Edit tour

Windows Analysis Report
http://softgozar.com/

Overview

General Information

Sample URL:	http://softgozar.com/
Analysis ID:	1529410
Tags:	urlscan
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

AI detected landing page (webpage, office document or email)

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,1710299649458277203,11009494479895388197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://softgozar.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET MALWARE Executable Download named to be .com FQDN

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-09T00:14:24.442125+0200	2011495	1	A Network Trojan was detected	192.168.2.5	49755	87.236.211.195	443	TCP
2024-10-09T00:14:26.135362+0200	2011495	1	A Network Trojan was detected	192.168.2.5	49773	87.236.211.195	443	TCP

HTTP traffic detected: POST /g/collect?v=2&tid=G-6WF8S2KCK2&gtm=45je4a20v868431240za200&_p=1728425659271&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101671035~101747727&cid=1977253362.1728425662&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1728425661&sct=1&seg=0&dl=https%3A%2F%2Fwww.softgozar.com%2F&dt=%D8%B3%D8%A7%D9%81%D8%AA%20%DA%AF%D8%B0%D8%B1%20%D8%AF%D8%A7%D9%86%D8%B4%D9%86%D8%A7%D9%85%D9%87%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20-%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=9368 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.softgozar.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.softgozar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.5:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.5:50060 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2011495 - Severity 1 - ET MALWARE Executable Download named to be .com FQDN : 192.168.2.5:49755 -> 87.236.211.195:443
Source: Network traffic	Suricata IDS: 2011495 - Severity 1 - ET MALWARE Executable Download named to be .com FQDN : 192.168.2.5:49773 -> 87.236.211.195:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_154.2.dr, chromecache_221.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_154.2.dr, chromecache_221.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_347.2.dr, chromecache_455.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: softgozar.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.softgozar.com
Source: global traffic	DNS traffic detected: DNS query: van.najva.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: beta.kaprila.com
Source: global traffic	DNS traffic detected: DNS query: cdn.yektanet.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: audience.yektanet.com
Source: global traffic	DNS traffic detected: DNS query: ua.yektanet.com
Source: global traffic	DNS traffic detected: DNS query: cr.najva.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.esetupdate.ir
Source: global traffic	DNS traffic detected: DNS query: esetupdate.ir
Source: global traffic	DNS traffic detected: DNS query: trustseal.enamad.ir
Source: global traffic	DNS traffic detected: DNS query: www.goftino.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,1710299649458277203,11009494479895388197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://softgozar.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,1710299649458277203,11009494479895388197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_482.2.dr	Binary or memory string: <a href='https://www.softgozar.com/vmware-workstation_/'
Source: chromecache_482.2.dr	Binary or memory string: <img src='https://www.softgozar.com/Image/Softwares/Icon/Workstation_Pro_12_SoftGozar.com.png' alt='VMware Workstation 17.6.0 Build 24238078 Full Win / Linux / macOS Fusion Pro' title='VMware Workstation 17.6.0 Build 24238078 Full Win / Linux / macOS Fusion Pro' />

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	Malicious	Reputation
https://esetupdate.ir/js/jquery-3.6.0.min.js	false	unknown
https://www.softgozar.com/Image/Softwares/Icon/Google_Chrome_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Base/eset96.jpg	true	unknown
https://www.softgozar.com/sgosr.xml	true	unknown
https://van.najva.com/static/js/scripts/softgozar-website-6984-36fa9dea-f935-4bf8-8e2c-d337e1b642c9.js?v=20240908018	false	unknown
https://www.softgozar.com/Image/Softwares/Icon/God_of_War_Ragnarok_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/hamam-iran-softgozar_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Microsoft_Office_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Joel_Fajerman_La_Aventura_de_Las_Plantas_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Car_Mechanic_and_Electrician_Training_Certificated_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Secret_Garden_Dreamcatcher_SoftGozar.com.png	true	unknown
https://ua.yektanet.com/__fake.gif?aa=event&abe=L&abf=f97fbfac-7f65-4bc6-8825-5c339f6f31c6&abj=1&aed=pub&abh=&sv=4&st=complete.js&fis=1&ffu=1&psc=12943&psi=10750&ac=https%3A%2F%2Fwww.softgozar.com%2F&ae=%7B%7D&ad=softgozar.com&as=%D8%B3%D8%A7%D9%81%D8%AA%20%DA%AF%D8%B0%D8%B1%20%D8%AF%D8%A7%D9%86%D8%B4%D9%86%D8%A7%D9%85%D9%87%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20-%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1&aef=tdVIXa1s&aec=60871&ai=33d53d4f-3897-b01f-08e3-badbd696fabb&abw=1263&abb=6252&aby=1280&abz=1024&al=1280&am=907&abk=%D8%B3%D8%A7%D9%81%D8%AA%20%DA%AF%D8%B0%D8%B1%20%D8%AF%D8%A7%D9%86%D8%B4%D9%86%D8%A7%D9%85%D9%87%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20-%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1	false	unknown
https://www.softgozar.com/Image/Softwares/Icon/Spanish_Lullaby_by_Montmartre_Strings_Based_on_Concierto_de_Aranjuez_by_Joaquin_Rodrigo_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/News/0307/icon/83e2e7_softgozar.jpg	true	unknown
https://esetupdate.ir/siteimages/eset_antivirus-5-180.jpg	false	unknown
https://www.softgozar.com/Image/Softwares/Icon/Windows_11_logo_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Mafatih_Nafis_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Mozilla_Thunderbird_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Foxit_Reader_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Snapp_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Lynda_Introduction_to_Graphic_Design_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Photo_Lab_PRO_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/_VivaVideo_Pro_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/News/9902/icon/879aa5_softgozar.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/PotPlayer_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/News/0307/icon/b76c5f_softgozar.jpg	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Angry_Birds_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Base/favicon.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/OfficeSuite_8_Premium_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Base/advertisement.svg	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Clash_of_Lords_2_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Revolution-Iran-1978_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Gmail_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/News/0307/icon/98d964_softgozar.jpg	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Opera_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Udemy_VIDEO_STORYTELLING_Creative_Excellence_Class_SoftGozar.com.png	true	unknown
https://www.softgozar.com/Image/Softwares/Icon/Udemy_Complete_Python_Bootcamp_From_Zero_to_Hero_in_Python_SoftGozar.com.png	true	unknown
https://esetupdate.ir/siteimages/eset_antivirus-5-30.jpg	false	unknown
https://www.softgozar.com/Image/Base/contact.svg	true	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.softgozar.com/cat/software	chromecache_482.2.dr	true		unknown
https://www.esetupdate.ir	chromecache_320.2.dr, chromecache_482.2.dr	false		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=3&Cat=535&Title=	chromecache_482.2.dr	true		unknown
https://faradars.org/how-to-learn/programming?utm_source=softgozar.com&utm_medium=referral-kaprila&u	chromecache_482.2.dr	false		unknown
https://www.softgozar.com	chromecache_482.2.dr	false		unknown
https://www.softgozar.com/lynda-hadoop-fundamentals_/	chromecache_482.2.dr	true		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_201.2.dr, chromecache_312.2.dr	false	URL Reputation: safe	unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=1&Cat=12&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=1&Cat=16&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/potplayer_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=6&Cat=92&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=3&Cat=79&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=2&Cat=146&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/kaspersky-internet-security-offline-update_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/search?orderby=dl	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=5&Cat=568&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/windows-10_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/udemy-adobe-photoshop-cc-web-design-responsive-design-and-ui_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=3&Cat=75&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/god-of-war-ragnarok_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=6&Cat=579&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/spanish-lullaby-by-montmartre-strings-based-on-concierto-de-aranjuez-by-jo	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/startallback_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/Image/Softwares/Icon/Kaspersky_Internet_Security_Offline_Update__SoftGozar	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=4&Cat=297&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/enotria-the-last-song_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Redirect.aspx?AdId=1548	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/shareit-android_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=1&Cat=27&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/SoftwareRss.aspx	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=1&Cat=23&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/news/51166/MPC-BE-%d8%a8%d9%87%d8%aa%d8%b1-%d8%a7%d8%b2-%d9%87%d9%85%db%8c	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/officesuite_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/euro-truck-simulator-2_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/WebPage/Software.aspx?MCat=4&Cat=127&Title=	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/five-nights-at-freddys-into-the-pit_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/nvidia-geforce_/	chromecache_482.2.dr	true		unknown
https://www.softgozar.com/complete-python-bootcamp_/	chromecache_482.2.dr	true		unknown
https://esetupdate.ir	chromecache_320.2.dr	false		unknown
https://www.softgozar.com/news/51165/%d9%85%d8%a7%db%8c%da%a9%d8%b1%d9%88%d8%b3%d8%a7%d9%81%d8%aa-%d	chromecache_482.2.dr	true		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
87.236.211.195	softgozar.com	United Kingdom	200296	GAMESERVERPROVIDERIR	true
185.18.212.82	beta.kaprila.com	Iran (ISLAMIC Republic Of)	44285	SEFROYEKPARDAZENG-ASAS42043-BertinaTechnologyCompanyIR	false
87.236.211.196	esetupdate.ir	United Kingdom	200296	GAMESERVERPROVIDERIR	false
185.166.104.3	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir	Iran (ISLAMIC Republic Of)	202319	CAFEBAZAARIR	false
185.166.104.4	unknown	Iran (ISLAMIC Republic Of)	202319	CAFEBAZAARIR	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
216.239.36.181	unknown	United States	15169	GOOGLEUS	false
212.16.67.4	trustseal.enamad.ir	Iran (ISLAMIC Republic Of)	44889	AZMA-ASIR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
188.114.96.3	cr.najva.com	European Union	13335	CLOUDFLARENETUS	false
216.58.212.162	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.5
192.168.2.10

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529410
Start date and time:	2024-10-09 00:13:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://softgozar.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@22/570@64/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.softgozar.com/WebPage/Redirect.aspx?AdId=1941

Input	Output
URL: https://www.softgozar.com/ Model: jbxai	{ "brand":["Pilgoon"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":" ", "has_visible_qrcode":false}

URL: https://www.softgozar.com/ Model: jbxai	{ "brand":["ESET"], "contains_trigger_text":true, "trigger_text":"Click here to view document", "prominent_button_name":"VIEW DOCUMENT", "text_input_field_labels":["Globi"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"Globi", "has_visible_qrcode":false}

URL: https://www.softgozar.com/ Model: jbxai	{ "brand":["Pilgoon"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":" ", "has_visible_qrcode":false}

URL: https://esetupdate.ir/?utm_source=softgozar&utm_medium=banner&utm_campaign=Ban Model: jbxai	{ "brand":["ESET"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":" 32 ", "has_visible_qrcode":false}

URL: https://esetupdate.ir/?utm_source=softgozar&utm_medium=banner&utm_campaign=Ban Model: jbxai	"{ \"brand\": [\"ESET\"], \"contains_trigger_text\": false, \"trigger_text\": \"\", \"prominent_button_name\": \"unknown\", \"text_input_field_labels\": \"unknown\", \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \" 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 3} "

URL: https://www.softgozar.com/ Model: jbxai	"{ \"brand\": [\"Pilgoon\"], \"contains_trigger_text\": true, \"trigger_text\": \"Click here to view document\", \"prominent_button_name\": \"Click here to view document\", \"text_input_field_labels\": [\"Globi\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": true, \"text\": \" ... 38006 1403/07/17 : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 761735181 \| 9433 \| : 76} "

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 21:14:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9826108292529225
Encrypted:	false
SSDEEP:	48:8rds3sTMAjuXHIidAKZdA19ehwiZUklqeh6y+3:88sT/By
MD5:	461D0F3822A4B45FDE0F99FCB1603E92
SHA1:	9B81AEC68B26500E41274868F219FF03773F3BE0
SHA-256:	1764EF03181B144C56B269ED69D0FB90011AFF073CDC602ADBC9201475A4AC81
SHA-512:	9536B59EF3C295179F0CB47A8A59C82B6D93078890F4D1FFC54AD7CC5E17296D5DC939E76939E4DEC10B1125DF7429710A5BBB55EB77371D0C65D56402A6AA56
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......g....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IHY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VHY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VHY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VHY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VHY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............bZ......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 9, 2024 00:14:13.866564989 CEST	192.168.2.5	1.1.1.1	0x7bd1	Standard query (0)	softgozar.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:13.866710901 CEST	192.168.2.5	1.1.1.1	0xcdf8	Standard query (0)	softgozar.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:14.696999073 CEST	192.168.2.5	1.1.1.1	0x3acc	Standard query (0)	softgozar.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:14.697587013 CEST	192.168.2.5	1.1.1.1	0x8829	Standard query (0)	softgozar.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:16.446757078 CEST	192.168.2.5	1.1.1.1	0x8a24	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.446949959 CEST	192.168.2.5	1.1.1.1	0xaa9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:16.456034899 CEST	192.168.2.5	1.1.1.1	0x215c	Standard query (0)	www.softgozar.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.456618071 CEST	192.168.2.5	1.1.1.1	0xf0c1	Standard query (0)	www.softgozar.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:20.443675041 CEST	192.168.2.5	1.1.1.1	0x75cc	Standard query (0)	www.softgozar.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.443835020 CEST	192.168.2.5	1.1.1.1	0xc90c	Standard query (0)	www.softgozar.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:20.569581032 CEST	192.168.2.5	1.1.1.1	0xdc7a	Standard query (0)	van.najva.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.569814920 CEST	192.168.2.5	1.1.1.1	0x93d5	Standard query (0)	van.najva.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:23.214967966 CEST	192.168.2.5	1.1.1.1	0x77f2	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.215245008 CEST	192.168.2.5	1.1.1.1	0xc191	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:23.235620022 CEST	192.168.2.5	1.1.1.1	0xfa00	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.235846043 CEST	192.168.2.5	1.1.1.1	0x1563	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 9, 2024 00:14:23.492177010 CEST	192.168.2.5	1.1.1.1	0x41de	Standard query (0)	van.najva.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.492672920 CEST	192.168.2.5	1.1.1.1	0x7203	Standard query (0)	van.najva.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:32.722523928 CEST	192.168.2.5	1.1.1.1	0x8d9d	Standard query (0)	beta.kaprila.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:32.722677946 CEST	192.168.2.5	1.1.1.1	0xcc30	Standard query (0)	beta.kaprila.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:34.132419109 CEST	192.168.2.5	1.1.1.1	0x9a1f	Standard query (0)	cdn.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.133289099 CEST	192.168.2.5	1.1.1.1	0x648e	Standard query (0)	cdn.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:34.660459042 CEST	192.168.2.5	1.1.1.1	0xef8a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.660744905 CEST	192.168.2.5	1.1.1.1	0xe095	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 9, 2024 00:14:37.444293976 CEST	192.168.2.5	1.1.1.1	0x23ff	Standard query (0)	audience.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.444443941 CEST	192.168.2.5	1.1.1.1	0x7384	Standard query (0)	audience.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:37.628310919 CEST	192.168.2.5	1.1.1.1	0xd0ec	Standard query (0)	ua.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.628767014 CEST	192.168.2.5	1.1.1.1	0x82d	Standard query (0)	ua.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:37.930161953 CEST	192.168.2.5	1.1.1.1	0x1a36	Standard query (0)	beta.kaprila.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.930603027 CEST	192.168.2.5	1.1.1.1	0x485	Standard query (0)	beta.kaprila.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:37.968753099 CEST	192.168.2.5	1.1.1.1	0xb82d	Standard query (0)	cdn.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.968960047 CEST	192.168.2.5	1.1.1.1	0x690e	Standard query (0)	cdn.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:38.619082928 CEST	192.168.2.5	1.1.1.1	0x47bd	Standard query (0)	audience.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:38.619082928 CEST	192.168.2.5	1.1.1.1	0x55ad	Standard query (0)	audience.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:40.743915081 CEST	192.168.2.5	1.1.1.1	0xb5d6	Standard query (0)	ua.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:40.744127989 CEST	192.168.2.5	1.1.1.1	0x8ed	Standard query (0)	ua.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:43.158879995 CEST	192.168.2.5	1.1.1.1	0xecca	Standard query (0)	cr.najva.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:43.159153938 CEST	192.168.2.5	1.1.1.1	0x4ceb	Standard query (0)	cr.najva.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:47.574312925 CEST	192.168.2.5	1.1.1.1	0x9b32	Standard query (0)	cr.najva.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:47.574620008 CEST	192.168.2.5	1.1.1.1	0x9c8f	Standard query (0)	cr.najva.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:49.234762907 CEST	192.168.2.5	1.1.1.1	0x5380	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:49.235378027 CEST	192.168.2.5	1.1.1.1	0xb1b3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:54.034034014 CEST	192.168.2.5	1.1.1.1	0x7cb9	Standard query (0)	ua.yektanet.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:54.034415007 CEST	192.168.2.5	1.1.1.1	0x7ef3	Standard query (0)	ua.yektanet.com	65	IN (0x0001)	false
Oct 9, 2024 00:15:05.982460022 CEST	192.168.2.5	1.1.1.1	0xb493	Standard query (0)	www.esetupdate.ir	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:05.983413935 CEST	192.168.2.5	1.1.1.1	0x3bc9	Standard query (0)	www.esetupdate.ir	65	IN (0x0001)	false
Oct 9, 2024 00:15:07.149862051 CEST	192.168.2.5	1.1.1.1	0xda8	Standard query (0)	www.esetupdate.ir	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:07.150094986 CEST	192.168.2.5	1.1.1.1	0x8fd7	Standard query (0)	www.esetupdate.ir	65	IN (0x0001)	false
Oct 9, 2024 00:15:08.989350080 CEST	192.168.2.5	1.1.1.1	0xcc19	Standard query (0)	esetupdate.ir	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:08.989480019 CEST	192.168.2.5	1.1.1.1	0x83ad	Standard query (0)	esetupdate.ir	65	IN (0x0001)	false
Oct 9, 2024 00:15:13.333642006 CEST	192.168.2.5	1.1.1.1	0xa24f	Standard query (0)	trustseal.enamad.ir	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:13.333966970 CEST	192.168.2.5	1.1.1.1	0x2ded	Standard query (0)	trustseal.enamad.ir	65	IN (0x0001)	false
Oct 9, 2024 00:15:14.249520063 CEST	192.168.2.5	1.1.1.1	0xf152	Standard query (0)	esetupdate.ir	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:14.250165939 CEST	192.168.2.5	1.1.1.1	0x29ec	Standard query (0)	esetupdate.ir	65	IN (0x0001)	false
Oct 9, 2024 00:15:16.583992958 CEST	192.168.2.5	1.1.1.1	0xb438	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:16.583992958 CEST	192.168.2.5	1.1.1.1	0xae8f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 9, 2024 00:15:18.279656887 CEST	192.168.2.5	1.1.1.1	0x9f50	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.279856920 CEST	192.168.2.5	1.1.1.1	0x1713	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 9, 2024 00:15:18.319485903 CEST	192.168.2.5	1.1.1.1	0x1ae4	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.319863081 CEST	192.168.2.5	1.1.1.1	0xf151	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 9, 2024 00:15:19.754327059 CEST	192.168.2.5	1.1.1.1	0x1358	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:19.754498005 CEST	192.168.2.5	1.1.1.1	0xbaf4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 9, 2024 00:15:43.363406897 CEST	192.168.2.5	1.1.1.1	0x2829	Standard query (0)	www.goftino.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:43.363406897 CEST	192.168.2.5	1.1.1.1	0x27	Standard query (0)	www.goftino.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 9, 2024 00:14:13.875937939 CEST	1.1.1.1	192.168.2.5	0x7bd1	No error (0)	softgozar.com		87.236.211.195	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:14.788013935 CEST	1.1.1.1	192.168.2.5	0x3acc	No error (0)	softgozar.com		87.236.211.195	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.455843925 CEST	1.1.1.1	192.168.2.5	0xaa9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 9, 2024 00:14:16.455857992 CEST	1.1.1.1	192.168.2.5	0x8a24	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.465089083 CEST	1.1.1.1	192.168.2.5	0x215c	No error (0)	www.softgozar.com	softgozar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:16.465089083 CEST	1.1.1.1	192.168.2.5	0x215c	No error (0)	softgozar.com		87.236.211.195	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.611042976 CEST	1.1.1.1	192.168.2.5	0xf0c1	No error (0)	www.softgozar.com	softgozar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:20.453461885 CEST	1.1.1.1	192.168.2.5	0xc90c	No error (0)	www.softgozar.com	softgozar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:20.578488111 CEST	1.1.1.1	192.168.2.5	0xdc7a	No error (0)	van.najva.com	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:20.578488111 CEST	1.1.1.1	192.168.2.5	0xdc7a	No error (0)	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.578488111 CEST	1.1.1.1	192.168.2.5	0xdc7a	No error (0)	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.579483032 CEST	1.1.1.1	192.168.2.5	0x93d5	No error (0)	van.najva.com	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:20.599754095 CEST	1.1.1.1	192.168.2.5	0x75cc	No error (0)	www.softgozar.com	softgozar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:20.599754095 CEST	1.1.1.1	192.168.2.5	0x75cc	No error (0)	softgozar.com		87.236.211.195	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221856117 CEST	1.1.1.1	192.168.2.5	0x77f2	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221856117 CEST	1.1.1.1	192.168.2.5	0x77f2	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221856117 CEST	1.1.1.1	192.168.2.5	0x77f2	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221856117 CEST	1.1.1.1	192.168.2.5	0x77f2	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221856117 CEST	1.1.1.1	192.168.2.5	0x77f2	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.221906900 CEST	1.1.1.1	192.168.2.5	0xc191	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:23.242381096 CEST	1.1.1.1	192.168.2.5	0xfa00	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.502146959 CEST	1.1.1.1	192.168.2.5	0x41de	No error (0)	van.najva.com	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:23.502146959 CEST	1.1.1.1	192.168.2.5	0x41de	No error (0)	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.502146959 CEST	1.1.1.1	192.168.2.5	0x41de	No error (0)	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:23.502684116 CEST	1.1.1.1	192.168.2.5	0x7203	No error (0)	van.najva.com	5f0e2fd6e3ec6632ff0c02716001cd1e.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:25.909426928 CEST	1.1.1.1	192.168.2.5	0xdc43	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:25.909426928 CEST	1.1.1.1	192.168.2.5	0xdc43	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:26.461985111 CEST	1.1.1.1	192.168.2.5	0x1203	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:26.461985111 CEST	1.1.1.1	192.168.2.5	0x1203	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:29.001733065 CEST	1.1.1.1	192.168.2.5	0xd4e	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:29.001733065 CEST	1.1.1.1	192.168.2.5	0xd4e	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:32.734730005 CEST	1.1.1.1	192.168.2.5	0x8d9d	No error (0)	beta.kaprila.com		185.18.212.82	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.139669895 CEST	1.1.1.1	192.168.2.5	0x9a1f	No error (0)	cdn.yektanet.com	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:34.139669895 CEST	1.1.1.1	192.168.2.5	0x9a1f	No error (0)	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.139669895 CEST	1.1.1.1	192.168.2.5	0x9a1f	No error (0)	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.140614986 CEST	1.1.1.1	192.168.2.5	0x648e	No error (0)	cdn.yektanet.com	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:34.667305946 CEST	1.1.1.1	192.168.2.5	0xef8a	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.667305946 CEST	1.1.1.1	192.168.2.5	0xef8a	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.667305946 CEST	1.1.1.1	192.168.2.5	0xef8a	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:34.667305946 CEST	1.1.1.1	192.168.2.5	0xef8a	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.571625948 CEST	1.1.1.1	192.168.2.5	0x23ff	No error (0)	audience.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.571625948 CEST	1.1.1.1	192.168.2.5	0x23ff	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.571625948 CEST	1.1.1.1	192.168.2.5	0x23ff	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.572242975 CEST	1.1.1.1	192.168.2.5	0x7384	No error (0)	audience.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.637054920 CEST	1.1.1.1	192.168.2.5	0xd0ec	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.637054920 CEST	1.1.1.1	192.168.2.5	0xd0ec	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.637054920 CEST	1.1.1.1	192.168.2.5	0xd0ec	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.637772083 CEST	1.1.1.1	192.168.2.5	0x82d	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.938302040 CEST	1.1.1.1	192.168.2.5	0x1a36	No error (0)	beta.kaprila.com		185.18.212.82	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.976654053 CEST	1.1.1.1	192.168.2.5	0x690e	No error (0)	cdn.yektanet.com	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.976722002 CEST	1.1.1.1	192.168.2.5	0xb82d	No error (0)	cdn.yektanet.com	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:37.976722002 CEST	1.1.1.1	192.168.2.5	0xb82d	No error (0)	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:37.976722002 CEST	1.1.1.1	192.168.2.5	0xb82d	No error (0)	00b11fa28d7c94ae766c86455be64774.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:38.626427889 CEST	1.1.1.1	192.168.2.5	0x55ad	No error (0)	audience.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:38.626455069 CEST	1.1.1.1	192.168.2.5	0x47bd	No error (0)	audience.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:38.626455069 CEST	1.1.1.1	192.168.2.5	0x47bd	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:38.626455069 CEST	1.1.1.1	192.168.2.5	0x47bd	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:40.752592087 CEST	1.1.1.1	192.168.2.5	0xb5d6	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:40.752592087 CEST	1.1.1.1	192.168.2.5	0xb5d6	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:40.752592087 CEST	1.1.1.1	192.168.2.5	0xb5d6	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:40.754909992 CEST	1.1.1.1	192.168.2.5	0x8ed	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:43.166318893 CEST	1.1.1.1	192.168.2.5	0xecca	No error (0)	cr.najva.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:43.166318893 CEST	1.1.1.1	192.168.2.5	0xecca	No error (0)	cr.najva.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:43.166337013 CEST	1.1.1.1	192.168.2.5	0x4ceb	No error (0)	cr.najva.com			65	IN (0x0001)	false
Oct 9, 2024 00:14:45.179790974 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:45.179790974 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:47.583549023 CEST	1.1.1.1	192.168.2.5	0x9b32	No error (0)	cr.najva.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:47.583549023 CEST	1.1.1.1	192.168.2.5	0x9b32	No error (0)	cr.najva.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:47.585870028 CEST	1.1.1.1	192.168.2.5	0x9c8f	No error (0)	cr.najva.com			65	IN (0x0001)	false
Oct 9, 2024 00:14:49.243989944 CEST	1.1.1.1	192.168.2.5	0x5380	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:54.042943001 CEST	1.1.1.1	192.168.2.5	0x7cb9	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:54.042943001 CEST	1.1.1.1	192.168.2.5	0x7cb9	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:54.042943001 CEST	1.1.1.1	192.168.2.5	0x7cb9	No error (0)	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		185.166.104.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:54.043499947 CEST	1.1.1.1	192.168.2.5	0x7ef3	No error (0)	ua.yektanet.com	39d59ad4453dc8dd08f96b5978afb962.cdn.edge.sotoon.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:06.333245039 CEST	1.1.1.1	192.168.2.5	0xb493	No error (0)	www.esetupdate.ir	esetupdate.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:06.333245039 CEST	1.1.1.1	192.168.2.5	0xb493	No error (0)	esetupdate.ir		87.236.211.196	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:06.340464115 CEST	1.1.1.1	192.168.2.5	0x3bc9	No error (0)	www.esetupdate.ir	esetupdate.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:07.553944111 CEST	1.1.1.1	192.168.2.5	0x8fd7	No error (0)	www.esetupdate.ir	esetupdate.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:07.621182919 CEST	1.1.1.1	192.168.2.5	0xda8	No error (0)	www.esetupdate.ir	esetupdate.ir		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:07.621182919 CEST	1.1.1.1	192.168.2.5	0xda8	No error (0)	esetupdate.ir		87.236.211.196	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:08.712522984 CEST	1.1.1.1	192.168.2.5	0x843c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:08.712522984 CEST	1.1.1.1	192.168.2.5	0x843c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:09.195713043 CEST	1.1.1.1	192.168.2.5	0xcc19	No error (0)	esetupdate.ir		87.236.211.196	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:13.342084885 CEST	1.1.1.1	192.168.2.5	0xa24f	No error (0)	trustseal.enamad.ir		212.16.67.4	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:14.627032995 CEST	1.1.1.1	192.168.2.5	0xf152	No error (0)	esetupdate.ir		87.236.211.196	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:16.590974092 CEST	1.1.1.1	192.168.2.5	0xae8f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 9, 2024 00:15:16.591006994 CEST	1.1.1.1	192.168.2.5	0xb438	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.286282063 CEST	1.1.1.1	192.168.2.5	0x9f50	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:18.286282063 CEST	1.1.1.1	192.168.2.5	0x9f50	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.286282063 CEST	1.1.1.1	192.168.2.5	0x9f50	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.286282063 CEST	1.1.1.1	192.168.2.5	0x9f50	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.286282063 CEST	1.1.1.1	192.168.2.5	0x9f50	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:18.287108898 CEST	1.1.1.1	192.168.2.5	0x1713	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:18.326899052 CEST	1.1.1.1	192.168.2.5	0x1ae4	No error (0)	td.doubleclick.net		216.58.212.162	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:19.761264086 CEST	1.1.1.1	192.168.2.5	0x1358	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:19.761264086 CEST	1.1.1.1	192.168.2.5	0x1358	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:19.761264086 CEST	1.1.1.1	192.168.2.5	0x1358	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:19.761264086 CEST	1.1.1.1	192.168.2.5	0x1358	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:25.614270926 CEST	1.1.1.1	192.168.2.5	0xe544	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:15:25.614270926 CEST	1.1.1.1	192.168.2.5	0xe544	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:15:43.370835066 CEST	1.1.1.1	192.168.2.5	0x2829	No error (0)	www.goftino.com		5.63.13.218	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:13.903897047 CEST	428	OUT	GET / HTTP/1.1 Host: softgozar.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:14.690742970 CEST	356	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://softgozar.com/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:14 GMT Content-Length: 139 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://softgozar.com/">here</a>.</h2></body></html>
Oct 9, 2024 00:14:59.756860971 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 9, 2024 00:15:44.775427103 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:15:06.347987890 CEST	488	OUT	GET /?utm_source=softgozar&utm_medium=banner&utm_campaign=Ban HTTP/1.1 Host: www.esetupdate.ir Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:15:07.147254944 CEST	484	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://www.esetupdate.ir/?utm_source=softgozar&utm_medium=banner&utm_campaign=Ban Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:15:06 GMT Content-Length: 207 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 73 65 74 75 70 64 61 74 65 2e 69 72 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 73 6f 66 74 67 6f 7a 61 72 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 62 61 6e 6e 65 72 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 42 61 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.esetupdate.ir/?utm_source=softgozar&utm_medium=banner&utm_campaign=Ban">here</a>.</h2></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:15 UTC	656	OUT	GET / HTTP/1.1 Host: softgozar.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:14:16 UTC	240	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://www.softgozar.com/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:15 GMT Connection: close Content-Length: 143
2024-10-08 22:14:16 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.softgozar.com/">here</a>.</h2></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 22:14:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66685 Date: Tue, 08 Oct 2024 22:14:17 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:17 UTC	660	OUT	GET / HTTP/1.1 Host: www.softgozar.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:14:18 UTC	331	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 Set-Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd; path=/; HttpOnly; SameSite=Lax X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:17 GMT Connection: close Content-Length: 349780
2024-10-08 22:14:18 UTC	16053	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 61 22 20 64 69 72 3d 22 72 74 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 09 d8 b3 d8 a7 d9 81 d8 aa 20 da af d8 b0 d8 b1 20 d8 af d8 a7 d9 86 d8 b4 d9 86 d8 a7 d9 85 d9 87 20 d9 86 d8 b1 d9 85 20 d8 a7 d9 81 d8 b2 d8 a7 d8 b1 20 2d 20 d8 af d8 a7 d9 86 d9 84 d9 88 d8 af 20 d8 b1 d8 a7 db 8c da af d8 a7 d9 86 20 d9 86 d8 b1 d9 85 20 d8 a7 d9 81 d8 b2 d8 a7 d8 b1 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 65 72 69 66 79 2d 76 31 22 20 63 6f 6e 74 65 6e 74 3d 22 36 74 55 4b 72 4c 38 6f 78 4c 66 4e 56 4f 4e 53 41 64 62 46 66 44 77 61 68 72 65 4c 4c 6f Data Ascii: <!DOCTYPE html><html lang="fa" dir="rtl"><head><title> - </title><meta charset="UTF-8" /><meta name="verify-v1" content="6tUKrL8oxLfNVONSAdbFfDwahreLLo
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 7a 69 77 37 67 38 57 6c 63 6f 65 7a 5a 74 76 2f 2f 2f 52 2f 2f 37 58 39 6d 65 37 73 64 57 47 49 4b 6a 48 6a 70 64 34 31 4b 73 56 46 6f 41 45 54 2f 77 64 4a 31 33 49 6a 70 33 39 36 62 52 62 6a 39 50 45 33 6c 49 68 4b 42 45 75 6b 41 41 66 41 38 33 68 58 34 37 33 56 78 31 41 56 4b 6b 43 76 35 46 74 2b 4c 76 59 4d 32 44 48 30 45 63 33 45 42 74 78 4c 52 66 58 63 62 73 36 66 53 48 71 44 59 36 55 46 63 39 6d 61 42 4f 50 74 66 33 50 44 69 68 72 30 64 70 70 76 32 76 6d 31 32 72 37 6c 74 76 77 39 44 72 30 39 71 47 62 71 45 6e 66 6a 76 66 38 4a 6d 61 66 54 75 69 53 55 76 72 71 51 77 6a 79 66 7a 45 6e 2b 4a 44 73 52 58 35 69 53 6a 63 32 4f 53 66 54 6e 62 66 4f 63 58 67 44 6a 66 38 46 4e 58 67 62 42 38 4a 79 59 49 73 37 73 35 6a 57 59 37 6f 33 65 72 53 4a 6a 30 37 77 Data Ascii: ziw7g8WlcoezZtv///R//7X9me7sdWGIKjHjpd41KsVFoAET/wdJ13Ijp396bRbj9PE3lIhKBEukAAfA83hX473Vx1AVKkCv5Ft+LvYM2DH0Ec3EBtxLRfXcbs6fSHqDY6UFc9maBOPtf3PDihr0dppv2vm12r7ltvw9Dr09qGbqEnfjvf8JmafTuiSUvrqQwjyfzEn+JDsRX5iSjc2OSfTnbfOcXgDjf8FNXgbB8JyYIs7s5jWY7o3erSJj07w
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 28 29 20 3d 3d 20 66 61 6c 73 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 73 70 4e 65 74 48 69 64 64 65 6e 22 3e 0d 0a 0d 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 45 56 45 4e 54 56 41 4c 49 44 41 54 49 4f 4e 22 20 69 64 3d 22 5f 5f 45 56 45 4e 54 56 41 4c 49 44 41 54 49 4f 4e 22 20 76 61 6c 75 65 3d 22 2f 77 45 64 41 41 4f 76 56 58 44 31 6f 59 45 4c 65 76 65 4d 72 30 76 48 43 6d 59 50 32 33 2f 44 32 2f 63 76 79 59 6d 78 56 4c 71 6c 77 61 4e 63 6e Data Ascii: == "function" && ValidatorOnSubmit() == false) return false;return true;}//...</script><div class="aspNetHidden"><input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="/wEdAAOvVXD1oYELeveMr0vHCmYP23/D2/cvyYmxVLqlwaNcn
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 26 54 69 74 6c 65 3d d8 af d8 a7 d9 86 d9 84 d9 88 d8 af 2d da af d8 b1 d8 a7 d9 81 db 8c da a9 2d 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 27 5f 73 65 6c 66 27 20 74 69 74 6c 65 3d 27 da af d8 b1 d8 a7 d9 81 db 8c da a9 20 27 3e da af d8 b1 d8 a7 d9 81 db 8c da a9 20 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 57 65 62 50 61 67 65 2f 53 Data Ascii: &Title=--' target='_self' title=' '> </a></li> <li><a href='https://www.softgozar.com/WebPage/S
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 57 65 62 50 61 67 65 2f 53 6f 66 74 77 61 72 65 2e 61 73 70 78 3f 4d 43 61 74 3d 32 26 43 61 74 3d 31 34 34 26 54 69 74 6c 65 3d d8 af d8 a7 d9 86 d9 84 d9 88 d8 af 2d d8 a8 d8 b1 d9 86 d8 a7 d9 85 d9 87 2d d9 86 d9 88 db 8c d8 b3 db 8c 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 27 5f 73 65 6c 66 27 20 74 69 74 6c 65 3d 27 Data Ascii: <li><a href='https://www.softgozar.com/WebPage/Software.aspx?MCat=2&Cat=144&Title=--' target='_self' title='
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 62 61 63 6b 67 72 61 79 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 6d 79 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 73 69 64 65 62 61 72 27 29 2e 63 73 73 28 22 72 69 67 68 74 22 2c 20 22 2d 32 37 30 70 78 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 62 61 63 6b 67 72 61 79 27 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 63 73 73 28 27 6f 76 65 72 66 6c 6f 77 27 2c Data Ascii: }); $("#backgray").click(function myfunction() { $('#sidebar').css("right", "-270px"); $('#backgray').hide(); $('body').css('overflow',
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: aa db 8c 27 3e d9 85 d9 88 d8 b3 db 8c d9 82 db 8c 20 d8 b3 d9 86 d8 aa db 8c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 57 65 62 50 61 67 65 2f 53 6f 66 74 77 61 72 65 2e 61 73 70 78 3f 4d 43 61 74 3d 36 26 43 61 74 3d 39 34 26 54 69 74 6c 65 3d d8 af d8 a7 d9 86 d9 84 d9 88 d8 af 2d d9 85 d9 88 d9 84 d9 88 d8 af db 8c 2d d9 88 2d d9 85 d8 af d8 a7 d8 ad db 8c 27 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: '> </a></li> <li><a href='https://www.softgozar.com/WebPage/Software.aspx?MCat=6&Cat=94&Title=---'
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 65 74 3d 27 5f 73 65 6c 66 27 20 74 69 74 6c 65 3d 27 d8 b3 d9 84 d8 a7 d9 85 d8 aa 27 3e d8 b3 d9 84 d8 a7 d9 85 d8 aa 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 67 6f 7a 61 72 2e 63 6f 6d 2f 57 65 62 50 61 67 65 2f 53 6f 66 74 77 61 72 65 2e 61 73 70 78 3f 4d 43 61 74 3d 33 26 43 61 74 3d 32 30 35 26 54 69 74 6c 65 3d d8 af d8 a7 d9 86 d9 84 d9 88 d8 af 2d d8 b3 db 8c d8 b3 d8 aa d9 85 db 8c 27 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: et='_self' title=''></a></li> <li><a href='https://www.softgozar.com/WebPage/Software.aspx?MCat=3&Cat=205&Title=-'
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 4c 6f 61 64 69 6e 67 27 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 4c 6f 61 64 69 6e 67 46 69 78 27 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 78 68 72 2c 20 61 6a 61 78 4f 70 Data Ascii: $('#Loading').hide(); $('#LoadingFix').show(); }, error: function (xhr, ajaxOp
2024-10-08 22:14:18 UTC	16384	IN	Data Raw: 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 4c 61 62 65 6c 22 3e 3c 73 74 72 6f 6e 67 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 22 3e d9 81 d8 a7 db 8c d8 b1 d9 81 d8 a7 da a9 d8 b3 20 d9 85 d8 b1 d9 88 d8 b1 da af d8 b1 20 d8 a7 db Data Ascii: /> </div> <div style="padding: 0px; margin: 0px;"> <span class="Label"><strong style="font-weight: normal">

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://softgozar.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Windows Analysis Report
http://softgozar.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 22:14:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66620 Date: Tue, 08 Oct 2024 22:14:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-08 22:14:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:19 UTC	624	OUT	GET /CSS/bundle.min.css?v=638640350579713739 HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:19 UTC	299	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: text/css Last-Modified: Sat, 24 Aug 2024 09:39:57 GMT Accept-Ranges: bytes ETag: "52d1a9949f6da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:19 GMT Connection: close Content-Length: 44240
2024-10-08 22:14:19 UTC	16085	IN	Data Raw: 23 6d 62 6d 63 70 65 62 75 6c 5f 74 61 62 6c 65 20 6c 69 20 64 69 76 2e 62 75 74 74 6f 6e 62 67 2c 23 6d 62 6d 63 70 65 62 75 6c 5f 77 72 61 70 70 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 61 63 33 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 30 7d 23 6d 62 6d 63 70 65 62 75 6c 5f 74 61 62 6c 65 20 6c 69 20 61 2c 23 6d 62 6d 63 70 65 62 75 6c 5f 74 61 62 6c 65 20 75 6c 20 6c 69 20 61 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 6d 62 6d 63 70 65 62 75 6c 5f 77 72 61 70 70 65 Data Ascii: #mbmcpebul_table li div.buttonbg,#mbmcpebul_wrapper{border-color:#fac300;box-shadow:none;border-style:solid;padding:0}#mbmcpebul_table li a,#mbmcpebul_table ul li a{white-space:nowrap;-webkit-tap-highlight-color:transparent;display:block}#mbmcpebul_wrappe
2024-10-08 22:14:19 UTC	16384	IN	Data Raw: 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 30 33 30 61 31 36 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 72 61 6e 53 61 6e 73 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 38 70 78 7d 2e 54 65 78 74 42 6f 78 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 38 65 62 32 7d 2e 54 65 78 74 42 6f 78 5f 4c 54 52 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 70 61 64 64 69 6e 67 3a 39 70 78 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 Data Ascii: der:1px solid #e0e0e2;font-size:1rem;line-height:24px;width:100%;color:#030a16;font-family:IranSans;text-indent:8px}.TextBox:focus{border-color:#008eb2}.TextBox_LTR{text-align:left;direction:ltr;padding:9px 0;border-radius:8px;background-color:#fff;border
2024-10-08 22:14:20 UTC	11771	IN	Data Raw: 78 20 30 7d 2e 61 64 76 62 61 6e 74 6f 70 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 75 6c 67 61 6d 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 32 37 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 65 33 39 35 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 6c 73 6f 66 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 34 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 65 33 39 35 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 6c 73 6f 66 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f Data Ascii: x 0}.advbantop{border:0;height:90px}.ulgame{margin-left:-132px!important;height:270px!important;border-right:1px solid #1e395d!important}.ulsoft{margin-left:-245px!important;border-right:1px solid #1e395d!important}.ulsoft2{margin-left:-424px!important;bo

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:19 UTC	630	OUT	GET /Fonts/IRANSansWeb_Medium.woff HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.softgozar.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:19 UTC	302	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: font/x-woff Last-Modified: Sun, 01 Jan 2017 07:34:56 GMT Accept-Ranges: bytes ETag: "878a7c8c164d21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:19 GMT Connection: close Content-Length: 36141
2024-10-08 22:14:19 UTC	16082	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8d 2d 00 0f 00 00 00 00 e0 c8 00 04 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 18 00 00 00 15 44 53 49 47 00 00 7b 90 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 7b 98 00 00 00 67 00 00 00 7e 11 ab 11 44 47 50 4f 53 00 00 7c 00 00 00 0d d6 00 00 17 fc f3 0a 8e b1 47 53 55 42 00 00 89 d8 00 00 03 3e 00 00 05 92 d0 bf c6 41 4f 53 2f 32 00 00 01 d4 00 00 00 58 00 00 00 60 c6 77 4f f5 63 6d 61 70 00 00 07 40 00 00 04 2c 00 00 06 4a 8b a6 7d 4d 67 61 73 70 00 00 7b 80 00 00 00 10 00 00 00 10 00 18 00 21 67 6c 79 66 00 00 0e bc 00 00 63 70 00 00 9c a0 7d d0 4e 4b 68 65 61 64 00 00 01 58 00 00 00 35 00 00 00 36 13 da 72 e7 68 68 65 61 00 00 01 90 00 00 00 21 00 00 00 24 18 55 0d a5 68 6d 74 78 00 00 02 2c 00 00 05 Data Ascii: wOFF-33DSIG{GDEF{g~DGPOS\|GSUB>AOS/2X`wOcmap@,J}Mgasp{!glyfcp}NKheadX56rhhea!$Uhmtx,
2024-10-08 22:14:19 UTC	16384	IN	Data Raw: c4 44 1a 95 e5 14 9c 0b 9a 41 db cc 5e 74 d2 07 6b eb 21 bf 3d 95 40 94 3b a4 ef 9a 33 d7 59 e5 8e 9a c5 12 49 28 5d 65 f5 59 dc 49 11 43 0b 19 87 4f 65 13 17 ad 5a 31 4f 6d 01 11 14 6e e1 01 7b b4 44 4b 0a 35 2a 9a 3c c4 68 ac 1e a8 96 83 e1 98 d6 6f 34 45 9d 6a a9 3c e3 d3 04 34 d6 4a 3d 6f 3b c5 27 5d 35 c5 0e 86 87 2b 04 72 9d 44 6c b5 9b 78 92 64 2a cc 23 d0 78 55 a4 0f ba 88 37 60 75 28 ba 42 e4 fd 1d e0 cd 9f 79 70 72 c8 5f 99 09 eb 60 a2 69 78 a1 b7 0e 10 8f 69 ac d0 94 45 53 a8 a6 54 6a 19 4e e1 32 be d0 ed b5 53 6d a4 3d 56 ed f4 d5 29 85 22 92 d0 24 92 c5 4a 26 52 17 50 48 25 45 c9 0a 73 d5 6c b9 50 00 69 b0 dc da 33 30 d0 94 e0 81 b4 b2 4c c1 f7 f8 9a 29 9a 54 43 19 b4 87 67 73 b9 a5 22 15 43 89 80 4c ad a1 06 09 8b 4d 0b f0 a0 5d 93 d6 8a bc Data Ascii: DA^tk!=@;3YI(]eYICOeZ1Omn{DK5<ho4Ej<4J=o;']5+rDlxd#xU7`u(Bypr_`ixiESTjN2Sm=V)"$J&RPH%EslPi30L)TCgs"CLM]
2024-10-08 22:14:19 UTC	3675	IN	Data Raw: f0 8b fd 2c d0 52 7f b9 7f b7 9f ef af f6 0b 6d c4 5f ef 97 f8 1b fd 0a bf ca df 0e da e1 d7 f9 bb fd 46 bf d9 df e7 1f 00 75 80 ef f4 bb fd a3 fe 71 ff 94 df ef 9f f5 cf e9 0d fe 05 7f d4 bf ec 4f f8 d7 f4 4e 3f 1c 38 81 1f cc 05 25 04 0b 82 94 20 dd d4 05 19 a0 ec 20 27 58 81 67 1e a8 c0 6b 0d d6 80 d6 e9 d6 a0 38 28 0d ca 83 ad c1 b6 e0 29 63 bd ea a0 16 b4 cb db 19 34 04 7b 83 06 b3 dc 9e 41 9f 96 a0 d4 4e 05 fb 83 f6 e0 50 d0 15 1c 09 7a 83 13 41 5f 70 06 b2 c1 e0 7c 30 62 56 07 97 82 f1 e0 6a 30 15 44 42 da 14 86 42 ba 35 14 1f 94 86 12 4d 61 50 6b 13 42 c9 b6 d4 d8 50 6a 68 51 28 33 b4 c4 96 7a 87 43 cb 42 b9 a1 95 a1 55 a1 b5 a1 a2 d0 06 e4 6e 9f 4e 63 8c 1e 05 4e e8 55 c0 36 1d 0f ec 16 bc 14 bd 1b 38 ec 5e 15 c9 49 e9 73 8e e5 d4 07 5c 2e 63 17 Data Ascii: ,Rm_FuqON?8% 'Xgk8()c4{ANPzA_p\|0bVj0DBB5MaPkBPjhQ(3zCBUnNcNU68^Is\.c

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:19 UTC	587	OUT	GET /JS/jquery.min.js HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:19 UTC	315	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: application/javascript Last-Modified: Wed, 17 Mar 2021 06:56:34 GMT Accept-Ranges: bytes ETag: "58aadeaafa1ad71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:19 GMT Connection: close Content-Length: 107749
2024-10-08 22:14:19 UTC	16069	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 20 3f 20 74 28 65 2c 20 21 30 29 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 69 66 20 28 21 65 2e 64 6f 63 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function (e, t) { "use strict"; "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function (e) { if (!e.docu
2024-10-08 22:14:19 UTC	16384	IN	Data Raw: 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 20 72 20 3d 20 6e 20 26 26 20 44 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 20 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 20 3f 20 6e 28 65 2c 20 74 2c 20 21 45 29 20 3a 20 76 6f 69 64 20 30 3b 20 72 65 74 75 72 6e 20 76 6f 69 64 20 30 20 21 3d 3d 20 72 20 3f 20 72 20 3a 20 64 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 21 45 20 3f 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 20 3a 20 28 72 20 3d 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 74 29 29 20 26 26 20 72 2e 73 70 65 63 69 66 69 65 64 20 3f 20 72 2e 76 61 6c 75 65 20 3a 20 6e 75 6c 6c 20 7d 2c 20 73 65 2e 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 Data Ascii: b.attrHandle[t.toLowerCase()], r = n && D.call(b.attrHandle, t.toLowerCase()) ? n(e, t, !E) : void 0; return void 0 !== r ? r : d.attributes \|\| !E ? e.getAttribute(t) : (r = e.getAttributeNode(t)) && r.specified ? r.value : null }, se.escape = function (e
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 28 65 29 20 7b 20 72 65 74 75 72 6e 20 65 20 3f 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 65 20 3f 20 69 2e 63 61 6c 6c 28 53 28 65 29 2c 20 74 68 69 73 5b 30 5d 29 20 3a 20 69 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 2e 6a 71 75 65 72 79 20 3f 20 65 5b 30 5d 20 3a 20 65 29 20 3a 20 74 68 69 73 5b 30 5d 20 26 26 20 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 74 68 69 73 2e 66 69 72 73 74 28 29 2e 70 72 65 76 41 6c 6c 28 29 2e 6c 65 6e 67 74 68 20 3a 20 2d 31 20 7d 2c 20 61 64 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 75 6e 69 71 75 65 53 6f 72 74 28 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 20 53 Data Ascii: ction (e) { return e ? "string" == typeof e ? i.call(S(e), this[0]) : i.call(this, e.jquery ? e[0] : e) : this[0] && this[0].parentNode ? this.first().prevAll().length : -1 }, add: function (e, t) { return this.pushStack(S.uniqueSort(S.merge(this.get(), S
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 20 21 31 29 2c 20 53 2e 65 76 65 6e 74 2e 61 64 64 28 65 2c 20 69 2c 20 7b 20 6e 61 6d 65 73 70 61 63 65 3a 20 21 31 2c 20 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 76 61 72 20 74 2c 20 6e 2c 20 72 20 3d 20 59 2e 67 65 74 28 74 68 69 73 2c 20 69 29 3b 20 69 66 20 28 31 20 26 20 65 2e 69 73 54 72 69 67 67 65 72 20 26 26 20 74 68 69 73 5b 69 5d 29 20 7b 20 69 66 20 28 72 2e 6c 65 6e 67 74 68 29 20 28 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 69 5d 20 7c 7c 20 7b 7d 29 2e 64 65 6c 65 67 61 74 65 54 79 70 65 20 26 26 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 20 65 6c 73 65 20 69 66 20 28 72 20 3d 20 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 20 59 2e 73 65 74 28 74 68 69 73 2c 20 69 2c 20 72 Data Ascii: !1), S.event.add(e, i, { namespace: !1, handler: function (e) { var t, n, r = Y.get(this, i); if (1 & e.isTrigger && this[i]) { if (r.length) (S.event.special[i] \|\| {}).delegateType && e.stopPropagation(); else if (r = s.call(arguments), Y.set(this, i, r
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 2c 20 6f 29 20 7b 20 76 61 72 20 61 20 3d 20 22 77 69 64 74 68 22 20 3d 3d 3d 20 74 20 3f 20 31 20 3a 20 30 2c 20 73 20 3d 20 30 2c 20 75 20 3d 20 30 3b 20 69 66 20 28 6e 20 3d 3d 3d 20 28 72 20 3f 20 22 62 6f 72 64 65 72 22 20 3a 20 22 63 6f 6e 74 65 6e 74 22 29 29 20 72 65 74 75 72 6e 20 30 3b 20 66 6f 72 20 28 3b 20 61 20 3c 20 34 3b 20 61 20 2b 3d 20 32 29 22 6d 61 72 67 69 6e 22 20 3d 3d 3d 20 6e 20 26 26 20 28 75 20 2b 3d 20 53 2e 63 73 73 28 65 2c 20 6e 20 2b 20 6e 65 5b 61 5d 2c 20 21 30 2c 20 69 29 29 2c 20 72 20 3f 20 28 22 63 6f 6e 74 65 6e 74 22 20 3d 3d 3d 20 6e 20 26 26 20 28 75 20 2d 3d 20 53 2e 63 73 73 28 65 2c 20 22 70 61 64 64 69 6e 67 22 20 2b 20 6e 65 5b 61 5d 2c 20 21 30 2c 20 69 29 29 2c 20 22 6d 61 72 67 69 6e 22 20 21 3d 3d 20 6e Data Ascii: , o) { var a = "width" === t ? 1 : 0, s = 0, u = 0; if (n === (r ? "border" : "content")) return 0; for (; a < 4; a += 2)"margin" === n && (u += S.css(e, n + ne[a], !0, i)), r ? ("content" === n && (u -= S.css(e, "padding" + ne[a], !0, i)), "margin" !== n
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 65 6e 67 74 68 22 2c 20 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 20 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 20 22 72 6f 77 53 70 61 6e 22 2c 20 22 63 6f 6c 53 70 61 6e 22 2c 20 22 75 73 65 4d 61 70 22 2c 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 53 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 20 3d 20 74 68 69 73 20 7d 29 2c 20 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 20 61 64 64 43 6c 61 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 20 76 61 72 20 65 2c 20 6e 2c 20 72 2c 20 69 2c 20 6f 2c 20 61 2c 20 73 2c 20 75 20 3d 20 30 3b 20 69 66 20 28 6d 28 74 29 29 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 Data Ascii: ength", "cellSpacing", "cellPadding", "rowSpan", "colSpan", "useMap", "frameBorder", "contentEditable"], function () { S.propFix[this.toLowerCase()] = this }), S.fn.extend({ addClass: function (t) { var e, n, r, i, o, a, s, u = 0; if (m(t)) return this.ea
2024-10-08 22:14:20 UTC	9760	IN	Data Raw: 70 41 6c 6c 28 6e 29 20 3a 20 65 2e 61 70 70 65 6e 64 28 6e 29 20 7d 29 20 7d 2c 20 77 72 61 70 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 20 76 61 72 20 6e 20 3d 20 6d 28 74 29 3b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 53 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 6e 20 3f 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 29 20 3a 20 74 29 20 7d 29 20 7d 2c 20 75 6e 77 72 61 70 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 20 Data Ascii: pAll(n) : e.append(n) }) }, wrap: function (t) { var n = m(t); return this.each(function (e) { S(this).wrapAll(n ? t.call(this, e) : t) }) }, unwrap: function (e) { return this.parent(e).not("body").each(function () { S(this).replaceWith(this.childNodes)

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:19 UTC	590	OUT	GET /JS/jquery-ui.min.js HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:19 UTC	313	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: application/javascript Last-Modified: Tue, 12 Aug 2014 04:30:00 GMT Accept-Ranges: bytes ETag: "0d4414e6b5cf1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:19 GMT Connection: close Content-Length: 192096
2024-10-08 22:14:19 UTC	16071	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 31 2e 38 2e 31 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0d 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 4d 49 54 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 0d 0a 20 2a 20 61 6e 64 20 47 50 4c 20 28 47 50 4c 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 6c 69 63 65 6e 73 65 73 2e 0d 0a 20 2a 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 55 49 0d 0a 20 2a 2f 0d 0a 6a 51 75 65 72 79 2e 75 69 7c 7c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 75 69 3d 7b 76 65 72 73 69 Data Ascii: /! jQuery UI 1.8.1 * * Copyright (c) 2010 AUTHORS.txt (http://jqueryui.com/about) * Dual licensed under the MIT (MIT-LICENSE.txt) * and GPL (GPL-LICENSE.txt) licenses. * * http://docs.jquery.com/UI */jQuery.ui\|\|function(c){c.ui={versi
2024-10-08 22:14:19 UTC	16384	IN	Data Raw: 5d 2e 74 61 67 4e 61 6d 65 29 2c 65 3d 61 2e 70 61 67 65 58 2c 67 3d 61 2e 70 61 67 65 59 3b 69 66 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 29 7b 69 66 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 29 7b 69 66 28 61 2e 70 61 67 65 58 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 30 5d 29 65 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 30 5d 2b 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3b 69 66 28 61 2e 70 61 67 65 59 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 3c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 31 5d 29 67 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 31 5d 2b 0d 0a 74 Data Ascii: ].tagName),e=a.pageX,g=a.pageY;if(this.originalPosition){if(this.containment){if(a.pageX-this.offset.click.left<this.containment[0])e=this.containment[0]+this.offset.click.left;if(a.pageY-this.offset.click.top<this.containment[1])g=this.containment[1]+t
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 61 73 73 3d 22 75 69 2d 77 72 61 70 70 65 72 22 20 73 74 79 6c 65 3d 22 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 22 3e 3c 2f 64 69 76 3e 27 29 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 77 69 64 74 68 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0d 0a 74 6f 70 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 74 6f 70 22 29 2c 6c 65 66 74 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6c 65 66 74 22 29 7d 29 29 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e Data Ascii: ass="ui-wrapper" style="overflow: hidden;"></div>').css({position:this.element.css("position"),width:this.element.outerWidth(),height:this.element.outerHeight(),top:this.element.css("top"),left:this.element.css("left")}));this.element=this.element.paren
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 65 6c 65 6d 65 6e 74 3a 63 2c 6c 65 66 74 3a 62 2e 6c 65 66 74 2c 74 6f 70 3a 62 2e 74 6f 70 2c 72 69 67 68 74 3a 62 2e 6c 65 66 74 2b 63 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 62 6f 74 74 6f 6d 3a 62 2e 74 6f 70 2b 63 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 73 74 61 72 74 73 65 6c 65 63 74 65 64 3a 66 61 6c 73 65 2c 73 65 6c 65 63 74 65 64 3a 63 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 73 65 6c 65 63 74 65 64 22 29 2c 0d 0a 73 65 6c 65 63 74 69 6e 67 3a 63 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 73 65 6c 65 63 74 69 6e 67 22 29 2c 75 6e 73 65 6c 65 63 74 69 6e 67 3a 63 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 75 6e 73 65 6c 65 63 74 69 6e 67 22 29 7d 29 7d 29 7d 3b 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3b 74 68 69 73 2e 73 65 6c 65 63 74 Data Ascii: element:c,left:b.left,top:b.top,right:b.left+c.outerWidth(),bottom:b.top+c.outerHeight(),startselected:false,selected:c.hasClass("ui-selected"),selecting:c.hasClass("ui-selecting"),unselecting:c.hasClass("ui-unselecting")})})};this.refresh();this.select
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 72 65 6e 74 49 74 65 6d 29 29 3b 62 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 61 66 74 65 72 28 62 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 63 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 75 70 64 61 74 65 28 62 2c 62 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 7d 2c 5f 63 6f 6e 74 61 63 74 43 6f 6e 74 61 69 6e 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 65 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 65 2d 2d 29 69 66 28 21 64 2e 75 69 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 5b 30 5d 2c 0d 0a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 65 5d 2e 65 6c 65 6d 65 6e 74 5b 30 5d 29 29 69 66 28 74 68 69 73 2e 5f 69 Data Ascii: rentItem));b.currentItem.after(b.placeholder);c.placeholder.update(b,b.placeholder)},_contactContainers:function(a){for(var b=null,c=null,e=this.containers.length-1;e>=0;e--)if(!d.ui.contains(this.currentItem[0],this.containers[e].element[0]))if(this._i
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 29 2e 69 73 28 22 2e 75 69 2d 65 66 66 65 63 74 73 2d 77 72 61 70 70 65 72 22 29 29 72 65 74 75 72 6e 20 63 2e 70 61 72 65 6e 74 28 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 63 29 3b 72 65 74 75 72 6e 20 63 7d 2c 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 62 2c 64 29 7b 64 3d 64 7c 7c 7b 7d 3b 66 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 67 29 7b 75 6e 69 74 3d 63 2e 63 73 73 55 6e 69 74 28 67 29 3b 69 66 28 75 6e 69 74 5b 30 5d 3e 30 29 64 5b 67 5d 3d 75 6e 69 74 5b 30 5d 2a 62 2b 75 6e 69 74 5b 31 5d 7d 29 3b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 65 66 66 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 61 3d 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: ).is(".ui-effects-wrapper"))return c.parent().replaceWith(c);return c},setTransition:function(c,a,b,d){d=d\|\|{};f.each(a,function(e,g){unit=c.cssUnit(g);if(unit[0]>0)d[g]=unit[0]*b+unit[1]});return d}});f.fn.extend({effect:function(c){var a=j.apply(this,ar
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 2e 63 61 6c 6c 62 61 63 6b 26 26 61 2e 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 3b 62 2e 71 75 65 75 65 28 22 66 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 64 65 71 75 65 75 65 28 29 7d 29 3b 62 2e 64 65 71 75 65 75 65 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 65 66 66 65 63 74 73 2e 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 28 74 68 69 73 29 2c 68 3d 5b 22 70 6f 73 69 74 69 6f 6e 22 2c 22 74 6f 70 22 2c 22 6c 65 66 74 22 5d 2c 65 3d 63 2e 65 66 66 65 63 74 73 2e 73 65 74 4d 6f 64 65 28 61 2c 64 2e 6f 70 74 69 6f 6e 73 2e Data Ascii: .callback&&a.callback.apply(this,arguments)});b.queue("fx",function(){b.dequeue()});b.dequeue()})}})(jQuery);(function(c){c.effects.slide=function(d){return this.queue(function(){var a=c(this),h=["position","top","left"],e=c.effects.setMode(a,d.options.
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 65 28 74 68 69 73 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 62 2d 63 2b 65 28 74 68 69 73 29 2e 68 65 69 67 68 74 28 29 3b 72 65 74 75 72 6e 20 66 3c 31 30 26 26 66 3e 2d 31 30 7d 29 3b 64 2e 6c 65 6e 67 74 68 7c 7c 28 64 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 22 3a 6c 61 73 74 22 29 29 3b 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 61 2c 64 29 7d 65 6c 73 65 20 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 61 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 21 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6c 61 73 74 28 29 3f 22 3a 66 69 72 73 74 22 3a 22 3a 6c 61 73 74 22 29 29 7d 2c 70 72 65 76 69 6f 75 73 50 61 67 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: (function(){var f=e(this).offset().top-b-c+e(this).height();return f<10&&f>-10});d.length\|\|(d=this.element.children(":last"));this.activate(a,d)}else this.activate(a,this.element.children(!this.active\|\|this.last()?":first":":last"))},previousPage:function
2024-10-08 22:14:20 UTC	313	IN	Data Raw: 70 69 63 6b 65 72 2e 5f 67 65 74 28 62 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 22 4d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 34 3a 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 61 2e 74 61 72 67 65 74 2c 61 2e 63 74 72 6c 4b 65 79 3f 2b 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 62 2c 22 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 22 29 3a 2b 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 62 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 22 4d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 69 66 28 61 2e 63 74 72 6c 4b 65 79 7c 7c 61 2e 6d 65 74 61 4b 65 79 29 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 6c 65 61 72 44 61 74 65 28 61 2e 74 61 72 67 65 74 29 3b 63 3d 61 2e 63 74 72 6c 4b 65 79 7c 7c 61 Data Ascii: picker._get(b,"stepMonths"),"M");break;case 34:d.datepicker._adjustDate(a.target,a.ctrlKey?+d.datepicker._get(b,"stepBigMonths"):+d.datepicker._get(b,"stepMonths"),"M");break;case 35:if(a.ctrlKey\|\|a.metaKey)d.datepicker._clearDate(a.target);c=a.ctrlKey\|\|a
2024-10-08 22:14:20 UTC	16384	IN	Data Raw: 72 2e 5f 67 6f 74 6f 54 6f 64 61 79 28 61 2e 74 61 72 67 65 74 29 3b 63 3d 61 2e 63 74 72 6c 4b 65 79 7c 7c 0d 0a 61 2e 6d 65 74 61 4b 65 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 37 3a 69 66 28 61 2e 63 74 72 6c 4b 65 79 7c 7c 61 2e 6d 65 74 61 4b 65 79 29 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 61 2e 74 61 72 67 65 74 2c 65 3f 2b 31 3a 2d 31 2c 22 44 22 29 3b 63 3d 61 2e 63 74 72 6c 4b 65 79 7c 7c 61 2e 6d 65 74 61 4b 65 79 3b 69 66 28 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 61 6c 74 4b 65 79 29 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 61 2e 74 61 72 67 65 74 2c 61 2e 63 74 72 6c 4b 65 79 3f 2d 64 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 62 2c 22 73 74 65 70 42 69 67 Data Ascii: r._gotoToday(a.target);c=a.ctrlKey\|\|a.metaKey;break;case 37:if(a.ctrlKey\|\|a.metaKey)d.datepicker._adjustDate(a.target,e?+1:-1,"D");c=a.ctrlKey\|\|a.metaKey;if(a.originalEvent.altKey)d.datepicker._adjustDate(a.target,a.ctrlKey?-d.datepicker._get(b,"stepBig

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:19 UTC	590	OUT	GET /JS/jquery-cookie.js HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:20 UTC	313	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: application/javascript Last-Modified: Tue, 10 May 2016 06:32:39 GMT Accept-Ranges: bytes ETag: "3dcc85bf85aad11:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:19 GMT Connection: close Content-Length: 3702
2024-10-08 22:14:20 UTC	3702	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 20 2a 20 6a 51 75 65 72 79 20 43 6f 6f 6b 69 65 20 50 6c 75 67 69 6e 20 76 31 2e 34 2e 31 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 63 61 72 68 61 72 74 6c 2f 6a 71 75 65 72 79 2d 63 6f 6f 6b 69 65 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 34 20 4b 6c 61 75 73 20 48 61 72 74 6c 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f Data Ascii: /! jQuery Cookie Plugin v1.4.1 * https://github.com/carhartl/jquery-cookie * * Copyright 2006, 2014 Klaus Hartl * Released under the MIT license */(function (factory) { if (typeof define === 'function' && define.amd) { //

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:20 UTC	718	OUT	GET /WebResource.axd?d=YNzkMJNpqG8lByjcEFt2hdQj_0ihL3kAiB-BuKryGbmPkgkZ2RXn6plSrh6ebFSUmZK4-rNg9ir39qu0o5FDyLg2VXojOKF_hRVo8-t4oOY1&t=637814779746327080 HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:20 UTC	327	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 08 Oct 2025 15:35:39 GMT Last-Modified: Sat, 26 Feb 2022 09:42:54 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:20 GMT Connection: close Content-Length: 23063
2024-10-08 22:14:20 UTC	16057	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-08 22:14:20 UTC	7006	IN	Data Raw: 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 Data Ascii: lse { if (document.documentElement && document.documentElement.scrollLeft) { return document.documentElement.scrollLeft; } else if (document.body) { return document.body.scrollLeft; } }

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:21 UTC	718	OUT	GET /WebResource.axd?d=BhA6LIgT2OsTvj0z6984vqA-ZfEj_GtC8-Ssqxw_Q0LP81ZcCH6enlnC7GjnjOkDIv_Q7FDbKoZ2bWCJaqI-5QQ-c8RF5K6smwiVexY_IkE1&t=637814779746327080 HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:21 UTC	327	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Wed, 08 Oct 2025 15:35:39 GMT Last-Modified: Sat, 26 Feb 2022 09:42:54 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:21 GMT Connection: close Content-Length: 26951
2024-10-08 22:14:21 UTC	16057	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-10-08 22:14:21 UTC	10894	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 6f 70 65 72 61 74 6f 72 20 3d 20 22 45 71 75 61 6c 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 6f 70 65 72 61 74 6f 72 Data Ascii: if (typeof(val.valuetocompare) == "string") { compareTo = val.valuetocompare; } } else { compareTo = ValidatorGetValue(val.controltocompare); } var operator = "Equal"; if (typeof(val.operator

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:21 UTC	663	OUT	GET /Image/Base/ita_SoftGozar.com.png HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:21 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: image/png Last-Modified: Wed, 20 Jan 2021 16:09:17 GMT Accept-Ranges: bytes ETag: "e03c9a9a46efd61:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:21 GMT Connection: close Content-Length: 2012
2024-10-08 22:14:21 UTC	2012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 02 40 50 4c 54 45 00 00 00 f0 7c 00 f0 7c 00 f0 7c 00 fb df c2 f1 84 16 f0 7c 00 f0 7c 00 fc e2 c8 f0 7f 06 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 01 f0 7c 00 f0 7c 00 f0 7c 00 f0 7d 01 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7d 01 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 7c 00 f0 Data Ascii: PNGIHDR@@@PLTE\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|}\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|}\|\|\|\|\|\|\|\|\|\|\|\|\|

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:14:21 UTC	650	OUT	GET /Image/Base/menu.svg HTTP/1.1 Host: www.softgozar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.softgozar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=te3jno22atf4kksr2mnju1pd
2024-10-08 22:14:21 UTC	302	IN	HTTP/1.1 200 OK Cache-Control: max-age=1296000 Content-Type: image/svg+xml Last-Modified: Wed, 16 May 2018 06:34:19 GMT Accept-Ranges: bytes ETag: "9749bebdfecd31:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 08 Oct 2024 22:14:21 GMT Connection: close Content-Length: 353
2024-10-08 22:14:21 UTC	353	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"