE60EB1414C3B97E9BC1BDDA23E5E9FA156B1FF
SHA-512:	5D4D8609ECD116D73D829161702E2A20BACBD48F74AF3F54C2874BC09CEFF7BB5FA9A2685B80E5A202D50B32B66E4B39A4AC6D685305CF0D2FF3851A1B1B910F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2w$e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY\|6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 05:51:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9817977937346707
Encrypted:	false
SSDEEP:	48:8z+0d+T6mbHpidAKZdA1UehBiZUk1W1qehw1ny+C:8z+9Hn9Q5y
MD5:	024C5D480B6C4390173551B283FA56DE
SHA1:	FB9DFC3362FF13C6A9CE1B6C5D3FB8225315322B
SHA-256:	C8C9ECE585FE3D54BEC22A89D83595423D2ECE286528FA556CDC952A0575A044
SHA-512:	D8A03321C8A8B271B9E8789AA2536BDEAF0E5FA472523FD82AD7E429A1C3CF3FC78BDC28791039D3CA46E3BAA3BCF3630F4867EB4BE96BE5CE78CA3146183CB6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY\|6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 05:51:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990731695039556
Encrypted:	false
SSDEEP:	48:8X0d+T6mbHpidAKZdA1duTrehOuTbbiZUk5OjqehOuTbW1ny+yT+:8X9HwTYTbxWOvTbW5y7T
MD5:	D323942B9861232BD24D637DC8AC6186
SHA1:	9A0E6AC767022C5A7D2652B6A061D46F13F2BD49
SHA-256:	11F4788019A69E0C069D9505C87EBDB34A949704EE53BD2D6E66205187C3FEA2
SHA-512:	D38C8DFC3B3B6D7CD2A57510267A2A9526E68C0F75C0F151AB30C8BDB1313525448137165AB1BB294140B46B9016EF75E475AA06789DC82B4AB7A6FC34C7279C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....L.e....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGYy6....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYy6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYy6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYy6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY\|6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7z......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.806370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2cvTopFIG:ObPHcMpD
MD5:	90A2562E76A65711F13287B7F434C2D2
SHA1:	BC0921035BCF10A1B194C54A1B07FB8E7F78B38D
SHA-256:	7D97A746BA766EF594B953CE155DBC3C114FD6D5C9B7DB5A184F716781E81149
SHA-512:	B64ECA014CBE9E7783CEE7192CC89092BB991F0694318AF017F2A073B42CFB67C2C3E79033F9FCEF5E895D58542F3B79C49AF76936F2629D232857DDDE4C1ED2
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J9JVZFE804ZD3ZRK05FPT77W

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.981467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2cvTq7O0xQVHyn:ObPHccxwyn
MD5:	F97634DB16B0C246640D130A566A95A7
SHA1:	07F047153132D70529C720C5B396A6282E400D75
SHA-256:	ECFD822A95B7134B25EDA35EBF15AE5D11C6F2453A701CF59815DB303737BF32
SHA-512:	A4FA8F119DC73565A2CC45096846A9598D803AC164265EB873328BDFAE56020F7058F58C3F17EAC3F177B756EE1B6A0FFAE4A39D70F44C6778644A6113029344
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J9JVZF3S9M6QT5GA98PYJ0HW

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.806370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2cvTDCvwXFz:ObPHcvCvOFz
MD5:	260E4EA89C636D37062A468F65B67F65
SHA1:	141E65D2CB412FFD7A43899DC5098E85AD75D47B
SHA-256:	B64AE4EC0925E76FA23A954D70B173A4394F86EF2959974462C8C21537385D91
SHA-512:	D9817939E2F320F823BCC02CBD71D08DBA8BDC55DF02D7D969C7F56FB527B23E2DC5A071E6B417C7C3A019A26D5E235BF1A07AE3AD1FBE1ADC643B9BFFA9B41E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J9JVZHTFQDY5J8WRCBBQVXFV

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2cvTJPgVaFn:ObPHclP9d
MD5:	94F90F856286E79BB3391F66739E2758
SHA1:	0C741E2C977B7ED21CAD0175A2E298487A3CF835
SHA-256:	03F5F99EE73B9717EDD153FC4D266ADF2F0BCA9F0B8240ED606E11AF14D909F0
SHA-512:	D5932C8DD5CB56E86839126702A8006C6A30A5D0802600690F727D7D8E35DB7BCEEA60011B40C2FAAC334D413481D09FD837F4A22D534AC4B0AB0D73B202F6EC
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J9JVZFEAF5DXCNQ0CKGNE2SB

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.931663380285987
Encrypted:	false
SSDEEP:	3:ObynQA2cvTXNXwD8RdSyn:ObPHcDNXwD81
MD5:	5C440A6E3F23311F4CA02F64146F2266
SHA1:	E8F95C523C7421EC91D30C8BAB0C128C16D6BA66
SHA-256:	385F43AA6DD3A904E9189E3758CEA656A7CB9CCE312DFDC60A288938486646C4
SHA-512:	074CC71836946D6C29CB6D5B5AD203242A0772BBC2EE01824EB7C91E1E0CCEA580CD56F8E9BEEB055C4877D898AC9FDB33B5D07EC3F8834F7833EF332134A416
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J9JVZE55YMBC2027ZPDY487W

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65292
Entropy (8bit):	4.720780336190838
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBt:i3kvjqy5kikTYXa1oG335gJ
MD5:	EFB3591A55754EF7669DD64798981FA6
SHA1:	AABAD0059877042A5779F59405D0FF0A0FBB0CDB
SHA-256:	B01E600F02D5FE202F1F50E2154F6F7141FAD2DBB2403F97975B061CCC80B98E
SHA-512:	B8606E999C1A481E6EDA2D1B635E83B436CDAE5F2EFDD54DA25CC8AAFEE1944634F84730B023A9BBAC69A14AC11EE40774340379A9481124DB8EA3251BD6A147
Malicious:	false
Reputation:	low
URL:	https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQlf52Sx0QN7UxIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCft24taJILOQEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCWa9ETkZQnyKEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCZ8nAdHh9uQaEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCYrYEPpw54k2EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.821467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2cvTt9jAsVUx/dT0:ObPHch6Y+4
MD5:	FE6EC33EEB9DAC9875D9CC018DC4D4A4
SHA1:	96DE506E993C3549BA6BAF39E0F2492335046D80
SHA-256:	924D9E84C2A29A5C1B81589EEAD344AC690F7660CC6D6664A7EC41AACA807960
SHA-512:	F5E78460F2D1C11479A9F51641964586946BDA8387A7CDA056D970EB2F8FF38AEBE4634F96100B21550B618A05DB8E4A3D1EEEEC6547DCADFF8D59D85B95E76E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J9JVZF4XF7VMDACV681TZ86Q

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 08:51:43.530910015 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.560523987 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.563401937 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.568188906 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.569266081 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.571805954 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.589880943 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.589884996 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.589991093 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.592684031 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.592684031 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.597661972 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.660653114 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.663923979 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.682327986 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.685312033 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.690020084 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.692178965 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.697007895 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.700308084 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.700378895 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.700664043 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.702691078 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.702691078 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.707658052 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.782494068 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.785629034 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.792794943 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.795998096 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.800209045 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.803405046 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.808276892 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.809643030 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.809665918 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.809700012 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.810045958 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.811862946 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.812212944 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.817070007 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.892744064 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.895941973 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.902761936 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.905669928 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.917622089 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.917650938 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.917721033 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.920264959 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.920264959 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:43.925122976 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.993225098 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:43.996268034 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.003108978 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.005136013 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.017575979 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.019490004 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.034096956 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.034110069 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.034173965 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.036353111 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.036452055 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.041393042 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.102518082 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.105283976 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.116794109 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.118849039 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.126343966 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.128093958 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.142374039 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.142395020 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.142448902 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.144390106 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.144530058 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.149408102 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.216270924 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.218920946 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.225676060 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.227777004 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.234862089 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.236871004 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.250250101 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.250274897 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.250313044 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.250371933 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.253011942 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.253119946 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.257937908 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.334146023 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.337076902 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.342600107 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.344667912 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.350322962 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.352231979 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.359101057 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.359146118 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.359198093 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.361282110 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.361432076 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.366225958 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.451793909 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.454668045 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.463844061 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.463857889 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.463952065 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.466434002 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.466453075 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.471227884 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.471946955 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.471960068 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.472070932 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.474193096 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.474296093 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.479096889 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.563951015 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.567183018 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.587205887 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.587222099 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.587234020 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.587296963 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.590270042 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.590369940 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.595412970 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.665154934 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.668278933 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.668368101 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.673187971 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.679428101 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.681952000 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.704518080 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.704580069 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.704638958 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.707169056 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.707285881 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.712141037 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.774982929 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.775023937 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.775078058 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.778023005 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.778073072 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.782938957 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.797305107 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.799597025 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.813456059 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.813477039 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.813577890 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.816648960 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.816718102 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.821688890 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.884129047 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.884143114 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.884216070 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.887665033 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.896935940 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.898936033 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.905746937 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.907800913 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.932822943 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.932851076 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.932971001 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.935873032 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.935986042 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.940756083 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.993493080 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.993511915 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:44.993731022 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:44.997693062 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.004750967 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.004767895 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.004803896 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.004865885 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.007220030 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.025412083 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.027851105 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.041544914 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.041562080 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.041671991 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.042027950 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.042095900 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.042205095 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.044116974 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.044219971 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.048954964 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.114240885 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.114260912 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.114316940 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.117355108 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.117355108 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.122199059 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.133889914 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.136931896 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.158248901 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.158309937 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.158617973 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.161232948 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.161232948 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.167402983 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.226202965 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.226231098 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.226413012 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.250610113 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.276712894 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.276731014 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:51:45.276842117 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:51:45.355011940 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 7, 2024 08:51:45.886204958 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:51:46.214312077 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:51:46.620554924 CEST	49671	443	192.168.2.8	204.79.197.203
Oct 7, 2024 08:51:46.964278936 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 7, 2024 08:51:54.648438931 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.653341055 CEST	53	49711	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.653422117 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.653539896 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.653539896 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.653584003 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.653937101 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.653985023 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:54.654036999 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.654336929 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.654364109 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:54.654414892 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.654552937 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.654567003 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:54.654763937 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:54.654781103 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:54.658305883 CEST	53	49711	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.658317089 CEST	53	49711	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.698915958 CEST	53	49711	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.957285881 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 7, 2024 08:51:55.008944988 CEST	53	49711	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.008992910 CEST	49711	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.116038084 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.116342068 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.116388083 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.117425919 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.117491007 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.118772030 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.118850946 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.119070053 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.119085073 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.125374079 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.125618935 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.125664949 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.126836061 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.126916885 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.127794981 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.127871037 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.161638021 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.177161932 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.177182913 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.222477913 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.377883911 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.377971888 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378006935 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378037930 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378042936 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.378070116 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378082991 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378089905 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.378122091 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378127098 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.378150940 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.378201962 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.378216982 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.382632971 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.382718086 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.382730961 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.419267893 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.419269085 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.419379950 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.419420004 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.419477940 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.419477940 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.419980049 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:55.420002937 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:55.420062065 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:55.420224905 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.420262098 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.420353889 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.420382023 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.420491934 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:55.420506001 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:55.423667908 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.465184927 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465241909 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465277910 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465305090 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465308905 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.465334892 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465367079 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.465389013 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.465435982 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.465449095 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466093063 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466145992 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.466157913 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466401100 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466440916 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466453075 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.466464996 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.466510057 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.466521025 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467437029 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467477083 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467495918 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.467509031 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467549086 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467557907 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.467569113 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467607021 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467619896 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.467632055 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.467680931 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.468460083 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.470129967 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.470156908 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.470187902 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.470201015 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.470252991 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.488387108 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:51:55.552536964 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552612066 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552643061 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552675009 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552690029 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.552716970 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552748919 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.552815914 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552856922 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552869081 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.552881002 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.552906990 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.552927971 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.553248882 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.553317070 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.553328037 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.553350925 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.553399086 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.553966999 CEST	49712	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:51:55.553993940 CEST	443	49712	172.66.0.235	192.168.2.8
Oct 7, 2024 08:51:55.566989899 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.566989899 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.567033052 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:55.567056894 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:55.567117929 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.567117929 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.567532063 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.567532063 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:55.567548037 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:55.567557096 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:55.816422939 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:51:55.882766962 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.885364056 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:55.887217045 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:55.925230980 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.925316095 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:55.929522991 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.197500944 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.218395948 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.239594936 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.259718895 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.322138071 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.322247028 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.322455883 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.322490931 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.322869062 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.322889090 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.323338032 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.323442936 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.324220896 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.324229956 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.324631929 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.324636936 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.325242996 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.325304031 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.325803995 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.325851917 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.326477051 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.326548100 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.326641083 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.326704979 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.328691006 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.328768015 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.337836981 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.337908983 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.338176966 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.338255882 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.339735031 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.339925051 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.340338945 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.340506077 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.340527058 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.340544939 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.352549076 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.352560997 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.352998018 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.353004932 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.353163004 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.353176117 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.353254080 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.353270054 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.393218040 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.393234015 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.393323898 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.393332005 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.393332005 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.436295033 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.436521053 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.436610937 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.436686993 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.436870098 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.436924934 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.436944008 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439616919 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439660072 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439680099 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.439697027 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439747095 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.439785004 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439846039 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.439891100 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.439904928 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.448292017 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.452373981 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.452575922 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.452642918 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.461374998 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461509943 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461597919 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.461599112 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461627960 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461709976 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.461719036 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461841106 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461896896 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.461903095 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.461994886 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.462033033 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.462038040 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.464087009 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464098930 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464113951 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464121103 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464128017 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464211941 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.464211941 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.464288950 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464351892 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.464378119 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.466674089 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.466737032 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.466743946 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.466845989 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.466892004 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.466897011 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.504451990 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.504451990 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.518327951 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.525578976 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.525742054 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.525783062 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.525804043 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.525841951 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.525904894 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.525929928 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.525963068 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526012897 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.526343107 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526403904 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526442051 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526456118 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.526483059 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526525021 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526539087 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.526552916 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.526612043 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.526626110 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527115107 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527163029 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.527165890 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527180910 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527224064 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.527515888 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527611017 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527654886 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527657986 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.527673960 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.527719975 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.527734041 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.528089046 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.528137922 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.528141975 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.528156996 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.528212070 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.534540892 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.534616947 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.534663916 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.536384106 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.536392927 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.536434889 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.536443949 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.536587000 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.536587000 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.536662102 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.536721945 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.538079977 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.538089991 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.538160086 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.538177013 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.538228035 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.543579102 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.543638945 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.543695927 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.546154976 CEST	49722	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.546173096 CEST	443	49722	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.547521114 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.547707081 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.547748089 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.547756910 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.547940969 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.548032045 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.553385973 CEST	49720	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.553401947 CEST	443	49720	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.555687904 CEST	49721	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.555702925 CEST	443	49721	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.568913937 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.568938971 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.569008112 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.569933891 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.569951057 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.575886965 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.575911999 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.576034069 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.576668024 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.576679945 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.584254980 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.584356070 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.584533930 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.584604025 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.599658966 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.599694967 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.599750042 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.600137949 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:56.600153923 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:56.614242077 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614315033 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.614351034 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614365101 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614419937 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614445925 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614449024 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.614497900 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614537954 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.614557981 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614594936 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614684105 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.614706039 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614763975 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.614911079 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614921093 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614948034 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.614993095 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.615024090 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.615053892 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.615080118 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.616873026 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.616899967 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.616944075 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.616962910 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.616998911 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.617027044 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.623244047 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.623271942 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.623352051 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.623352051 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.623372078 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.623430014 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.624190092 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.624217033 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.624253035 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.624268055 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.624295950 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.624339104 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.624341965 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.624423981 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.627957106 CEST	49717	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.627990961 CEST	443	49717	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.659339905 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:56.659379959 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:56.659446001 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:56.659961939 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:56.659977913 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:56.671951056 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.671971083 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.672149897 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.672151089 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.672239065 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.672297955 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.702552080 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.702569962 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.702752113 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.702752113 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.702824116 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.702893019 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.703711033 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.703727961 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.703778028 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.703794003 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.703825951 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.703845978 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.704730034 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.704746008 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.704788923 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.704802990 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.704828978 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.704848051 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.706485033 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.706501961 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.706547022 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.706561089 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.706587076 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.706604958 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.707547903 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.707573891 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.707618952 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.707632065 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.707659960 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.707679987 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.708393097 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.708410025 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.708456039 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.708468914 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.708513975 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.708535910 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.710184097 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.710200071 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.710262060 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.710274935 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.710306883 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.710325003 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.790721893 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.790744066 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.790796995 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.790843010 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.790878057 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.790900946 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791102886 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791129112 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791171074 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791187048 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791220903 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791243076 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791331053 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791373014 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791404963 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791419983 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791445971 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.791481972 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.791508913 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.815902948 CEST	49718	443	192.168.2.8	151.101.130.137
Oct 7, 2024 08:51:56.815939903 CEST	443	49718	151.101.130.137	192.168.2.8
Oct 7, 2024 08:51:56.913043022 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.913064957 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.913115025 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.913625002 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.913671017 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.913736105 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.914169073 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.914185047 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.914657116 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.914671898 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.916174889 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.916191101 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.916243076 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.916412115 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:56.916424036 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:56.922074080 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:56.922091961 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:56.922147989 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:56.922430038 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:56.922439098 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:56.930912018 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:56.931020021 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:56.931088924 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:56.931813002 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:56.931853056 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:57.053910971 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.054670095 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.054694891 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.055695057 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.055773020 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.058470964 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.058588982 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.058988094 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.059005976 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.101722002 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.122024059 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.177489996 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.190356970 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.190368891 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.191910028 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.191926956 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.192080975 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.196719885 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.196795940 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.197458029 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.197463989 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.203991890 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204034090 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204078913 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.204094887 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204138041 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204166889 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204185963 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.204190969 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204200983 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204226017 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.204483986 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204515934 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204545021 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.204554081 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.204593897 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.205564976 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.208775997 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.238137007 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.238363028 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.246139050 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.246155977 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.246345997 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.246354103 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.246597052 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.246750116 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.253670931 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.253685951 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.264363050 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.264442921 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.265207052 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.265299082 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.266155005 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.266437054 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.298489094 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.298520088 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.298546076 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.298554897 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.298566103 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.298629045 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.298671961 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.298795938 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.304418087 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.311398983 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.311407089 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.316540956 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316553116 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316591024 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316601992 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.316627979 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316637039 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316658974 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316672087 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.316679001 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.316715956 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.316715956 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.330615044 CEST	49726	443	192.168.2.8	104.17.25.14
Oct 7, 2024 08:51:57.330645084 CEST	443	49726	104.17.25.14	192.168.2.8
Oct 7, 2024 08:51:57.365245104 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.378336906 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:57.382411957 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:57.382425070 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:57.383466959 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:57.383558989 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:57.394185066 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.394196033 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.394264936 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.394277096 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.394330025 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.394356966 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.394469023 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.394469023 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.451648951 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.451658964 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.451697111 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.451724052 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.451735020 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.451941967 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.451941967 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.482393026 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.482408047 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.482489109 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.482495070 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483449936 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.483762980 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483778000 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483819962 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.483824968 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483872890 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483921051 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.483927011 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483943939 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.483985901 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.494223118 CEST	49727	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.494234085 CEST	443	49727	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.519428968 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.519485950 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.519545078 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.521558046 CEST	49724	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.521572113 CEST	443	49724	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.539674044 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 7, 2024 08:51:57.539783955 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:51:57.541960955 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.542454004 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.542467117 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.543276072 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.543492079 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.543555021 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.544173956 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.544234991 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.544245958 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.544620991 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.544678926 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.544706106 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.544713974 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.544852972 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.546288013 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.546371937 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.547024965 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.547106028 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.547106981 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.547780991 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.547837973 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.548345089 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.548461914 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.548469067 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.548518896 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.558835030 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:57.558860064 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:57.558943033 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:57.561136007 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:57.561151981 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:57.561870098 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.561956882 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.562021017 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.562654972 CEST	49723	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.562663078 CEST	443	49723	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.573163986 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:57.573463917 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:57.573498011 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:57.574528933 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:57.574603081 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:57.586308002 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.586322069 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.591406107 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.602179050 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 7, 2024 08:51:57.602184057 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.602202892 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.602267981 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.602278948 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.633141994 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.648693085 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.648694038 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.854042053 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.854136944 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.854254007 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.854724884 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.854943037 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.854976892 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.855045080 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.855120897 CEST	49730	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.855142117 CEST	443	49730	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.855206966 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.856710911 CEST	49728	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.856724024 CEST	443	49728	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.856754065 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.857495070 CEST	49729	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:57.857507944 CEST	443	49729	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:57.948096991 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:57.948286057 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:57.948590994 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:57.948930025 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:57.949136972 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:57.949942112 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.949969053 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.950047970 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.950227976 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:57.950241089 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:57.989914894 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:57.989999056 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:57.990153074 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:57.990191936 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:51:58.036689997 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:58.036938906 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:51:58.043967009 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:58.044096947 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:58.045495987 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:58.045756102 CEST	49731	443	192.168.2.8	185.199.108.153
Oct 7, 2024 08:51:58.045772076 CEST	443	49731	185.199.108.153	192.168.2.8
Oct 7, 2024 08:51:58.203100920 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:58.203324080 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:58.217395067 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:58.217411995 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:58.217677116 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:58.257837057 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:58.411267996 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.459162951 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.528875113 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.528891087 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.529661894 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.531454086 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.531549931 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.531982899 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.579404116 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.627265930 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.642961025 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.642976999 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.643001080 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.643043041 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.643055916 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.643138885 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.643138885 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.715636969 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.715740919 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.715775967 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.715786934 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.715847969 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.717293978 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.717339039 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.717379093 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.717390060 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.717427015 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.717427015 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.802727938 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.802783966 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.802881002 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.802891016 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.802978039 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.802978039 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.804088116 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.804131031 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.804174900 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.804183006 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.804223061 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.804223061 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.805170059 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.805211067 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.805243969 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.805250883 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.805296898 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.805354118 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.817712069 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.817754984 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.817826033 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.817835093 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.817861080 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.817881107 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.889837027 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.889883041 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.889930964 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.889939070 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.889983892 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.889983892 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.890625954 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.890670061 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.890692949 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.890710115 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.890746117 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.890816927 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.891320944 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.891366005 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.891412020 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.891419888 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.891431093 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.891509056 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.892208099 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.892299891 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.892307043 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.892327070 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.892369032 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.892369032 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.893152952 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.893201113 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.893266916 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.893266916 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.893276930 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.893367052 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.893954992 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894027948 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894037008 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.894049883 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894094944 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.894094944 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.894814968 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894857883 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894922972 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.894922972 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.894929886 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.894968987 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.897255898 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.976999044 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977067947 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977116108 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977123976 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977143049 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977186918 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977207899 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977253914 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977330923 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977335930 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977385044 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977680922 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977727890 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977782011 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977782011 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977787971 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977830887 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:58.977915049 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:58.977967024 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:59.007997990 CEST	49737	443	192.168.2.8	151.101.2.137
Oct 7, 2024 08:51:59.008008957 CEST	443	49737	151.101.2.137	192.168.2.8
Oct 7, 2024 08:51:59.139925957 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.187402010 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.314717054 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:59.314742088 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.314848900 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:59.315587044 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:59.315601110 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.322343111 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.322464943 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.322535992 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.322896957 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.322930098 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.325418949 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.325488091 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.325530052 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.325639009 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.325648069 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.325660944 CEST	49733	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.325668097 CEST	443	49733	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.403225899 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.403280973 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.403352976 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.404360056 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:51:59.404381037 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:51:59.788713932 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.789000988 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.789078951 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.792676926 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.792776108 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.793307066 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.793406963 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.793457031 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.839405060 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.848417997 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.848500967 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.890275002 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.890388966 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.890486002 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.890631914 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.891211987 CEST	49742	443	192.168.2.8	185.199.109.153
Oct 7, 2024 08:51:59.891258955 CEST	443	49742	185.199.109.153	192.168.2.8
Oct 7, 2024 08:51:59.973886013 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.974160910 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:59.974173069 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.974483013 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.974843025 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:51:59.974905968 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:51:59.975135088 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:52:00.019402027 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:52:00.044222116 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.044306040 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.070734024 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.070781946 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.071099997 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.072662115 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.119395018 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.297368050 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:52:00.297436953 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:52:00.297514915 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:52:00.320275068 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.320336103 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.320492983 CEST	49741	443	192.168.2.8	3.72.140.173
Oct 7, 2024 08:52:00.320508957 CEST	443	49741	3.72.140.173	192.168.2.8
Oct 7, 2024 08:52:00.320523024 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.324254036 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.324268103 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:00.324276924 CEST	49743	443	192.168.2.8	184.28.90.27
Oct 7, 2024 08:52:00.324281931 CEST	443	49743	184.28.90.27	192.168.2.8
Oct 7, 2024 08:52:07.471857071 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:07.471939087 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:07.472018957 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:07.551207066 CEST	49732	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:07.551301956 CEST	443	49732	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:08.528101921 CEST	49746	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:08.528110027 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:08.528110027 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:08.528156042 CEST	443	49746	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:08.528274059 CEST	49746	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:08.528690100 CEST	49746	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:08.528706074 CEST	443	49746	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:08.533034086 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:08.533094883 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:09.128489017 CEST	443	49746	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:09.128637075 CEST	49746	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:10.020210028 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:52:10.020288944 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:52:10.020380974 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:52:10.896897078 CEST	49713	443	192.168.2.8	172.66.0.235
Oct 7, 2024 08:52:10.896936893 CEST	443	49713	172.66.0.235	192.168.2.8
Oct 7, 2024 08:52:28.276983976 CEST	443	49746	23.206.229.226	192.168.2.8
Oct 7, 2024 08:52:28.277122021 CEST	49746	443	192.168.2.8	23.206.229.226
Oct 7, 2024 08:52:38.003719091 CEST	49703	80	192.168.2.8	199.232.210.172
Oct 7, 2024 08:52:38.009115934 CEST	80	49703	199.232.210.172	192.168.2.8
Oct 7, 2024 08:52:38.009289026 CEST	49703	80	192.168.2.8	199.232.210.172
Oct 7, 2024 08:52:56.974184036 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:56.974220991 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:56.974292040 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:56.974632025 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:56.974647999 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:57.618968010 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:57.619400978 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:57.619411945 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:57.620512962 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:57.621061087 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:52:57.621229887 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:52:57.675302982 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:53:07.543273926 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:53:07.543349981 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:53:07.543433905 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:53:09.200901985 CEST	49749	443	192.168.2.8	142.250.186.68
Oct 7, 2024 08:53:09.200921059 CEST	443	49749	142.250.186.68	192.168.2.8
Oct 7, 2024 08:53:15.285114050 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:53:15.285761118 CEST	443	49705	13.107.253.67	192.168.2.8
Oct 7, 2024 08:53:15.285813093 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:53:15.287830114 CEST	49705	443	192.168.2.8	13.107.253.67
Oct 7, 2024 08:53:15.292598009 CEST	443	49705	13.107.253.67	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 08:51:52.877007008 CEST	53	57647	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:52.885946035 CEST	53	55791	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:53.895623922 CEST	53	61014	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.637022018 CEST	65277	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.637551069 CEST	57167	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:54.644228935 CEST	53	57167	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:54.646568060 CEST	53	65277	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.411406040 CEST	54209	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.411418915 CEST	60331	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.412134886 CEST	63723	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.412357092 CEST	52432	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.417608976 CEST	53	57271	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.418168068 CEST	53	60331	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.418684006 CEST	53	63723	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.418869972 CEST	53	54209	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.419207096 CEST	53	64595	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.419532061 CEST	53	52432	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.557858944 CEST	52253	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.557940960 CEST	61625	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:55.565944910 CEST	53	61625	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:55.566481113 CEST	53	52253	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.590941906 CEST	54358	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.591545105 CEST	62512	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.598654985 CEST	53	54358	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.598671913 CEST	53	62512	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.649347067 CEST	56021	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.649849892 CEST	57613	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.657429934 CEST	53	56021	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.658313036 CEST	53	57613	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.912209988 CEST	61994	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.912425995 CEST	53153	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.919224977 CEST	56792	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.919365883 CEST	60726	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:56.920950890 CEST	53	61994	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.921101093 CEST	53	53153	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.925856113 CEST	53	60726	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:56.926204920 CEST	53	56792	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:57.942574024 CEST	53	64230	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:58.118134022 CEST	53	62948	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:59.312284946 CEST	59296	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:59.312963009 CEST	57885	53	192.168.2.8	1.1.1.1
Oct 7, 2024 08:51:59.319508076 CEST	53	59296	1.1.1.1	192.168.2.8
Oct 7, 2024 08:51:59.321429968 CEST	53	57885	1.1.1.1	192.168.2.8
Oct 7, 2024 08:52:10.905749083 CEST	53	49839	1.1.1.1	192.168.2.8
Oct 7, 2024 08:52:29.947771072 CEST	53	53890	1.1.1.1	192.168.2.8
Oct 7, 2024 08:52:35.783792973 CEST	138	138	192.168.2.8	192.168.2.255
Oct 7, 2024 08:52:52.407318115 CEST	53	52223	1.1.1.1	192.168.2.8
Oct 7, 2024 08:52:53.195944071 CEST	53	61602	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 08:51:54.637022018 CEST	192.168.2.8	1.1.1.1	0x3805	Standard query (0)	pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:54.637551069 CEST	192.168.2.8	1.1.1.1	0xc8e8	Standard query (0)	pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev	65	IN (0x0001)	false
Oct 7, 2024 08:51:55.411406040 CEST	192.168.2.8	1.1.1.1	0xe219	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.411418915 CEST	192.168.2.8	1.1.1.1	0xe7bf	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 08:51:55.412134886 CEST	192.168.2.8	1.1.1.1	0x5ee9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.412357092 CEST	192.168.2.8	1.1.1.1	0x3506	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 08:51:55.557858944 CEST	192.168.2.8	1.1.1.1	0xa760	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.557940960 CEST	192.168.2.8	1.1.1.1	0x179b	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Oct 7, 2024 08:51:56.590941906 CEST	192.168.2.8	1.1.1.1	0xc5f7	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.591545105 CEST	192.168.2.8	1.1.1.1	0x4de	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 08:51:56.649347067 CEST	192.168.2.8	1.1.1.1	0xfba6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.649849892 CEST	192.168.2.8	1.1.1.1	0x4da0	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 08:51:56.912209988 CEST	192.168.2.8	1.1.1.1	0x33ef	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.912425995 CEST	192.168.2.8	1.1.1.1	0x8019	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Oct 7, 2024 08:51:56.919224977 CEST	192.168.2.8	1.1.1.1	0x8a05	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.919365883 CEST	192.168.2.8	1.1.1.1	0xb30b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 08:51:59.312284946 CEST	192.168.2.8	1.1.1.1	0xf520	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:59.312963009 CEST	192.168.2.8	1.1.1.1	0x28bc	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 08:51:54.646568060 CEST	1.1.1.1	192.168.2.8	0x3805	No error (0)	pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:54.646568060 CEST	1.1.1.1	192.168.2.8	0x3805	No error (0)	pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418684006 CEST	1.1.1.1	192.168.2.8	0x5ee9	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418684006 CEST	1.1.1.1	192.168.2.8	0x5ee9	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418869972 CEST	1.1.1.1	192.168.2.8	0xe219	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418869972 CEST	1.1.1.1	192.168.2.8	0xe219	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418869972 CEST	1.1.1.1	192.168.2.8	0xe219	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.418869972 CEST	1.1.1.1	192.168.2.8	0xe219	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.419532061 CEST	1.1.1.1	192.168.2.8	0x3506	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 08:51:55.566481113 CEST	1.1.1.1	192.168.2.8	0xa760	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:55.566481113 CEST	1.1.1.1	192.168.2.8	0xa760	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.598654985 CEST	1.1.1.1	192.168.2.8	0xc5f7	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.598654985 CEST	1.1.1.1	192.168.2.8	0xc5f7	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.598671913 CEST	1.1.1.1	192.168.2.8	0x4de	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 08:51:56.657429934 CEST	1.1.1.1	192.168.2.8	0xfba6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.657429934 CEST	1.1.1.1	192.168.2.8	0xfba6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.657429934 CEST	1.1.1.1	192.168.2.8	0xfba6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.657429934 CEST	1.1.1.1	192.168.2.8	0xfba6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.920950890 CEST	1.1.1.1	192.168.2.8	0x33ef	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.920950890 CEST	1.1.1.1	192.168.2.8	0x33ef	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.920950890 CEST	1.1.1.1	192.168.2.8	0x33ef	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.920950890 CEST	1.1.1.1	192.168.2.8	0x33ef	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:56.925856113 CEST	1.1.1.1	192.168.2.8	0xb30b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 08:51:56.926204920 CEST	1.1.1.1	192.168.2.8	0x8a05	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:59.319508076 CEST	1.1.1.1	192.168.2.8	0xf520	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:59.319508076 CEST	1.1.1.1	192.168.2.8	0xf520	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:59.319508076 CEST	1.1.1.1	192.168.2.8	0xf520	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:51:59.319508076 CEST	1.1.1.1	192.168.2.8	0xf520	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:52:06.819447994 CEST	1.1.1.1	192.168.2.8	0xd5c2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:52:06.819447994 CEST	1.1.1.1	192.168.2.8	0xd5c2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:52:19.526324034 CEST	1.1.1.1	192.168.2.8	0x54a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:52:19.526324034 CEST	1.1.1.1	192.168.2.8	0x54a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:52:45.060760021 CEST	1.1.1.1	192.168.2.8	0x4f67	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:52:45.060760021 CEST	1.1.1.1	192.168.2.8	0x4f67	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:53:05.660110950 CEST	1.1.1.1	192.168.2.8	0x808e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:53:05.660110950 CEST	1.1.1.1	192.168.2.8	0x808e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev

https:

code.jquery.com

bestfilltype.netlify.app

cdnjs.cloudflare.com

gtomitsuka.github.io

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49712	172.66.0.235	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:55 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:55 UTC	283	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:51:55 GMT Content-Type: text/html Content-Length: 65292 Connection: close Accept-Ranges: bytes ETag: "efb3591a55754ef7669dd64798981fa6" Last-Modified: Sat, 08 Jun 2024 14:06:46 GMT Server: cloudflare CF-RAY: 8cebf725f93d423e-EWR
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-10-07 06:51:55 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49718	151.101.130.137	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:56 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:56 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1709874 Date: Mon, 07 Oct 2024 06:51:56 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740068-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1728283916.394817,VS0,VE0 Vary: Accept-Encoding
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-10-07 06:51:56 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49722	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:56 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:56 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:56 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZE517KF493J8QYC309RX Content-Length: 50 Connection: close
2024-10-07 06:51:56 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 45 35 31 37 4b 46 34 39 33 4a 38 51 59 43 33 30 39 52 58 Data Ascii: Not Found - Request ID: 01J9JVZE517KF493J8QYC309RX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49721	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:56 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:56 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:56 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZE55YMBC2027ZPDY487W Content-Length: 50 Connection: close
2024-10-07 06:51:56 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 45 35 35 59 4d 42 43 32 30 32 37 5a 50 44 59 34 38 37 57 Data Ascii: Not Found - Request ID: 01J9JVZE55YMBC2027ZPDY487W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49720	104.17.25.14	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:56 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:56 UTC	937	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:51:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1584145 Expires: Sat, 27 Sep 2025 06:51:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9WcorTp1iQLfGkzs3FBAG%2B%2FQ60yf5KQRZaQ1437b%2BPwVCgw8rh%2FjCIE02qury2xHmTQ9xPPDyisJuhnNxzsc1Fqfudb2gQxcSKrQmPaA7qhGnKmIQxdHPkst0%2FrtDq7av4D%2BjT%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cebf72d882543a3-EWR
2024-10-07 06:51:56 UTC	432	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d Data Ascii: r o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 Data Ascii: th&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+pars
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 Data Ascii: left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 Data Ascii: idth:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f Data Ascii: ion` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arro
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e Data Ascii: roy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.paren
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 Data Ascii: me(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'s
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 Data Ascii: -1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offse
2024-10-07 06:51:56 UTC	1369	IN	Data Raw: 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 Data Ascii: ,i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49717	151.101.130.137	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:56 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:56 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:51:56 GMT Age: 2403300 X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890091-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 1 X-Timer: S1728283916.407717,VS0,VE1 Vary: Accept-Encoding
2024-10-07 06:51:56 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-07 06:51:56 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-10-07 06:51:56 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-10-07 06:51:56 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-10-07 06:51:56 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-10-07 06:51:56 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49726	104.17.25.14	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	937	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:51:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1584146 Expires: Sat, 27 Sep 2025 06:51:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DI5NH%2Bm6FN4wPj0k4Ey2tkECW%2FjmWbObmA2Gb8%2BEpgUSJyWvBBQnh3bHHlfM%2B36A8yAYPRIv9b3cVqJdyJD0EXvcLkACym%2BoBVjMYJ8UzjpnlVdJPEXoW1yDhR2vnayUgP%2FkVo%2Fu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cebf7323adf42eb-EWR
2024-10-07 06:51:57 UTC	432	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d Data Ascii: r o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 Data Ascii: th&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+pars
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 Data Ascii: left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 Data Ascii: idth:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f Data Ascii: ion` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arro
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e Data Ascii: roy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.paren
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 Data Ascii: me(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'s
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 Data Ascii: -1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offse
2024-10-07 06:51:57 UTC	1369	IN	Data Raw: 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 Data Ascii: ,i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49727	151.101.2.137	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:51:57 GMT Age: 2403300 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740049-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 9 X-Timer: S1728283917.259699,VS0,VE0 Vary: Accept-Encoding
2024-10-07 06:51:57 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-07 06:51:57 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-10-07 06:51:57 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-10-07 06:51:57 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-10-07 06:51:57 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-10-07 06:51:57 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49724	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZF3S9M6QT5GA98PYJ0HW Content-Length: 50 Connection: close
2024-10-07 06:51:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 46 33 53 39 4d 36 51 54 35 47 41 39 38 50 59 4a 30 48 57 Data Ascii: Not Found - Request ID: 01J9JVZF3S9M6QT5GA98PYJ0HW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49723	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZF4XF7VMDACV681TZ86Q Content-Length: 50 Connection: close
2024-10-07 06:51:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 46 34 58 46 37 56 4d 44 41 43 56 36 38 31 54 5a 38 36 51 Data Ascii: Not Found - Request ID: 01J9JVZF4XF7VMDACV681TZ86Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49729	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZFEAF5DXCNQ0CKGNE2SB Content-Length: 50 Connection: close
2024-10-07 06:51:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 46 45 41 46 35 44 58 43 4e 51 30 43 4b 47 4e 45 32 53 42 Data Ascii: Not Found - Request ID: 01J9JVZFEAF5DXCNQ0CKGNE2SB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49730	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZFE804ZD3ZRK05FPT77W Content-Length: 50 Connection: close
2024-10-07 06:51:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 46 45 38 30 34 5a 44 33 5a 52 4b 30 35 46 50 54 37 37 57 Data Ascii: Not Found - Request ID: 01J9JVZFE804ZD3ZRK05FPT77W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49728	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:51:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZFEAFZ021H1RH58KW557 Content-Length: 50 Connection: close
2024-10-07 06:51:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 46 45 41 46 5a 30 32 31 48 31 52 48 35 38 4b 57 35 35 37 Data Ascii: Not Found - Request ID: 01J9JVZFEAFZ021H1RH58KW557

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49731	185.199.108.153	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:57 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:58 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Mon, 07 Oct 2024 06:58:03 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 13D6:3D98D0:2E61383:32E90B3:67038423 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:51:58 GMT Via: 1.1 varnish Age: 235 X-Served-By: cache-ewr-kewr1740075-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728283918.003220,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: f687469239220b2112172e56bc7eae5333fbd908
2024-10-07 06:51:58 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49737	151.101.2.137	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:58 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:58 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:51:58 GMT Age: 1709876 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 1 X-Timer: S1728283919.586347,VS0,VE1 Vary: Accept-Encoding
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-10-07 06:51:58 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:51:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=208423 Date: Mon, 07 Oct 2024 06:51:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49742	185.199.109.153	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:59 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:51:59 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sun, 06 Oct 2024 11:46:59 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 6DC7:D242F:1C5E78D:1F37C66:67027659 Accept-Ranges: bytes Age: 240 Date: Mon, 07 Oct 2024 06:51:59 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890038-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728283920.848042,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: f873d8d49bce66c676c1461fefd8cf1c2ecca395
2024-10-07 06:51:59 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49741	3.72.140.173	443	4836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:51:59 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:52:00 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Mon, 07 Oct 2024 06:52:00 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9JVZHTFQDY5J8WRCBBQVXFV Content-Length: 50 Connection: close
2024-10-07 06:52:00 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 4a 56 5a 48 54 46 51 44 59 35 4a 38 57 52 43 42 42 51 56 58 46 56 Data Ascii: Not Found - Request ID: 01J9JVZHTFQDY5J8WRCBBQVXFV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:52:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:52:00 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=208358 Date: Mon, 07 Oct 2024 06:52:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 06:52:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5344, Parent PID: 3716

General

Target ID:	0
Start time:	02:51:48
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4836, Parent PID: 5344

General

Target ID:	1
Start time:	02:51:51
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1892,i,14227182136968852898,14144632763890290727,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5640, Parent PID: 3716

General

Target ID:	3
Start time:	02:51:54
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-798464f3fd9d44d0b3d15c59379a2110.r2.dev/index.html"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly