Edit tour

Windows Analysis Report
http://cerciterpanas.blogspot.com.es/

Overview

General Information

Sample URL:	http://cerciterpanas.blogspot.com.es/
Analysis ID:	1529411
Tags:	urlscan
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains obfuscated javascript

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Executes massive DNS lookups (> 100)

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2036,i,422652748596512814,5723985815859758920,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cerciterpanas.blogspot.com.es/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /report/v4?s=5s2vpVcCxY4%2BgkmfDcWVOy320BHucrmeFmBt6aE8eH69I11e1utanPYyYYbHGVAy1jsczjMvYT8FfhSsozNdHACP2cZh95kq9%2FDIhITqK87i2%2BUrIfsqPCqlMH2oy5RsOkZKnIFM HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 440Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon
Source: http://cerciterpanas.blogspot.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54368 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:50053 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:54012 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCross-Origin-Resource-Policy: cross-originContent-Encoding: gzipETag: W/"0ce06ee375d7b102579b755b4cac6552667bfb67f9b6494f7bcec0d572b35bc2"Date: Tue, 08 Oct 2024 22:14:55 GMTContent-Type: text/javascript; charset=UTF-8Server: blogger-renderdCache-Control: public, must-revalidate, proxy-revalidate, max-age=1Vary: Accept-EncodingExpires: Tue, 08 Oct 2024 22:14:56 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0Last-Modified: Fri, 20 Sep 2024 11:09:14 GMTContent-Length: 34632X-Frame-Options: SAMEORIGINData Raw: 1f 8b 08 00 00 00 00 00 00 00 ed bd e9 72 1b 4b b2 26 f8 7f 9e 22 cf b9 b7 4c d2 10 09 61 5f 54 56 56 0d 12 5c 41 90 20 01 8a a2 5a 3d b4 00 32 81 4c e4 06 e6 42 10 6c eb b1 f3 0e 33 3f ee 98 dd fe 35 66 fd 20 f3 28 e7 49 c6 dd 23 22 17 10 24 41 89 12 a9 3a aa 85 22 73 89 8c f0 f0 f0 70 ff c2 97 f7 ef 95 56 6f 5f 19 31 db 1e b2 91 f5 bf f9 b3 d0 88 9c a1 1b be fd ef bf 5f eb 7e 60 7a ee ef 1f 7e 2f e6 0b bf e7 7e d7 dd 91 a7 99 ee 04 2e 9c 0d 76 d4 06 5c 1a eb ba f6 fb 87 ff fe fb 8d 63 bb 01 5c 37 c2 70 f6 e1 fd fb f9 7c 9e 9f 97 f3 9e 3f 79 5f 2a 14 aa ef 5b a1 e7 c0 d3 f4 d4 bf 7b 33 dd ed eb cc 1f 19 c9 0b ac 99 1f 79 ce 7b f5 7d 30 d3 47 ef f1 89 80 9e f0 83 e0 3d 7c fc 7d fc f2 d0 f6 26 13 dd 4f de 0c 46 86 ee b0 20 3f f1 bc 89 ad 53 2b e2 19 fc 74 23 7e 71 a2 7b d0 58 b6 8b fc 1a 75 53 dc 8e 9f d6 1e fc 02 1f 56 fc 74 68 a4 3a 34 8b 7c 9b 9a 0c 16 ae 66 8e 58 08 24 7c 0f 4f e8 4c 7b cf e9 68 12 c9 fe 3d 84 77 42 36 f9 20 ba 8b 0d e7 8a cd 66 93 2e a8 c5 42 a3 59 2e 37 2a a5 72 b3 5e 28 14 ab b5 72 ed f7 ff 91 fb 3d 9a 69 2c d4 93 06 4a 85 52 45 2d 34 d5 52 61 50 6c 7e 28 34 3f 14 2b f9 46 ad bc 51 68 7c 28 14 f0 05 e8 80 3e f1 fc c5 ef 1f fe eb 7f ff 3d d4 7d 07 5e 1a ea be 19 32 b8 1b 5f 61 7e 68 06 e9 0b 1f 4d 4d f7 d2 17 26 cc 19 32 3f 7d 25 88 2c e6 a6 2f 1c 46 cc 57 8e f4 09 f3 33 6d 6f d2 d7 94 81 ee 5b a6 6b a6 ef 8c 74 5b 1f c2 cd 45 fa a2 e9 8e 33 1f 6e 1d 1c 2a a5 5a e6 0a f4 65 d5 17 fa 38 4d 99 1b 33 dd 36 ad f4 85 fd 20 52 98 33 fb bb d2 f1 dc d0 f7 88 c3 d3 f7 2f bc 28 8c 86 7a fa d2 96 ec 24 7f 71 5b 3d d2 e7 19 52 cd 3c db 0c b3 9f e9 18 cc f4 23 5b d9 61 86 93 69 df 66 73 96 79 32 d4 2d d7 83 f9 ce 3c b5 cb 6c 18 91 b2 7b 87 e4 cc d5 7c 0f d8 27 4d 2e db 31 99 91 99 17 dd ca 0e 0a a6 db 5d a2 18 ce 9d 8a 3f d2 17 8b 8d e0 26 fd f7 0e b3 b2 5c b2 eb 05 e6 4c 69 21 af 28 5d 66 b3 45 60 66 ee b7 dc 39 70 c0 fe d0 67 86 e9 a4 6f 74 59 64 9b 5a e4 2b a7 2c 88 ec f4 9d 23 5d b7 bd 71 a6 95 09 7e 25 d3 ec 66 6f 73 4f 29 15 8a c5 f4 d5 3d 06 93 92 19 f8 a1 39 01 26 88 66 ba bf b2 77 87 66 80 Data Ascii: rK&"La_TVV\A Z=2LBl3?5f (I#"$A:"spVo_1_~`z~/~.v\c\7p\|?y_[{3y{}0G=\|}&OF ?S+t#~q{XuSVth:4\|fX$\|OL{h=wB6 f.BY.7r^(r=i,JRE-4RaPl~(4?+FQh\|(
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCross-Origin-Resource-Policy: cross-originContent-Encoding: gzipETag: W/"0ce06ee375d7b102579b755b4cac6552667bfb67f9b6494f7bcec0d572b35bc2"Date: Tue, 08 Oct 2024 22:14:57 GMTContent-Type: text/javascript; charset=UTF-8Server: blogger-renderdCache-Control: public, must-revalidate, proxy-revalidate, max-age=1Vary: Accept-EncodingExpires: Tue, 08 Oct 2024 22:14:58 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0Last-Modified: Fri, 20 Sep 2024 11:09:14 GMTContent-Length: 34632X-Frame-Options: SAMEORIGINData Raw: 1f 8b 08 00 00 00 00 00 00 00 ed bd e9 72 1b 4b b2 26 f8 7f 9e 22 cf b9 b7 4c d2 10 09 61 5f 54 56 56 0d 12 5c 41 90 20 01 8a a2 5a 3d b4 00 32 81 4c e4 06 e6 42 10 6c eb b1 f3 0e 33 3f ee 98 dd fe 35 66 fd 20 f3 28 e7 49 c6 dd 23 22 17 10 24 41 89 12 a9 3a aa 85 22 73 89 8c f0 f0 f0 70 ff c2 97 f7 ef 95 56 6f 5f 19 31 db 1e b2 91 f5 bf f9 b3 d0 88 9c a1 1b be fd ef bf 5f eb 7e 60 7a ee ef 1f 7e 2f e6 0b bf e7 7e d7 dd 91 a7 99 ee 04 2e 9c 0d 76 d4 06 5c 1a eb ba f6 fb 87 ff fe fb 8d 63 bb 01 5c 37 c2 70 f6 e1 fd fb f9 7c 9e 9f 97 f3 9e 3f 79 5f 2a 14 aa ef 5b a1 e7 c0 d3 f4 d4 bf 7b 33 dd ed eb cc 1f 19 c9 0b ac 99 1f 79 ce 7b f5 7d 30 d3 47 ef f1 89 80 9e f0 83 e0 3d 7c fc 7d fc f2 d0 f6 26 13 dd 4f de 0c 46 86 ee b0 20 3f f1 bc 89 ad 53 2b e2 19 fc 74 23 7e 71 a2 7b d0 58 b6 8b fc 1a 75 53 dc 8e 9f d6 1e fc 02 1f 56 fc 74 68 a4 3a 34 8b 7c 9b 9a 0c 16 ae 66 8e 58 08 24 7c 0f 4f e8 4c 7b cf e9 68 12 c9 fe 3d 84 77 42 36 f9 20 ba 8b 0d e7 8a cd 66 93 2e a8 c5 42 a3 59 2e 37 2a a5 72 b3 5e 28 14 ab b5 72 ed f7 ff 91 fb 3d 9a 69 2c d4 93 06 4a 85 52 45 2d 34 d5 52 61 50 6c 7e 28 34 3f 14 2b f9 46 ad bc 51 68 7c 28 14 f0 05 e8 80 3e f1 fc c5 ef 1f fe eb 7f ff 3d d4 7d 07 5e 1a ea be 19 32 b8 1b 5f 61 7e 68 06 e9 0b 1f 4d 4d f7 d2 17 26 cc 19 32 3f 7d 25 88 2c e6 a6 2f 1c 46 cc 57 8e f4 09 f3 33 6d 6f d2 d7 94 81 ee 5b a6 6b a6 ef 8c 74 5b 1f c2 cd 45 fa a2 e9 8e 33 1f 6e 1d 1c 2a a5 5a e6 0a f4 65 d5 17 fa 38 4d 99 1b 33 dd 36 ad f4 85 fd 20 52 98 33 fb bb d2 f1 dc d0 f7 88 c3 d3 f7 2f bc 28 8c 86 7a fa d2 96 ec 24 7f 71 5b 3d d2 e7 19 52 cd 3c db 0c b3 9f e9 18 cc f4 23 5b d9 61 86 93 69 df 66 73 96 79 32 d4 2d d7 83 f9 ce 3c b5 cb 6c 18 91 b2 7b 87 e4 cc d5 7c 0f d8 27 4d 2e db 31 99 91 99 17 dd ca 0e 0a a6 db 5d a2 18 ce 9d 8a 3f d2 17 8b 8d e0 26 fd f7 0e b3 b2 5c b2 eb 05 e6 4c 69 21 af 28 5d 66 b3 45 60 66 ee b7 dc 39 70 c0 fe d0 67 86 e9 a4 6f 74 59 64 9b 5a e4 2b a7 2c 88 ec f4 9d 23 5d b7 bd 71 a6 95 09 7e 25 d3 ec 66 6f 73 4f 29 15 8a c5 f4 d5 3d 06 93 92 19 f8 a1 39 01 26 88 66 ba bf b2 77 87 66 80 Data Ascii: rK&"La_TVV\A Z=2LBl3?5f (I#"$A:"spVo_1_~`z~/~.v\c\7p\|?y_[{3y{}0G=\|}&OF ?S+t#~q{XuSVth:4\|fX$\|OL{h=wB6 f.BY.7r^(r=i,JRE-4RaPl~(4?+FQh\|(

Source: chromecache_349.2.dr, chromecache_545.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_349.2.dr, chromecache_545.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_423.2.dr, chromecache_400.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_428.2.dr, chromecache_540.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_223.2.dr	String found in binary or memory: <a target="_blank" href="https://www.facebook.com/DomainMarketCom"> equals www.facebook.com (Facebook)
Source: chromecache_223.2.dr	String found in binary or memory: <a target="_blank" href="https://www.linkedin.com/company/domainmarket/"> equals www.linkedin.com (Linkedin)
Source: chromecache_362.2.dr, chromecache_394.2.dr, chromecache_404.2.dr, chromecache_478.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: cerciterpanas.blogspot.com.es
Source: global traffic	DNS traffic detected: DNS query: cerciterpanas.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: googledrive.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: 2.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: cache.addthiscdn.com
Source: global traffic	DNS traffic detected: DNS query: www.linkwithin.com
Source: global traffic	DNS traffic detected: DNS query: www.imotiv.ly
Source: global traffic	DNS traffic detected: DNS query: www.apesal.com
Source: global traffic	DNS traffic detected: DNS query: pingje.com
Source: global traffic	DNS traffic detected: DNS query: ping.busuk.org
Source: global traffic	DNS traffic detected: DNS query: www.clocklink.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: www.thetouchofsound.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: www.domainmarket.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.jomniaga.com
Source: global traffic	DNS traffic detected: DNS query: bloggeryard.googlecode.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.rotikaya.com
Source: global traffic	DNS traffic detected: DNS query: dubdsb3u36ja6.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: joiriah.jomniaga.com
Source: global traffic	DNS traffic detected: DNS query: salma.jomniaga.com
Source: global traffic	DNS traffic detected: DNS query: scontent-msp1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: busuk.org
Source: global traffic	DNS traffic detected: DNS query: www.auto-ping.com
Source: global traffic	DNS traffic detected: DNS query: kartikel.com
Source: global traffic	DNS traffic detected: DNS query: pr.prchecker.info
Source: global traffic	DNS traffic detected: DNS query: i155.photobucket.com
Source: global traffic	DNS traffic detected: DNS query: www.carimember.com
Source: global traffic	DNS traffic detected: DNS query: i68.photobucket.com
Source: global traffic	DNS traffic detected: DNS query: www.activesearchresults.com
Source: global traffic	DNS traffic detected: DNS query: blogmalaysia.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: tr.nuffnangx.com
Source: global traffic	DNS traffic detected: DNS query: synad2.nuffnang.com.my
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: widgets.amung.us
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: whos.amung.us
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: dp2.33across.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: map.go.affec.tv
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: dp1.33across.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: usermatch.krxd.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: dmp.adform.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: eyeota-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: cm.mgid.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2036,i,422652748596512814,5723985815859758920,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cerciterpanas.blogspot.com.es/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2036,i,422652748596512814,5723985815859758920,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:53 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 08 Oct 2024 22:14:58 GMTServer: ApacheVary: Accept-Encoding,Cookie,User-AgentExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.thetouchofsound.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2Connection: Upgrade, closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:59 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=990vOxO%2F30pRjEaeEdaIzrNldzmvP3gtekRO8BYFNxwGAsSduXI3s0T5%2BiYmc2n6%2BBwgNUB2oAmp3eTqBFUGdciYSyQoRhRHg55nzzT697tUWtpYYzLwBVvBRPMJYq0xJagN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97cb39cdd32e4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BQjkDVKKGrIQz5460Wi0T9FgRlOtu9HgncwIDc41znxKl%2FHNAXHEmOqN2AAeGraAdxwWcQ3fNJniBkraMiTn3k3Yf5p%2FPSFisI3I9VFcLDgVxZXxXqk8rJa4PhJUDG29vunO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97cb3c92b1986-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2Bp1VLqlhdWeSYYLRpmwcnpLqFhu2m997%2FLETbm5sXXfphh3rkyBowM%2BvB7yUiW6CesE7hRigfF4PhqHeE0om0vHBARfjfh8TaRRhMiiqVvfImfkoPH%2BnShqShpNjROYI1P7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97cb44ae97ca6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:15 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igxee7Kr36d1kNgsNKmJ4xQFuwQ4Q%2FVn%2BzvJ4BLZocc5HWLZVN2UUMRwMvvslnAxE%2FGeFyMThuV5xPe3onjgxYWxoQWIM0X%2BIkOaFq8wqHtwbgKbZda5WwnIvew1Ur9h5ZR1"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97cb6ebfe8c8a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:16 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40uLbmH9bmQ3jQrXEHFpxLb5VMSd5nAtpRtbOuwICAHTyHCMVUpcxxMkkfkdxa%2BDoWavvGWmNJXmBLBfWhMWU8kK1lX9hsnpPvxgR6NZDp01%2BeLRQkJuD4AgwqlSrs85x6l8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97cb7598e32d0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originContent-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:17 GMTServer: cafeCache-Control: privateX-XSS-Protection: 0Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 08-Oct-2024 22:30:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=noneAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:35 GMTServer: fifeContent-Length: 1694X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:35 GMTServer: fifeContent-Length: 1686X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:36 GMTServer: fifeContent-Length: 1697X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:36 GMTServer: fifeContent-Length: 1694X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:36 GMTServer: fifeContent-Length: 1710X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:38 GMTServer: fifeContent-Length: 1705X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:39 GMTServer: fifeContent-Length: 1697X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: OriginAccess-Control-Allow-Origin: Timing-Allow-Origin: Content-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Tue, 08 Oct 2024 22:15:40 GMTServer: fifeContent-Length: 1687X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:15:56 GMTContent-Type: image/gifContent-Length: 49Connection: closeP3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAVCache-Control: no-cachePragma: no-cacheExpires: 0X-Server: 10.45.5.182Access-Control-Allow-Origin: *Server: Jetty(9.4.38.v20210224)
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:52 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:54 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:54 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:54 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:54 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:54 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:55 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 08 Oct 2024 22:14:56 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 08 Oct 2024 22:14:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 08 Oct 2024 22:15:11 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RMkTO0o0RBpX7zAqJRuRD%2F6588sjroZwPpuZ8Q9MuGnFBW1UaDNvvo4JOhZo%2FurX%2B5fBYpjEpA38YIzP9H%2BAcOC8NaXSBk9CLjAH5nBfUKhBo9NcdDrbUN4laHYmuRduwA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingSpeculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cf97c9d8a177d1a-EWRContent-Encoding: gzipData Raw: 38 32 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 6f db 38 12 fe ee 5f 31 d1 2d 22 0b 88 e4 a4 ed 6e d3 58 f2 61 37 c9 e2 02 f4 6d b7 29 f6 8a a2 08 28 72 64 b1 a1 48 2d 49 db 31 52 ff f7 03 45 c9 91 5f 92 5e 71 07 34 a8 28 0e 9f 99 79 e6 45 1c a7 07 17 ef ce af 3f bd bf 84 d2 56 62 32 48 0f e2 f8 33 2f 40 58 b8 ba 84 97 5f 26 90 ba 0d a0 82 18 93 05 52 c5 5f 0d 70 fc 05 94 60 1c 03 10 44 4e b3 00 65 fc f1 43 30 81 f4 e0 33 4a c6 8b 2f 71 fc 00 d5 e2 00 ec 87 7a f9 63 50 a7 4f 40 9d fe 00 d4 d4 b6 68 ee c5 3e 2f 77 51 e2 78 13 a9 44 c2 26 83 d4 72 2b 70 f2 ab b5 28 2d 57 12 fe c4 bf 67 5c 23 3b 80 6f 70 2e d4 8c 15 82 68 4c 47 5e 6e 90 56 68 09 d0 92 68 83 36 0b 3e 5e ff 1e 9f 06 30 ea 36 4a 6b eb d8 21 cc b3 e0 5c 49 07 1a 5f 2f 6b 0c 80 fa 55 16 58 bc b3 23 67 ef 78 0d f3 14 ca bf e3 8f bf c6 e7 aa aa 89 e5 b9 e8 03 5d 5d 66 97 6c 8a bd 73 92 54 98 05 5a e5 ca 9a 9e a0 54 5c 32 bc 3b 02 a9 0a 25 84 5a ec 1c 99 73 5c d4 4a db de a1 05 67 b6 cc 18 ce 39 c5 b8 59 1c 71 c9 2d 27 22 36 94 08 cc 4e 3c 8a e0 f2 16 34 8a 2c 30 76 29 d0 94 88 36 00 ce b2 80 16 37 fe 55 4c 8d 09 a0 d4 58 64 c1 88 32 19 d3 29 1f f9 ad 11 2d 12 d4 5a 69 93 34 42 a3 ed 1c 7e f5 65 f2 b8 8a f0 41 05 47 a7 25 fc ae 16 8e 9d a2 cd 6c 68 04 27 b9 62 cb fb 8a e8 29 97 67 c7 e3 9a 30 c6 e5 f4 ec 78 95 7a a0 c9 60 d0 cb 40 74 f6 9d 1c b7 39 38 48 0d d5 bc b6 93 01 00 2f 60 78 20 c9 9c 4f 89 55 3a a1 4a dd 72 bc 94 24 17 c8 22 b8 1f b8 12 58 70 c9 d4 22 21 8c 5d ce Data Ascii: 829Xmo8_1-"nXa7m)(rdH-I1RE_^q4(yE?Vb2H3/@X_&R_p`DNeC03J/qzcPO@h>/wQxD&r+p(-Wg\#;op.hLG^nVhh6>^06Jk!\I_/kUX#gx]]flsTZT\2;%Zs\Jg9Yq-'"6N<4,0v)67ULXd2)-Zi4B~eAG%lh'b)g0xz`@t98H/`x OU:Jr$"Xp"!]
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:14:59 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 08 Oct 2024 22:15:01 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 08 Oct 2024 22:15:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 8cf97cd58d75726b-EWRCF-Cache-Status: DYNAMICContent-Encoding: gzipVary: Accept-Encodingki-cache-type: NoneKi-CF-Cache-Status: BYPASSki-edge: v=20.2.8;mv=3.1.2ki-origin: g1pX-Content-Type-Options: nosniffX-Edge-Location-Klb: 1Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6xNb6t1JdeoOwGYf84B814WJyJgopnQ6uUmVKVJ7jjK9hCQpgA8VgFl5S5x1oM9U6vuU%2BuujYHUTPa%2FBaNzBnbwKRVL%2F6YuJrIuBsfUqf35iEiGJW2FOB1ApOsSegrKomV7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareData Raw: 61 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 8e 4d 0a c2 30 10 85 f7 82 77 18 0f 10 a2 d0 e5 90 8d 28 b8 d0 8d 27 48 9d 31 09 a4 93 12 23 d8 db 9b 6a 0b e2 da a5 ab 61 de cf c7 43 5f ba 68 96 0b f4 6c c9 60 09 25 b2 69 d6 0d 9c 52 81 7d ba 0b a1 7e 8b a8 5f 91 1a 6d 13 0d e3 bd b0 14 ce 06 fd e6 bb 51 15 d4 93 3d b2 6b 68 fa c4 05 79 7c 7a 7a a6 e9 79 c9 4a 29 b0 d0 5b a2 20 0e 4a 02 0a 37 db 46 86 e3 f9 b0 03 2b 04 5b 9f 53 c7 70 cd 81 85 e2 00 9c 73 ca b5 e1 18 94 fa 23 7e 8d 78 02 27 a7 bf a8 24 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a7M0w('H1#jaC_hl`%iR}~_mQ=khy\|zzyJ)[ J7F+[Sps#~x'$0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidateconnection: closecontent-length: 9date: Tue, 08 Oct 2024 22:15:06 GMTserver: nginxset-cookie: sid=c66b99ec-85c2-11ef-9348-45e5f2d6390d; path=/; domain=.kartikel.com; expires=Mon, 27 Oct 2092 01:29:14 GMT; max-age=2147483647; HttpOnlyData Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1594Date: Tue, 08 Oct 2024 22:15:19 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20

IP	Domain	Country	ASN	ASN Name	Malicious
172.98.192.35	kartikel.com	United States	31863	DACEN-2US	false
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
118.139.179.30	linkwithin.com	Singapore	26496	AS-26496-GO-DADDY-COM-LLCUS	false
52.48.221.57	unknown	United States	16509	AMAZON-02US	false
3.227.42.150	nlsn.thrtle.com	United States	14618	AMAZON-AESUS	false
98.82.156.207	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
64.58.232.176	global.ib-ibi.com	United States	13649	ASN-VINSUS	false
69.169.86.39	m.ib-ibi.com	United States	29838	AMCUS	false
46.137.57.71	unknown	Ireland	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.186.73	unknown	United States	15169	GOOGLEUS	false
157.240.26.27	scontent-msp1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
173.236.138.253	www.thetouchofsound.com	United States	26347	DREAMHOST-ASUS	false
65.9.66.104	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
104.22.17.141	api.retargetly.com	United States	13335	CLOUDFLARENETUS	false
104.19.132.76	cm.mgid.com	United States	13335	CLOUDFLARENETUS	false
108.177.15.82	googlecode.l.googleusercontent.com	United States	15169	GOOGLEUS	false
3.72.171.191	unknown	United States	16509	AMAZON-02US	false
172.217.18.9	blogger.l.google.com	United States	15169	GOOGLEUS	false
3.66.133.160	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
104.17.111.254	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.233	unknown	United States	15169	GOOGLEUS	false
154.197.239.185	www.carimember.com	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
216.58.206.46	www3.l.google.com	United States	15169	GOOGLEUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
67.202.105.22	dp1.33across.com	United States	32748	STEADFASTUS	false
52.51.141.78	map.go.affec.tv	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
69.169.85.7	unknown	United States	29838	AMCUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	plus.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
54.229.139.118	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.159.179.217	cdn.w55c.net	United States	16509	AMAZON-02US	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
172.67.8.141	widgets.amung.us	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.7
192.168.2.6

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529411
Start date and time:	2024-10-09 00:13:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://cerciterpanas.blogspot.com.es/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@34/603@451/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.blogger.com/

Name	IP	Active	Malicious	Reputation
www.thetouchofsound.com	173.236.138.253	true	false	unknown
blogmalaysia.com	188.114.97.3	true	false	unknown
cm.mgid.com	104.19.132.76	true	false	unknown
www.clocklink.com	216.230.241.100	true	false	unknown
id5-sync.com	141.95.33.120	true	false	unknown
www.rotikaya.com	104.21.82.36	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
live.rezync.com	65.9.66.64	true	false	unknown
www.activesearchresults.com	173.49.115.115	true	false	unknown
cdn.w55c.net	18.159.179.217	true	false	unknown
www.apesal.com	188.114.97.3	true	false	unknown
httplogserver-lb.global.unified-prod.sharethis.net	3.66.133.160	true	false	unknown
www.domainmarket.com	172.66.40.121	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
api.intentiq.com	13.32.121.10	true	false	unknown
sync.crwdcntrl.net	99.80.212.73	true	false	unknown
rtb-csync-euw1.smartadserver.com	89.149.193.104	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.97	true	false	unknown
cm.g.doubleclick.net	172.217.16.194	true	false	unknown
idaas-ext.cph.liveintent.com	18.205.228.210	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown
sync.intentiq.com	3.160.150.105	true	false	unknown
bcp.crwdcntrl.net	54.229.139.118	true	false	unknown
api.retargetly.com	104.22.17.141	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
match.prod.bidr.io	34.253.109.63	true	false	unknown
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	unknown
plus.l.google.com	142.250.185.78	true	false	unknown
googledrive.com	142.250.185.129	true	false	unknown
busuk.org	188.114.97.3	true	false	unknown
linkwithin.com	118.139.179.30	true	false	unknown
t.dtscout.com	141.101.120.10	true	false	unknown
pixel.onaudience.com	54.38.113.6	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
i68.photobucket.com	18.245.31.8	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.209.249.174	true	false	unknown
www3.l.google.com	216.58.206.46	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
a.tribalfusion.com	172.64.150.63	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.65	true	false	unknown
a.dtssrv.com	104.21.34.180	true	false	unknown
s.tribalfusion.com	172.64.150.63	true	false	unknown
simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com	34.250.22.235	true	false	unknown
de.tynt.com	67.202.105.33	true	false	unknown
widgets.amung.us	172.67.8.141	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ps.eyeota.net	3.122.214.165	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
dmp.truoptik.com	104.17.111.254	true	false	unknown
i.simpli.fi	35.204.89.238	true	false	unknown
m.ib-ibi.com	69.169.86.39	true	false	unknown
sync.srv.stackadapt.com	54.157.243.69	true	false	unknown
auto-ping.com	162.159.135.42	true	false	unknown
thrtle.com	3.209.171.119	true	false	unknown
pingje.com	34.200.113.62	true	false	unknown
scontent-msp1-1.xx.fbcdn.net	157.240.26.27	true	false	unknown
googlecode.l.googleusercontent.com	108.177.15.82	true	false	unknown
pr.prchecker.info	67.227.215.171	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	54.77.90.69	true	false	unknown
i155.photobucket.com	18.245.31.8	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
kartikel.com	172.98.192.35	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
dp1.33across.com	67.202.105.22	true	false	unknown
sync.ipredictive.com	54.160.43.222	true	false	unknown
blogspot.l.googleusercontent.com	216.58.212.129	true	false	unknown
s.amazon-adsystem.com	98.82.156.207	true	false	unknown
whos.amung.us	172.67.8.141	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.67.231.10	true	false	unknown
www.carimember.com	154.197.239.185	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	84.201.210.38	true	false	unknown
dp2.33across.com	67.202.105.22	true	false	unknown
map.go.affec.tv	52.51.141.78	true	false	unknown
track2.securedvisit.com	44.214.249.78	true	false	unknown
global.ib-ibi.com	64.58.232.176	true	false	unknown
tags.crwdcntrl.net	65.9.66.104	true	false	unknown
play.google.com	172.217.16.206	true	false	unknown
thirdparty-logserver-lb.global.unified-prod.sharethis.net	35.156.165.218	true	false	unknown
t.dtscdn.com	104.26.13.60	true	false	unknown
nlsn.thrtle.com	3.227.42.150	true	false	unknown
ic.tynt.com	67.202.105.33	true	false	unknown
blogger.l.google.com	172.217.18.9	true	false	unknown
ib.anycast.adnxs.com	37.252.172.123	true	false	unknown
load-euw1.exelator.com	34.254.143.3	true	false	unknown
idpix.media6degrees.com	unknown	unknown	false	unknown
ib.mookie1.com	unknown	unknown	false	unknown
joiriah.jomniaga.com	unknown	unknown	false	unknown
www.auto-ping.com	unknown	unknown	false	unknown
token.rubiconproject.com	unknown	unknown	false	unknown
secure.insightexpressai.com	unknown	unknown	false	unknown
sync.smartadserver.com	unknown	unknown	false	unknown
cache.addthiscdn.com	unknown	unknown	false	unknown
tr.nuffnangx.com	unknown	unknown	false	unknown
dmp.adform.net	unknown	unknown	false	unknown
ce.lijit.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://pippio.com/api/sync?it=1&pid=500040&_=1728425741.0985003&iv=bba975a0-b1d0-4da2-afbd-c51f30279c95:1728425728.5200315	false		unknown
https://ml314.com/utsync.ashx?eid=50146&et=0&fp=7b03868cb4ffc540d882a0613ece184a&gdpr=0	false		unknown
https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=beb20bd2f645c03deceff2d574462db3	false		unknown
https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0	false		unknown
https://blogger.googleusercontent.com/img/b/U2hvZWJveA/AVvXsEilRpwTYctRHYxDTM7vSQ4OdfTOjG3aVPoWxeNm-C8uNZFCMjI8206OoWREjqnyHs74CirBtQoc5DkQmkFsjUFox4XZ6Zld_815DvttKerWnnqKPZMH3G4-dbAYn4znXhp3sDwavPi_KPMHTikKeNU7GysvDmCoSA/w384	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.3visMJpiQIc.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo99Jaq3x9bYTscBipFXsayIS-abwA/cb=gapi.loaded_0?le=scs	false		unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLSNEoN8ZJB_N4bqktoYr_D2WlDbz-UfDCdT8KQRkAkZTfNoDQsIfAcPh4vy-GOSfydAthhcabtR4uGj7pRx2SskhDU5KeBVl2e7CCHftTRgFC_pphwXJI0OT1Qq049TKVAV0HvfeFFAk/s1600/glyphicons_374_dribbble@2x.png	false		unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1388&partner_device_id=CoIKSWcFrvuCZr7jIInKAg%3D%3D&us_privacy=&random=1728425726597.5&redirect=https%3A%2F%2Fthinkcxad.azurewebsites.net%2Fapi%2Fpixel%3Fid%3D%24%7BTA_DEVICE_ID%7D%26partner%3DTAPAD	false		unknown
https://googleads.g.doubleclick.net/pagead/html/r20241007/r20190131/zrt_lookup_fy2021.html	false		unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1728425739254	false		unknown
https://dp2.33across.com/ps/?pid=1205&rand=1728425726597.6&r=true	false		unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1728425728.522254&iv=bba975a0-b1d0-4da2-afbd-c51f30279c95:1728425728.5200315	false		unknown
https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=8330634226715501442/gdpr=0/rand=37963036	false		unknown
https://ps.eyeota.net/match?bid=r852b20&uid=nil&dc_rc=2&dc_mr=5&dc_orig=dn2m51u&	false		unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=CoIKSWcFrvuCZr7jIInKAg%3D%3D&pcat=Entertainment&pdev=&pctry=US&referrer=http%3A%2F%2Fcerciterpanas.blogspot.com%2F&us_privacy=&cache_buster=1728425738876.2	false		unknown
https://www.rotikaya.com/wp-content/uploads/2015/02/Fazura-Bahasakan-Peminat-Virus-Di-Instagram-ROTIKAYA.jpg	false		unknown
https://pd.sharethis.com/pd/dtscout	false		unknown
https://www.blogger.com/about/img/sections/millions/millions-map_2x.png	false		unknown
https://apis.google.com/js/api.js	false	URL Reputation: safe	unknown
https://blogger.googleusercontent.com/img/b/U2hvZWJveA/AVvXsEhy9r8vyLfwnrBV2wBe_8yh4eCCMJtO8VNiNucSp35Amu05tih3a8xYXQxRxoUkQDHdCw7nW8D31w-xBqya757bcQ7tErWAxrTj9EFSteCHgxGebiCnCAX83DBcNX67kWNZGIBWSj7OMMl1HDtYhiuajGSNS7_O4XHMhKSOufUDUw/w768	false		unknown
https://t.dtscdn.com/widget/?d=104017284257205FA39B4927E1410E19&nid=0&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Fcerciterpanas.blogspot.com%2F&r=	false		unknown
https://www.blogger.com/about/js/main.min.js?v=1476060773	false		unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5107433835425667505&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dbba975a0-b1d0-4da2-afbd-c51f30279c95%253A1728425728.5200315%26pid%3D500040%26it%3D1%26iv%3Dbba975a0-b1d0-4da2-afbd-c51f30279c95%253A1728425728.5200315%26_%3D1728425728.522254	false		unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=CoIKSWcFrvuCZr7jIInKAg%3D%3D&pcat=Entertainment&pdev=&pctry=US&referrer=http%3A%2F%2Fcerciterpanas.blogspot.com%2F&us_privacy=&cache_buster=1728425738876.8	false		unknown
https://dp2.33across.com/ps/?tt=iframe&pid=1198&us_privacy=&random=1728425726597.7&r=true	false		unknown
https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=7645382884878602817/gdpr=0	false		unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=CoIKSWcFrvuCZr7jIInKAg%3D%3D&pcat=Entertainment&pdev=&pctry=US&referrer=http%3A%2F%2Fcerciterpanas.blogspot.com%2F&us_privacy=&cache_buster=1728425738876.4	false		unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=CoIKSWcFrvuCZr7jIInKAg%3D%3D&pcat=Entertainment&pdev=&pctry=US&referrer=http%3A%2F%2Fcerciterpanas.blogspot.com%2F&us_privacy=&cache_buster=1728425738876.6	false		unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	false		unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false		unknown
https://blogger.googleusercontent.com/img/b/U2hvZWJveA/AVvXsEiKcvu9hJsHC-b_QpHjXykOYrSZL4Ro2FCs3JPE0POr_t3JAdFiRQ-75jiMvimr9EbpLUnbYWvGtjPXGD77NtUcjCEfGY1vNc31jN9ukbKwlVHYBhQo48lVmBwqDGydn58JP72010JcMXZtKqj7c5ZO6JFvGlHLp55INqY/w256	false		unknown
https://blogger.googleusercontent.com/img/b/U2hvZWJveA/AVvXsEghOZH01xb31Afa3i74T2lrdCH2CWjI9MZXXmgbJ6BXacZYjWpgsSKCcbvhHdZuR0QI_A6duLZYddHY-wzdESrlNmEhw4vMSK32PZWO-NHfO3qOQ4ITCBEjUUo80tSek28PSVzVnjVBFC3QDgtb56Txl06MvVuA2o4/w256	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/u5OMVLVnVwH.js	false		unknown
https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=7b03868cb4ffc540d882a0613ece184a	false		unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t39.30808-1/299815459_444294194399457_5330823779008361449_n.jpg?stp=c0.0.700.700a_cp0_dst-jpg_s50x50&_nc_cat=108&ccb=1-7&_nc_sid=6738e8&_nc_ohc=CemDNfa5JQ0Q7kNvgFP2Axg&_nc_ht=scontent-msp1-1.xx&edm=AEDRbFQEAAAA&_nc_gid=As6FPeH4Cgyc73N7OoC1w-n&oh=00_AYDI2YpHArr0P0maJ8kAjievS-AEe31jRTOBGstPBvdQYQ&oe=670B6863	false		unknown
https://blogger.googleusercontent.com/img/b/U2hvZWJveA/AVvXsEjY_0xh1pbiJgI2UJ129eGYzOEVFyRUeASasTqy0_ZIUzDeLmiz28yuvZh2iB7M7fcn5rwinFmgQinl5oj_RdFi9LshDZ_3SitVVhZ3J03qFL0Qp6njnfOqgd4cbHnNkXkkQEhXGFyH74PVpT70jao08oyqxQ/w768	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=N2IwMzg2OGNiNGZmYzU0MGQ4ODJhMDYxM2VjZTE4NGE&gdpr=0	false		unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1728425740.8358192&iv=bba975a0-b1d0-4da2-afbd-c51f30279c95:1728425728.5200315	false		unknown
https://s.tribalfusion.com/z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D2%26_t%3D1728425746%26_reach%3D1&u=60e9dcb1-444f-4623-a411-2c4de2f6a320	false		unknown
https://www.blogger.com/static/v1/widgets/3650705295-widgets.js	false		unknown
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=bba975a0-b1d0-4da2-afbd-c51f30279c95%3A1728425728.5200315&pid=500040&it=1&iv=bba975a0-b1d0-4da2-afbd-c51f30279c95%3A1728425728.5200315&_=1728425728.522254	false		unknown
https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=7645382884878602817&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	false		unknown
https://api.retargetly.com/getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26uid%3D%25rlid%25	false		unknown
https://bcp.crwdcntrl.net/pixels?src=LTJS&s=31%2C92%2C49%2C136%2C41%2C135%2C7%2C33%2C78%2C121%2C148%2C22%2C153%2C116%2C61%2C154%2C106%2C104%2C8%2C54%2C100%2C3%2C2&c=3825	false		unknown
https://www.rotikaya.com/wp-content/uploads/2015/01/01-Shaarnaz-Ahmad-Pasrah-Komen-Balas-Shila-Amzah-ROTIKAYA.jpg	false		unknown
https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tm8acWd6NGquNrsrT_u_r4YrceMmGiLPl6dTs9khKZ2DoeL9a3ctf9T8gXFZ856X5CeJDQHnX7P_BeFTIFo_1V4v8=s16-w16-h16	false		unknown
https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fmap.go.affec.tv%252Fmap%252Fan%252F%2524UID%253Fch%253D6705af00b0443f00013b99ce%2526chc%253Dtt%2526redirect_url%253D%2526gdpr%253D%2526gdpr_consent%253D%26gdpr%3D%26gdpr_consent%3D	false		unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false		unknown
http://pingje.com/widget/1254/0/2/2/100/bottom/transparent/006b9b/Tahoma%7C1.2em%7C0.04em%7C13px%7C100%25%7C1px%7C1px%7Cc0c0c0%7Ccenter%7Ctop%7Csquare%7C11,2,13,5,9,7,12,10,1	false		unknown
https://api.retargetly.com/getuid?p=1625&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6bqoi0v%26uid%3D%25rlid%25&_rlid=f1bcc530-da45-473e-8c42-66a75fdf0ef3	false		unknown
http://googledrive.com/host/0B-UFNCskEl7QdlBoZjlHbDUzcEU	false		unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1	false		unknown
https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=7b03868cb4ffc540d882a0613ece184a	false		unknown
https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0	false		unknown
https://ib.adnxs.com/getuid?https://id5-sync.com/c/19/2/8/2.gif?puid=$UID&gdpr=0&gdpr_consent=	false		unknown
https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825	false		unknown
https://loadm.exelator.com/load/?p=204&g=1133&j=0&xl8blockcheck=1	false		unknown
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=bba975a0-b1d0-4da2-afbd-c51f30279c95%3A1728425728.5200315&pid=500040&it=1&iv=bba975a0-b1d0-4da2-afbd-c51f30279c95%3A1728425728.5200315&_=1728425729.9386573	false		unknown
https://track2.securedvisit.com/sync/1540_03681?id=na	false		unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi28MNTTfR3lPWMVr1ws4OfijJEYDTSriT_khnsgGncrMC_imGZ0dWfS-rmpTUjMHEh3yCRCDImVdnBOcHx_RHXVQIKtCKttGsV-qxiG3Ed67akFz-T4_6GLYZaA4zwXBD-nNUZPtVe8NQ/s1600/glyphicons_368_tumblr@2x.png	false		unknown
https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s-aRIwBP2NzVRLe0q3tvMREMQTDRKio_zyuEq4NV4tSy3YDdrTo2CnvrVT0vuTmf5bhVVmQ3iVbnrrMbuJnFekBdAHxK3BpNwCWQ=s16-w16-h16	false		unknown
https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_t3kbidIyDpmVM1Wx8l9Aq_956kBoo_RCoh0w7OLeIXY6icVjrWVkR7Sv4kiUqLZuKbZHlRWXwfmDW4y75Ox8OdHCJQMqBD4wdg3A=s16-w16-h16	false		unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=Entertainment&us_privacy=&random=1728425726597.11	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=7b03868cb4ffc540d882a0	chromecache_492.2.dr	false		unknown
https://domainmarket.imgix.net/dm-com/21faa3cd-7e54-4be6-ab37-bf78a8164a55/marketability.png?auto=co	chromecache_223.2.dr	false		unknown
https://www.blogger.com	chromecache_338.2.dr	false		unknown
https://ep2.adtrafficquality.google	chromecache_452.2.dr	false		unknown
https://domainmarket.imgix.net/build/assets/app-C0DxXQXJ.css	chromecache_223.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_329.2.dr, chromecache_368.2.dr	false	URL Reputation: safe	unknown
https://www.domainmarket.com/categories/food	chromecache_223.2.dr	false		unknown
https://support.google.com/adsense/answer/9190028.	chromecache_386.2.dr, chromecache_515.2.dr	false		unknown
https://www.internalfb.com/intern/invariant/	chromecache_349.2.dr, chromecache_545.2.dr	false	URL Reputation: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=N2IwMzg2OGNiNGZmYzU0MGQ4ODJhMDYxM	chromecache_492.2.dr	false		unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_446.2.dr, chromecache_320.2.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://www.domainmarket.com/categories/finance	chromecache_223.2.dr	false		unknown
https://www.domainmarket.com/categories/travel	chromecache_223.2.dr	false		unknown
https://www.domainmarket.com/categories/employment	chromecache_223.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_186.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_551.2.dr, chromecache_452.2.dr	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=N2IwMzg2OGNiNGZmYzU0MGQ4ODJhMDYxM2	chromecache_492.2.dr	false		unknown
https://www.domainmarket.com/search	chromecache_223.2.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_362.2.dr, chromecache_394.2.dr, chromecache_404.2.dr, chromecache_478.2.dr	false		unknown
https://www.domainmarket.com/categories/recreation	chromecache_223.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_446.2.dr, chromecache_320.2.dr	false	URL Reputation: safe	unknown
https://www.domainmarket.com/categories/shopping	chromecache_223.2.dr	false		unknown
https://domainmarket.imgix.net/images/icon-immediate-presence.png	chromecache_223.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_446.2.dr, chromecache_320.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_446.2.dr, chromecache_320.2.dr	false		unknown
https://twitter.com/intent/tweet?text=	chromecache_572.2.dr, chromecache_363.2.dr	false		unknown
https://www.google.com/images/cleardot.gif	chromecache_304.2.dr	false		unknown
https://www.domainmarket.com/purchase-policy	chromecache_223.2.dr	false		unknown
https://domainmarket.imgix.net/dm-com/e89bead5-c7fd-470b-b957-1aa64f0a19f0/DM_Truth-Numbers-bg.jpg?a	chromecache_223.2.dr	false		unknown
https://github.com/google/safevalues/issues	chromecache_362.2.dr, chromecache_394.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_362.2.dr, chromecache_394.2.dr, chromecache_404.2.dr, chromecache_478.2.dr	false		unknown
http://www.google.com/ig/adde?moduleurl=	chromecache_288.2.dr, chromecache_576.2.dr	false		unknown
https://apis.google.com	chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif	chromecache_572.2.dr, chromecache_363.2.dr	false		unknown
https://www.domainmarket.com/categories/internet	chromecache_223.2.dr	false		unknown
https://domains.google.com/suggest/flow	chromecache_445.2.dr, chromecache_533.2.dr, chromecache_506.2.dr, chromecache_308.2.dr	false	URL Reputation: safe	unknown

Input	Output
URL: http://cerciterpanas.blogspot.com/ Model: jbxai	{ "brand":["Blogger"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Read More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"CER ~ CITER CERCITERPANAS.BLOGSPOT.COM Home Cer-citer Artis-Berita-Agama-Sukan-Teknologi-DLL Keluarga Tidak Paksa Nelydia Senrose, Qi Kahwin Dalam Masa Terdekat By panas in Q Berbicara mengenai bila dirinya akan mengakhiri zaman solo beliau, Nelydia Senrose mengatakan perkara tersebut seeloknya diberitahu oleh (Qi Razali) bagi menghormati pihak lelaki dalam membuat sebarang keputusan mengenai hala tuju hubungan mereka. BACA: Nelydia Senrose Akui...", "has_visible_qrcode":false}

URL: http://cerciterpanas.blogspot.com/ Model: jbxai	{ "brand":["Blogger"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Read More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"CER ~ CITER CERCITERPANAS.BLOGSPOT.COM Home Cer-citer Artis-Berita-Agama-Sukan-Teknologi-DLL Keluarga Tidak Paksa Nelydia Senrose, Qi Kahwin Dalam Masa Terdekat By panas in Q Berbicara mengenai bila dirinya akan mengakhiri zaman solo beliau, Nelydia Senrose mengatakan perkara tersebut seeloknya diberitahu oleh (Qi Razali) bagi menghormati pihak lelaki dalam membuat sebarang keputusan mengenai hala tuju hubungan mereka. BACA: Nelydia Senrose Akui...", "has_visible_qrcode":false}

URL: http://cerciterpanas.blogspot.com/ Model: jbxai	{ "brand":["Blogger"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Read More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"CER ~ CITER CERCITERPANAS.BLOGSPOT.COM Home Cer-citer Artis-Berita-Agama-Sukan-Teknologi-DLL Keluarga Tidak Paksa Nelydia Senrose, Qi Kahwin Dalam Masa Terdekat By panas in Q Berbicara mengenai bila dirinya akan mengakhiri zaman solo beliau, Nelydia Senrose mengatakan perkara tersebut seeloknya diberitahu oleh (Qi Razali) bagi menghormati pihak lelaki dalam membuat sebarang keputusan mengenai hala tuju hubungan mereka. BACA: Nelydia Senrose Akui...", "has_visible_qrcode":false}

URL: https://www.blogger.com/about/?bpli=1 Model: jbxai	{ "brand":["Blogger"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"CREATE YOUR BLOG", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Publish your passions, your way Create a unique and beautiful blog easily.", "has_visible_qrcode":false}

URL: https://www.blogger.com/about/?bpli=1 Model: jbxai	{ "brand":["Blogger"], "contains_trigger_text":true, "trigger_text":"CREATE YOUR BLOG", "prominent_button_name":"CREATE YOUR BLOG", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Publish your passions, your way Create a unique and beautiful blog easily.", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 24732
Category:	dropped
Size (bytes):	9706
Entropy (8bit):	7.974244330200313
Encrypted:	false
SSDEEP:	192:sdfLzIYp/TqA9pWKOtmld+fBOApnSbGbZAsCQSu98xpZi2:sdffIeecIKameOsnSbeCsCu98xpM2
MD5:	373CEF3A03E2AAB544B1645A96E1557D
SHA1:	789BB2E7E291CE40587D62BDB821934E0F7B736D
SHA-256:	A9DCEB91B28EDD0CE446F678E2117ECE68191D4C2E609B07F4910D2F93F58226
SHA-512:	9DF97EEAC20A806BDDAAC955EA39554040D9B5A38A5C7432C4BC0347FFB4C8C14F1E923082D9B227D6421996AEE238B0A027038FBDC381EA3365616544B94388
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0.......+."..^mD.R..@y...Q.m".YIKq...5..8.t..=.9...C.i43..H..,y..Z.-.n,..5{I.....g....Z....if26..@...... _..Y..]..z/...Kk.W..I.....Y;.`PG.[k.J...G.%&"........mG.\..>.TZ;...K.\|.d.X^v/.5K.Nj......$...{d.Y.....EY.K}0.._...f.e..!.....5..:...O.H..@p.#...{k..O...w.....:.lZ.U.@..3J./w.......1....[k...66-.,.U.vn.u...bg...uuyn.X#.&.....IW..k/jnVS.&.o...t].{Y.'{...&.........u..h2~...e...;..M.J.U...4.Sj.Y.G...=.......h.....\.....i..O..g~`.X.u.........*..>...........U.u.I._}:..xXr..7\|....Q=.x.s P.....yG^08..#..'kg....U.......N..Z.<w..3.._..O..]r{.&..._...u.U.to"j.^....oA.4....g..g..2.f..Q&uW^.....D.z.....}.o}gm.V...Y.........._76......D.G....b..n.%z..k;.......?.$.D.....:[..:...a.....fk{[........}k....zv...........?.d>...Xcn...\|....^i..k.............n.Y.G.8..9<>..f......a.<.......Ok.:...'K.f...c(8....%<....<........6.<....B..x...3..L.:..3...(...9.6..;....Z.>...j.........A..uz...8>.}..............@....O......H>A..`...p....d....4M..

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:50.496426105 CEST	444	OUT	GET / HTTP/1.1 Host: cerciterpanas.blogspot.com.es Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:51.227304935 CEST	434	IN	HTTP/1.1 302 Moved Temporarily Location: http://cerciterpanas.blogspot.com/ Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Date: Tue, 08 Oct 2024 22:14:51 GMT Expires: Tue, 08 Oct 2024 22:14:51 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 199 Server: GSE
Oct 9, 2024 00:14:51.360883951 CEST	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff 6d 8f c1 0e 82 30 10 44 ef 7c c5 5a cf 50 bd 9a 4a 82 52 c1 04 42 a2 3d e8 b1 e2 6a 4d 28 25 a5 98 f8 f7 d6 ea d1 b9 6c 76 76 92 79 cb 4a 51 57 69 c4 4a 9e e5 7e 88 bd a8 78 5a 9b 27 5e 41 a0 1e 8c 95 f6 d1 bd 18 fd Data Ascii: m0D\|ZPJRB=jM(%lvvyJQWiJ~xZ'^A"FMaSl9\|D@",8r&XO_w#4A<(-cr}KZ)IZd4K7
Oct 9, 2024 00:15:36.449564934 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:51.252901077 CEST	441	OUT	GET / HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:52.131293058 CEST	419	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Tue, 08 Oct 2024 22:14:51 GMT Date: Tue, 08 Oct 2024 22:14:51 GMT Cache-Control: private, max-age=0 Last-Modified: Fri, 20 Sep 2024 11:09:14 GMT ETag: W/"7069f0440e3756154e4d0d033aec738db5b28e4c12b718c0d104d4ce31960acf" Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 34519 Server: GSE
Oct 9, 2024 00:14:52.139072895 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd d9 76 1b c7 b2 28 f8 ce af 48 d3 c7 9b d4 26 0b 40 15 66 d2 94 1b a3 38 cf 83 28 1f 5f ae 02 aa 00 14 50 03 58 03 41 50 db bd fa f6 5b df bf e8 97 ee fe 86 7e e8 8f e9 bb 7a dd df e8 88 c8 cc 42 15 08 4a 94 44 Data Ascii: v(H&@f8(_PXAP[~zBJDhrQc^y`b<loVa86d^odPnNN,oAXy5_Rnt"\|\aio6i+,X ;fW&t
Oct 9, 2024 00:14:52.139111042 CEST	1236	IN	Data Raw: 13 45 e4 ea bc 5a 59 d3 44 61 40 42 1b d1 49 fd d6 f9 2f 28 dc e6 38 d5 8a 30 36 20 06 f8 55 05 f8 34 f8 54 41 32 e0 b3 83 20 43 55 6c 09 ca c2 4c b4 63 52 6b c4 a4 56 47 52 a3 e1 12 1d b5 13 50 e4 10 eb d0 7a 0b 49 ad c6 f1 40 b3 0d 0d 34 71 3a Data Ascii: EZYDa@BI/(806 U4TA2 CUlLcRkVGRPzI@4q:iRVQbRki4>J}m0V_IM]J-Z+Mj-$&bBko*x9#bG!#_s%j;In3w3&
Oct 9, 2024 00:14:52.139147043 CEST	1236	IN	Data Raw: 15 4b e2 7b 5a 9e 70 6d 94 7c 2f 4c 27 49 78 cd d8 78 ab 73 46 28 a2 10 e3 7d 54 f9 92 20 94 e9 b2 ca 85 67 5b 70 52 49 f2 8f a4 20 a9 b2 c6 d6 3d 47 73 95 93 8c d0 5a 4a 7c 62 73 6d 21 5f 05 f3 b6 f9 24 10 d6 b8 d4 27 96 4b 8a fe 3a 87 4a 2a b4 Data Ascii: K{Zpm\|/L'IxxsF(}T g[pRI =GsZJ\|bsm!_$'K:JX\|/@bs<Y#J]CF9B[JQIQ7V4Rb2$cI(!cr6Lq))E`XW:ICIqBbs[\liiD
Oct 9, 2024 00:14:52.139180899 CEST	390	IN	Data Raw: b4 cd 41 22 f6 fd 15 fc 0b dd 60 bd 24 62 b1 46 e8 eb 6e 60 e1 a0 36 98 6e db 4c 0d 36 95 89 d9 19 59 a1 b2 e0 d5 83 62 b9 86 79 4f dd 6d ce 83 90 c7 f6 e4 c3 b8 03 ef ce f4 61 34 13 a0 4c cb 30 4c 77 0e c6 c8 5e b7 ad 75 9d bd b7 ad 20 54 88 21 Data Ascii: A"`$bFn`6nL6YbyOma4L0Lw^u T!%>?KW6=@`0~Y!X0-2nlY=xfh5(G>B$Oq.Ega0v"x@AMs)(g;yBn3~\xf9})XB^
Oct 9, 2024 00:14:52.157510996 CEST	1236	IN	Data Raw: 7a 35 ed 78 f7 4a 00 c2 15 74 96 f7 c9 be 4b b9 4f ec fb 09 2c 89 b7 f1 84 25 e6 ab db ed 4a d1 be a1 26 e5 3c ad dd 1b c9 27 1c 1d 29 90 14 0c 43 c2 d5 47 d0 55 bc 68 a5 09 e2 f1 9a 46 8d 70 f0 94 ee 00 04 91 29 bf 99 f7 63 1d 96 a2 19 d4 71 1f Data Ascii: z5xJtKO,%J&<')CGUhFp)cq5TTZA(p$&^5MU@nlB)QTtANM4mz\I'=~Z2SMIf1@@gc(,XhXgS@>j+wL1=n}3D
Oct 9, 2024 00:14:52.157557964 CEST	1236	IN	Data Raw: 3a 10 9a 67 9c 2c 6a ae 71 8e 53 be 3a de 69 be e2 88 37 ac 3b 68 dd f0 ba 11 ca c5 4c df 0c 5b b6 89 1f eb d3 1d 83 ca 6d 52 39 20 17 3c 51 08 34 b8 1c 3f c0 8a d6 5d a2 4e 50 9f c2 c4 e3 d6 cf ea 32 bc 5f 16 75 91 28 71 08 49 82 dd c4 09 84 bf Data Ascii: :g,jqS:i7;hL[mR9 <Q4?]NP2_u(qI_`^V~F[AW9YEx$2$~-d%+w`GR_4#B,5}XRYoS6o?JDq\sjOW<F~T1
Oct 9, 2024 00:14:52.157615900 CEST	448	IN	Data Raw: 75 e5 f4 b6 0b 87 0f bd 7d fb fe dd 65 6f bf 73 f3 60 14 b5 5b bb 54 3d b8 39 ba 0e db d1 6d 73 94 3f 2b 9c f9 db be df 7d b8 3c f4 bb d1 5d e7 f2 d8 51 dd c2 55 b5 1e aa f7 c3 cb ab dd bb 76 14 9c fb a1 6b bf 6b 4e 82 6c a0 96 72 b9 6c 47 47 f4 Data Ascii: u}eos`[T=9ms?+}<]QUvkkNlrlGGf`]530WZhyg)Em,y 4HOJ-,Rpv/MudTB=6*F?s{Y/\)lXGpJI1FCSsT&Gwwh:'_Q
Oct 9, 2024 00:14:52.157653093 CEST	1236	IN	Data Raw: 0f cb b8 df ab 78 18 a7 bc 3c db 49 f9 60 61 02 27 59 38 a5 11 a3 f9 40 cd d1 0a 0b 6c 03 84 f1 68 ee a1 10 03 6b 1e 5a eb a3 89 04 34 c9 98 d8 49 91 65 70 0e 38 5e d4 5c be 5c 54 ab e5 7c b5 50 2d 95 d5 4a be 0c aa 28 4d 51 d7 43 d7 1c ff c2 dd Data Ascii: x<I`a'Y8@lhkZ4Iep8^\\T\|P-J(MQCtB\gwU4FHhV0@:z`i'}F:P_yMiiGZ>jkS0]A>-d+";JWbg:;>6u[wq[
Oct 9, 2024 00:14:52.157687902 CEST	1236	IN	Data Raw: df 63 34 ca 99 12 f4 35 d6 41 83 e6 62 1f a7 24 20 9a e5 d2 8b d3 10 f3 70 fc 49 32 25 42 13 9c 80 94 49 9c 64 63 13 7d 6a 46 92 82 80 56 b7 53 3c 30 c2 b1 c2 42 03 62 1c 9e 63 1c 6f 5f 8c 39 30 71 8d 80 09 99 91 4e 18 11 49 ea 40 74 8c e8 2a 39 Data Ascii: c45Ab$ pI2%BIdc}jFVS<0Bbco_90qNI@t9I{ Hu=AJ6F,!.?@obZxaEak^gh2i6n_?+>>5{@=nC~!nW&BA,Xxv#gg1j5n-/\&
Oct 9, 2024 00:14:52.157741070 CEST	1236	IN	Data Raw: f9 88 ef ed 1b 72 bb fd d1 e2 e7 19 fe b4 67 b4 fb 6f e6 3d 2b c0 af 67 29 55 8a e0 09 f4 6b 5a 92 bb be 69 af d9 17 a3 2e e1 2d 93 5a c0 1a ca 62 74 8b 09 5a 5b e3 8a c0 9a 5c 06 d6 84 22 b0 d6 b4 d6 62 19 f7 b7 f4 92 2d d0 ad bf 82 97 ec 13 6c Data Ascii: rgo=+g)UkZi.-ZbtZ[\"b-lI7wjX\(\|C>`?(:o2cG@GNIv&`{Py%VJu:bu0@'7X3gaa2ws9^-aH5sa
Oct 9, 2024 00:14:55.813785076 CEST	399	OUT	GET /feeds/posts/default?orderby=published&alt=json-in-script&callback=rpthumbnt HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:56.131798983 CEST	1236	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip ETag: W/"0ce06ee375d7b102579b755b4cac6552667bfb67f9b6494f7bcec0d572b35bc2" Date: Tue, 08 Oct 2024 22:14:55 GMT Content-Type: text/javascript; charset=UTF-8 Server: blogger-renderd Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Tue, 08 Oct 2024 22:14:56 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Fri, 20 Sep 2024 11:09:14 GMT Content-Length: 34632 X-Frame-Options: SAMEORIGIN Data Raw: 1f 8b 08 00 00 00 00 00 00 00 ed bd e9 72 1b 4b b2 26 f8 7f 9e 22 cf b9 b7 4c d2 10 09 61 5f 54 56 56 0d 12 5c 41 90 20 01 8a a2 5a 3d b4 00 32 81 4c e4 06 e6 42 10 6c eb b1 f3 0e 33 3f ee 98 dd fe 35 66 fd 20 f3 28 e7 49 c6 dd 23 22 17 10 24 41 89 12 a9 3a aa 85 22 73 89 8c f0 f0 f0 70 ff c2 97 f7 ef 95 56 6f 5f 19 31 db 1e b2 91 f5 bf f9 b3 d0 88 9c a1 1b be fd ef bf 5f eb 7e 60 7a ee ef 1f 7e 2f e6 0b bf e7 7e d7 dd 91 a7 99 ee 04 2e 9c 0d 76 d4 06 5c 1a eb ba f6 fb 87 ff fe fb 8d 63 bb 01 5c 37 c2 70 f6 e1 fd fb f9 7c 9e 9f 97 f3 9e 3f 79 5f 2a 14 aa ef 5b a1 e7 c0 d3 f4 d4 bf 7b 33 dd ed eb cc 1f 19 c9 0b ac 99 1f 79 ce 7b f5 7d 30 d3 47 ef f1 89 80 9e f0 83 e0 3d 7c fc 7d fc f2 d0 f6 26 13 dd 4f de 0c 46 86 ee b0 20 3f f1 bc 89 ad 53 2b e2 19 fc 74 23 7e 71 a2 7b d0 58 b6 8b fc 1a 75 53 dc 8e 9f d6 1e fc 02 1f 56 fc 74 68 a4 3a 34 8b 7c 9b 9a 0c 16 ae 66 8e 58 08 24 7c 0f 4f e8 4c 7b cf e9 68 12 c9 fe 3d 84 77 42 36 f9 20 ba 8b 0d e7 8a cd 66 93 2e a8 c5 42 a3 59 2e 37 2a a5 72 b3 5e 28 14 ab [TRUNCATED] Data Ascii: rK&"La_TVV\A Z=2LBl3?5f (I#"$A:"spVo_1_~`z~/~.v\c\7p\|?y_[{3y{}0G=\|}&OF ?S+t#~q{XuSVth:4\|fX$\|OL{h=wB6 f.BY.7r^(r=i,JRE-4RaPl~(4?+FQh\|(>=}^2_a~hMM&2?}%,/FW3mo[kt[E3n*Ze8M36 R3/(z$q[=R<#[aifsy2-<l{\|'M.1]?&\Li!(]fE`f9pgotYdZ+,#]q~%fosO)=9&fwf
Oct 9, 2024 00:15:19.548890114 CEST	479	OUT	GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmBArnmXBGwSry7tG5cJTcB9I9KcruJZLwkNx2agH5M_XLe1HN4CxxCQBm045s5-kUAv_XN6fzlbzwWoY41UiHECiHx5Dg HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:15:19.847800970 CEST	295	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Date: Tue, 08 Oct 2024 22:15:19 GMT Expires: Tue, 08 Oct 2024 22:15:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 245 Server: GSE
Oct 9, 2024 00:15:34.491111040 CEST	445	OUT	GET /favicon.ico HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __dtsu=104017284257205FA39B4927E1410E19
Oct 9, 2024 00:15:34.772970915 CEST	424	IN	HTTP/1.1 200 OK Content-Type: image/x-icon; charset=UTF-8 Expires: Tue, 08 Oct 2024 22:15:34 GMT Date: Tue, 08 Oct 2024 22:15:34 GMT Cache-Control: private, max-age=86400 Last-Modified: Fri, 20 Sep 2024 11:09:14 GMT ETag: W/"7069f0440e3756154e4d0d033aec738db5b28e4c12b718c0d104d4ce31960acf" Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 412 Server: GSE

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:52.348840952 CEST	346	OUT	GET /host/0B-UFNCskEl7QZEtoTFcxYVJ0NmM HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:53.065282106 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:52 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:53.065305948 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.479727983 CEST	438	OUT	GET /-wZtyEwTWviE/UUvGgxDgGII/AAAAAAAABw8/mqb6pEkMbkE/s000/grey.png HTTP/1.1 Host: 2.bp.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.113569975 CEST	641	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="grey.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 191 X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 22:14:54 GMT Expires: Wed, 09 Oct 2024 22:14:54 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v710" Content-Type: image/png Vary: Origin Age: 0 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 02 00 00 00 90 77 53 de 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 0c 49 44 41 54 08 99 63 38 73 e6 0c 00 04 cc 02 65 6c 87 48 9a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRwSsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATc8selHIENDB`
Oct 9, 2024 00:15:39.245642900 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.814450979 CEST	361	OUT	GET /host/0B-UFNCskEl7QQi1yOERKd0VQXzQ HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.527931929 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:54 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:54.527952909 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://cerciterpanas.blogspot.com.es/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Windows Analysis Report
http://cerciterpanas.blogspot.com.es/

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.815713882 CEST	361	OUT	GET /host/0B-UFNCskEl7QdlBoZjlHbDUzcEU HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.527899027 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:54 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:54.527920008 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.815933943 CEST	361	OUT	GET /host/0B-UFNCskEl7Qd1UzYmFaVXctLXM HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.528086901 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:54 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:54.528100967 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.816698074 CEST	361	OUT	GET /host/0B-UFNCskEl7QS0ljWktndzFic1E HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.550328016 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:54 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:54.550348043 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:53.817647934 CEST	361	OUT	GET /host/0B-UFNCskEl7QZWhlOVhReFpvb1E HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.539649010 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:54 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:54.539666891 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:54.189357996 CEST	332	OUT	GET /-wZtyEwTWviE/UUvGgxDgGII/AAAAAAAABw8/mqb6pEkMbkE/s000/grey.png HTTP/1.1 Host: 2.bp.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:54.815629959 CEST	641	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="grey.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 191 X-XSS-Protection: 0 Date: Tue, 08 Oct 2024 22:14:54 GMT Expires: Wed, 09 Oct 2024 22:14:54 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v710" Content-Type: image/png Vary: Origin Age: 0 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 02 00 00 00 90 77 53 de 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 0c 49 44 41 54 08 99 63 38 73 e6 0c 00 04 cc 02 65 6c 87 48 9a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRwSsBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATc8selHIENDB`
Oct 9, 2024 00:15:39.842463017 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:54.873512983 CEST	346	OUT	GET /host/0B-UFNCskEl7QZEtoTFcxYVJ0NmM HTTP/1.1 Host: googledrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:55.599134922 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1594 Date: Tue, 08 Oct 2024 22:14:55 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/i [TRUNCATED]
Oct 9, 2024 00:14:55.599152088 CEST	513	IN	Data Raw: 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f Data Ascii: only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:15

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:55.810611963 CEST	325	OUT	GET /widget.js HTTP/1.1 Host: www.linkwithin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:56.721782923 CEST	507	IN	HTTP/1.1 404 Not Found Date: Tue, 08 Oct 2024 22:14:56 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:56.464759111 CEST	450	OUT	GET /widget/3962/0/2/2/100/bottom/transparent/006b9b/Tahoma%7C1.2em%7C0.04em%7C13px%7C100px%7C0%7C0%7C0%7Ccenter%7Ctop%7Csquare%7C8,4,2,1,9,6,3 HTTP/1.1 Host: www.apesal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:56.941590071 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Tue, 08 Oct 2024 22:14:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Tue, 08 Oct 2024 22:15:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RMkTO0o0RBpX7zAqJRuRD%2F6588sjroZwPpuZ8Q9MuGnFBW1UaDNvvo4JOhZo%2FurX%2B5fBYpjEpA38YIzP9H%2BAcOC8NaXSBk9CLjAH5nBfUKhBo9NcdDrbUN4laHYmuRduwA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf97c9d8a177d1a-EWR Content-Encoding: gzip Data Raw: 38 32 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 6f db 38 12 fe ee 5f 31 d1 2d 22 0b 88 e4 a4 ed 6e d3 58 f2 61 37 c9 e2 02 f4 6d b7 29 f6 8a a2 08 28 72 64 b1 a1 48 2d 49 db 31 52 ff f7 03 45 c9 91 5f 92 5e 71 07 34 a8 28 0e 9f 99 79 e6 45 1c a7 07 17 ef ce af 3f bd bf 84 d2 56 62 32 48 0f e2 f8 33 2f 40 58 b8 ba 84 97 5f 26 90 ba 0d a0 82 18 93 05 52 c5 5f 0d 70 fc 05 94 60 1c 03 10 44 4e b3 00 65 fc f1 43 30 81 f4 e0 33 4a c6 8b 2f 71 fc 00 d5 e2 00 ec 87 7a f9 63 50 a7 4f 40 9d fe 00 d4 d4 b6 68 ee c5 3e 2f 77 51 e2 78 13 a9 44 c2 26 83 d4 72 2b 70 f2 ab b5 28 2d 57 12 fe c4 bf 67 5c 23 3b 80 6f 70 2e d4 8c 15 82 68 4c 47 5e 6e 90 56 68 09 d0 92 68 83 36 0b 3e 5e ff 1e 9f 06 30 ea 36 4a 6b eb d8 21 cc b3 e0 5c 49 07 1a 5f 2f 6b 0c 80 fa 55 16 58 bc b3 23 67 ef 78 0d f3 14 ca bf e3 8f bf c6 e7 aa aa 89 e5 b9 e8 03 5d 5d 66 97 6c 8a bd 73 92 54 98 05 5a e5 ca 9a 9e a0 54 5c 32 bc 3b 02 a9 0a 25 84 5a ec 1c 99 73 5c d4 4a db de a1 05 67 b6 cc 18 ce 39 c5 b8 59 1c 71 c9 2d 27 22 36 94 08 cc 4e [TRUNCATED] Data Ascii: 829Xmo8_1-"nXa7m)(rdH-I1RE_^q4(yE?Vb2H3/@X_&R_p`DNeC03J/qzcPO@h>/wQxD&r+p(-Wg\#;op.hLG^nVhh6>^06Jk!\I_/kUX#gx]]flsTZT\2;%Zs\Jg9Yq-'"6N<4,0v)67ULXd2)-Zi4B~eAG%lh'b)g0xz`@t98H/`x OU:Jr$"Xp"!]
Oct 9, 2024 00:14:56.941641092 CEST	1236	IN	Data Raw: 51 da d7 dc 58 94 a8 87 e1 c5 bb 37 6d e6 bc 56 84 21 0b 8f a0 98 49 da 24 e7 b0 3b 0d 30 27 1a 5a 60 01 19 30 45 67 15 4a 9b 4c d1 5e 0a 74 8f bf 2d af d8 30 f4 32 31 11 a8 6d 18 8d db d3 dd c9 a4 f1 2b 61 dc d4 82 2c 21 83 30 17 8a de 86 5e 6e Data Ascii: QX7mV!I$;0'Z`0EgJL^t-021m+a,!0^nVtSEA:jqO5`5;mC-[uI=`j" ];bo&_$1>ZhZu[n;#9jW^8~.1\|PZ/`fP9B(B>
Oct 9, 2024 00:14:56.941652060 CEST	379	IN	Data Raw: 07 f3 06 4f 26 0a ed 25 4a 3b 65 5f b4 0c 7d fb b6 7e f5 97 57 b8 26 91 17 c3 dc 9f 63 59 9e 50 8d c4 62 1b a1 61 e8 d5 85 d1 98 25 5c 4a d4 ff ba 7e f3 da 4d ee de e6 9b f3 df 7f a2 f3 9f 5c 71 57 26 bb d7 67 e1 76 cf 0d 8f ec 59 f8 e6 9a 2e df Data Ascii: O&%J;e_}~W&cYPba%\J~M\qW&gvY.]\|{/W>$RIYIb4MK") }5lT.&_ok2}K*F$.P\!8#,Zx1\sCq?yI%%;>]+]Uuv^uoY

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:56.543427944 CEST	354	OUT	GET /feeds/posts/default?orderby=published&alt=json-in-script&callback=rpthumbnt HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:57.314124107 CEST	1236	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip ETag: W/"0ce06ee375d7b102579b755b4cac6552667bfb67f9b6494f7bcec0d572b35bc2" Date: Tue, 08 Oct 2024 22:14:57 GMT Content-Type: text/javascript; charset=UTF-8 Server: blogger-renderd Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1 Vary: Accept-Encoding Expires: Tue, 08 Oct 2024 22:14:58 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 Last-Modified: Fri, 20 Sep 2024 11:09:14 GMT Content-Length: 34632 X-Frame-Options: SAMEORIGIN Data Raw: 1f 8b 08 00 00 00 00 00 00 00 ed bd e9 72 1b 4b b2 26 f8 7f 9e 22 cf b9 b7 4c d2 10 09 61 5f 54 56 56 0d 12 5c 41 90 20 01 8a a2 5a 3d b4 00 32 81 4c e4 06 e6 42 10 6c eb b1 f3 0e 33 3f ee 98 dd fe 35 66 fd 20 f3 28 e7 49 c6 dd 23 22 17 10 24 41 89 12 a9 3a aa 85 22 73 89 8c f0 f0 f0 70 ff c2 97 f7 ef 95 56 6f 5f 19 31 db 1e b2 91 f5 bf f9 b3 d0 88 9c a1 1b be fd ef bf 5f eb 7e 60 7a ee ef 1f 7e 2f e6 0b bf e7 7e d7 dd 91 a7 99 ee 04 2e 9c 0d 76 d4 06 5c 1a eb ba f6 fb 87 ff fe fb 8d 63 bb 01 5c 37 c2 70 f6 e1 fd fb f9 7c 9e 9f 97 f3 9e 3f 79 5f 2a 14 aa ef 5b a1 e7 c0 d3 f4 d4 bf 7b 33 dd ed eb cc 1f 19 c9 0b ac 99 1f 79 ce 7b f5 7d 30 d3 47 ef f1 89 80 9e f0 83 e0 3d 7c fc 7d fc f2 d0 f6 26 13 dd 4f de 0c 46 86 ee b0 20 3f f1 bc 89 ad 53 2b e2 19 fc 74 23 7e 71 a2 7b d0 58 b6 8b fc 1a 75 53 dc 8e 9f d6 1e fc 02 1f 56 fc 74 68 a4 3a 34 8b 7c 9b 9a 0c 16 ae 66 8e 58 08 24 7c 0f 4f e8 4c 7b cf e9 68 12 c9 fe 3d 84 77 42 36 f9 20 ba 8b 0d e7 8a cd 66 93 2e a8 c5 42 a3 59 2e 37 2a a5 72 b3 5e 28 14 ab [TRUNCATED] Data Ascii: rK&"La_TVV\A Z=2LBl3?5f (I#"$A:"spVo_1_~`z~/~.v\c\7p\|?y_[{3y{}0G=\|}&OF ?S+t#~q{XuSVth:4\|fX$\|OL{h=wB6 f.BY.7r^(r=i,JRE-4RaPl~(4?+FQh\|(>=}^2_a~hMM&2?}%,/FW3mo[kt[E3n*Ze8M36 R3/(z$q[=R<#[aifsy2-<l{\|'M.1]?&\Li!(]fE`f9pgotYdZ+,#]q~%fosO)=9&fwf
Oct 9, 2024 00:14:57.314165115 CEST	1236	IN	Data Raw: b7 7d d3 60 59 36 ec b2 a9 0d 23 ea 01 99 4c 8b c1 5d e5 22 0a 80 fe 1a fc 76 ef 4b 7d 6f 1c c2 68 f5 ec f4 b8 4c f1 d9 98 d9 59 fa b3 45 e6 6f cd 5f 9a 0d c3 1c 46 7e 76 2d d9 d1 28 4a ff ed b0 79 a6 0d c7 d3 f4 0c 21 03 06 b2 58 09 96 3e 1d 08 Data Ascii: }`Y6#L]"vK}ohLYEo_F~v-(Jy!X>\Y[zm/VSKPf./4/znh<9r1sgl0C7oJ9Y"!s']8+&~LYvi}lF,n2HwIefH.=i*
Oct 9, 2024 00:14:57.314179897 CEST	1236	IN	Data Raw: ae ba d7 d5 1d 58 81 fd c8 40 a2 ae ba 0f 77 1c a6 c1 82 58 79 fb 08 8d 48 e5 1c cc 1b 1d e6 c9 0c 75 de e5 03 4f 5f d5 d9 3e 5a eb c0 c0 3a ee 08 26 2c 92 55 4d f6 c1 24 86 e9 bd f7 29 84 1b b2 e2 75 d7 74 5c d0 ee b3 e2 09 ec f7 c4 80 df 5b a5 Data Ascii: X@wXyHuO_>Z:&,UM$)ut\[F&A(ouw<PK\KG5#*>@Y0eaFS_&hf$YnVaGTSLw[j`:&hJH^KnKbgA6H[ew
Oct 9, 2024 00:14:57.314214945 CEST	1236	IN	Data Raw: 4b 69 ab 2b 97 39 bb e3 1f 80 80 d0 2c 0a b3 df 84 8b 4b 17 a6 59 1b 0f 4c fc ec d8 60 d9 de 22 dc 3e 97 84 ce dc e4 a7 a9 78 9c aa 0c 51 29 58 3e 1a 4a 3f 60 dd 59 7a 70 d7 ca fe ad 67 bf 7d e7 04 d1 bd 65 76 56 57 e1 87 8a 16 c8 01 65 6c 86 ee Data Ascii: Ki+9,KYL`">xQ)X>J?`Yzpg}evVWelRc[AbI16L w\5aXC,qiI,0\eB7ghm363..lY=}>&]pK4`< ,kQvHZX"0>o/W@
Oct 9, 2024 00:14:57.314228058 CEST	1236	IN	Data Raw: 54 e3 d7 1c 76 a3 fa 7a 00 af 05 ff 28 55 ef 25 2d 2c 06 16 85 06 08 47 64 4e 97 39 7a 1c 22 40 54 43 de 8d 40 89 92 17 ef 1f c7 cc f7 d0 66 81 91 54 ab 8d 46 b3 5a a9 34 9b a5 5a a9 d9 2c 54 9b 14 82 80 2a 8c 1d 37 04 aa 90 3e b3 17 ff 25 d5 06 Data Ascii: Tvz(U%-,GdN9z"@TC@fTFZ4Z,T*7>%>4tzR'vR!usbL4?\~XR4FMt6D4?[f"AQ)P`I O\|bs48SK;AO{z<JwC!$yDQWzY
Oct 9, 2024 00:14:57.314244986 CEST	1236	IN	Data Raw: 1b 16 d1 23 b3 d1 9a 31 ce c0 44 19 64 30 ee fd 86 e2 83 e6 1d 56 1a f4 4f a5 9f 24 37 30 ee 4b ae 14 d8 62 2d e2 49 78 29 af b4 45 5f d0 26 57 60 c3 d3 ed 1c ff dd c1 88 9e fc 0a 95 e3 ad 1f 5a 0b 10 9c 8b f1 d5 bb 55 9b 2b bf 36 f4 61 d3 7b 48 Data Ascii: #1Dd0VO$70Kb-Ix)E_&W`ZU+6a{Hf^+.\|>:X9g?ZXMnN-=$><ah1we-4.bK7XxSffi`"`C/?gSxd
Oct 9, 2024 00:14:57.314265013 CEST	1236	IN	Data Raw: 2c 5e 0e ae 7b b8 3f df 05 ae 5b 7f 2e 53 d3 f7 4d 90 ca 2f 90 ee 25 41 ba 4a a5 58 a9 d6 4b 4d 18 06 5c 2e 00 97 35 9e 02 d2 95 9f 00 d2 95 1b f9 46 b9 be 1e 48 d7 37 18 b0 36 bb 55 5a 18 a9 f1 41 e9 60 10 28 ba a8 23 1f 6d 52 bc 65 0f f5 fe b6 Data Ascii: ,^{?[.SM/%AJXKM\.5FH76UZA`(#mReV0P6ytx4:\|CnZEXz04jlLB5SOZ+<[V%OtTR;A?%*K@&/xCU1p15x.ra}H(wC0N~&Yv
Oct 9, 2024 00:14:57.314276934 CEST	1236	IN	Data Raw: 93 02 ab 17 0d d1 1e 0f 39 dd 14 7d 8b d7 74 2a f9 ea c3 ca f5 bf a2 c3 d7 11 73 d0 d8 e4 30 6e 6a 89 24 1c 8a b8 2e 49 1b 0a 08 86 fb 82 a8 16 c7 eb b9 89 cc 05 80 58 ef 43 93 3c c7 12 ad 3e 59 4a e2 43 56 44 b1 8e 81 4e d9 eb 97 31 63 98 e1 d0 Data Ascii: 9}ts0nj$.IXC<>YJCVDN1cs]b0e}@%Dq}cwqVC\f=Wwx]X)"M3"fIDHZ\|sk[dXZ,tL+38#8;pxqEg6.G,:
Oct 9, 2024 00:14:57.314290047 CEST	1236	IN	Data Raw: c4 74 35 92 f4 72 88 e9 c3 fd f9 9e 88 e9 5a b3 79 07 34 7d 1a d8 f5 0b 35 7d 49 d4 b4 54 ac 01 5b d5 1a 05 f4 eb a8 96 9a 95 62 fd 29 a8 e9 53 6a c1 94 8a f9 7a da e9 f3 c1 5a 30 58 d5 5c 69 69 b6 f9 41 44 d3 1d 7a 13 d3 e2 1c c5 33 63 a2 1e 45 Data Ascii: t5rZy4}5}IT[b)SjzZ0X\iiADz3cE1Gf`yTmGr&y<!pC3DLRJp.NpuWL^:ln}$P\])TDg JQWe0^.T41ULNV&QR6Ieq.Q{XG&
Oct 9, 2024 00:14:57.314304113 CEST	1236	IN	Data Raw: ca 4b 58 c1 fb 71 89 ea a4 a0 15 69 49 a9 e7 b8 c4 93 52 08 de e9 31 cb 04 a6 7b bc 98 34 a9 5f cb 9d 75 d8 14 f6 f6 4c 9f c5 c7 b8 37 a4 00 92 e9 a1 f8 a4 88 a3 a0 08 1f 93 4f ef 52 df 65 f9 16 0e 44 a7 7b 48 65 63 71 0f c2 5c a1 2c 0b fe 11 86 Data Ascii: KXqiIR1{4_uL7OReD{Hecq\,Lc \|qI@^Ff\^eMzh"#GLB5C7%yJqp_15g)'&q).Z5x)u-"n(D.;(U<u1vLCH
Oct 9, 2024 00:14:57.319210052 CEST	1236	IN	Data Raw: 50 a1 32 74 87 26 e7 e2 16 72 11 c7 af 44 d5 41 4a aa 31 c3 9c ac 4c 64 7d e7 49 19 92 55 8d 18 26 5f 1d 0f ca 6e e1 7e ce bd d4 53 82 43 84 2a 20 10 4c a2 29 8e 59 90 c2 0c 9b ce 53 19 6e 02 b5 92 75 28 fd f2 e9 ab fc ac 29 7e 85 70 3f 9e 05 05 Data Ascii: P2t&rDAJ1Ld}IU&_n~SC* L)YSnu()~p?}}bs#274]:M@P*s\htTqHr39\u#)8!?y\r9nsiDyGWxLvzxmOL0jLx#=Gyu
Oct 9, 2024 00:15:20.759608030 CEST	434	OUT	GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmBArnmXBGwSry7tG5cJTcB9I9KcruJZLwkNx2agH5M_XLe1HN4CxxCQBm045s5-kUAv_XN6fzlbzwWoY41UiHECiHx5Dg HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:15:21.062002897 CEST	295	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Date: Tue, 08 Oct 2024 22:15:20 GMT Expires: Tue, 08 Oct 2024 22:15:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 245 Server: GSE
Oct 9, 2024 00:15:34.867228031 CEST	339	OUT	GET /favicon.ico HTTP/1.1 Host: cerciterpanas.blogspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __dtsu=104017284257205FA39B4927E1410E19
Oct 9, 2024 00:15:35.546468973 CEST	487	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Expires: Tue, 08 Oct 2024 22:15:35 GMT Date: Tue, 08 Oct 2024 22:15:35 GMT Cache-Control: private, max-age=86400 Last-Modified: Fri, 20 Sep 2024 11:09:14 GMT ETag: W/"7069f0440e3756154e4d0d033aec738db5b28e4c12b718c0d104d4ce31960acf" Content-Encoding: gzip X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 412 Server: GSE

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 00:14:56.548526049 CEST	464	OUT	GET /widget/1254/0/2/2/100/bottom/transparent/006b9b/Tahoma%7C1.2em%7C0.04em%7C13px%7C100%25%7C1px%7C1px%7Cc0c0c0%7Ccenter%7Ctop%7Csquare%7C11,2,13,5,9,7,12,10,1 HTTP/1.1 Host: pingje.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cerciterpanas.blogspot.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 00:14:57.006342888 CEST	357	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Tue, 08 Oct 2024 22:14:56 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.domainmarket.com:443/buynow/pingje.com Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Oct 9, 2024 00:15:42.144870996 CEST	6	OUT	Data Raw: 00 Data Ascii: