Edit tour

Windows Analysis Report
https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html

Overview

General Information

Sample URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html
Analysis ID:	1431900
Infos:

Detection

TechSupportScam

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected TechSupportScam

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,9026972089338350667,7397339389741624143,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_61	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected TechSupportScam

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_61, type: DROPPED

Source: https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49764 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.js HTTP/1.1Host: d2fuc4clr7gvcn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fjpmanysexcomvistsxx.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714082523874 HTTP/1.1Host: track.gaug.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fjpmanysexcomvistsxx.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714082523874 HTTP/1.1Host: track.gaug.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d2fuc4clr7gvcn.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: track.gaug.es

Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_61.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://d2fuc4clr7gvcn.cloudfront.net/track.js
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_65.2.dr, chromecache_57.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_65.2.dr, chromecache_57.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_65.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_61.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_61.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Source: chromecache_61.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://track.gaug.es/track.gif

Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49764 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Yara detected TechSupportScam

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_61, type: DROPPED

Source: classification engine

Classification label: mal48.phis.win@16/52@14/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,9026972089338350667,7397339389741624143,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,9026972089338350667,7397339389741624143,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://track.gaug.es/track.gif	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
d2fuc4clr7gvcn.cloudfront.net	65.8.184.63	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.217.164	true	false	high
track.gaug.es	54.156.134.49	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://d2fuc4clr7gvcn.cloudfront.net/track.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css	false	high
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_60.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_65.2.dr	false		high
https://getbootstrap.com/)	chromecache_65.2.dr, chromecache_57.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_65.2.dr, chromecache_57.2.dr	false		high
https://track.gaug.es/track.gif	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_60.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
54.156.134.49	track.gaug.es	United States	14618	AMAZON-AESUS	false
65.8.184.63	d2fuc4clr7gvcn.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.217.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.161.134.69	unknown	United States	14618	AMAZON-AESUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431900
Start date and time:	2024-04-26 00:01:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/52@14/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.238, 74.125.141.84, 172.217.165.195, 34.104.35.123, 20.209.226.36, 142.250.217.234, 192.178.50.35, 40.68.123.157, 23.55.103.43, 23.55.103.106, 192.229.211.108, 13.95.31.18, 52.165.164.15
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Category:	downloaded
Size (bytes):	66624
Entropy (8bit):	7.996443365254666
Encrypted:	true
SSDEEP:	1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
MD5:	DB812D8A70A4E88E888744C1C9A27E89
SHA1:	638C652D623280A58144F93E7B552C66D1667A11
SHA-256:	FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
SHA-512:	17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
Preview:	wOF2.......@...................................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=\|'..0..T\|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	4.796257132249528
Encrypted:	false
SSDEEP:	192:bSIKTbzp5qU9XdY5S0+3FUrJ0lCeyDCZC5sSzqmSzq5xrhXQSzqmSzqSZ1KAM+Kq:mICvQS0Ft1i0xincAMnc5Mu
MD5:	266ED7D70D0F4DA16E451436E63BBED7
SHA1:	739CB196D6B375DE0B849ED84E66BE0D3592FA24
SHA-256:	F3D992A5242DB0A9501E8A54E3956227FB8B85C87D1347ADAD72C23B55E5D046
SHA-512:	67970A7FD76960C981A4C59A93B1F69FB9CB57013E5B0CB1F33F50E126B57F0151FA2B19959AA694B75FE2C24101C3D305A2C2CD34266A33BC69DC3DAB54028C
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/mystyle.css
Preview:	body{..font-family: 'Poppins', sans-serif !important;..}...main_bg{...position: fixed;.. left: 0px;.. top: -3px;.. width: 100%;.. cursor: pointer;..}...main_bg img{..background-repeat: no-repeat;.. background-position: center center;.. background-size: cover;.. width: 100%;...}...popup1{...position: absolute;...width: 900px;...display: none;.. height: 506px;.. top: 14%;.. left: 20%;.. border: 1px solid #aaa;.. background: #ffffff;.. -webkit-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. -moz-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);..}...popup1_header{...padding:5px 10px;..}...popup1 .logo-img img{..width: 26px;..}...popup1 .logo-name{... font-size: 18px;.. font-weight: 500;.. margin-left: 7px;..}...minize ul{list-style-type: none;}...minize ul li{float: left;display: inline-block;padding-left: 10px;padding-right: 10px;}...gray_line{...width: 100%;.. h

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	downloaded
Size (bytes):	84355
Entropy (8bit):	5.370892371249065
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr
MD5:	7F9FB969CE353C5D77707836391EB28D
SHA1:	62C4042E9EBC691A5372D653B424512A561D1670
SHA-256:	2051D61446D4DBFFB03727031022A08C84528AB44D203A7669C101E5FBDD5515
SHA-512:	7A027F63EDB63FD350F5A2325428745423AC7F27729FC78D9AA072FB2D829C91BE7E9448C57312EA36D63FCB552A9D23A7E34EE67F16B4C5009CD9C6A092A2E3
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators
Category:	downloaded
Size (bytes):	5486
Entropy (8bit):	5.734714090490578
Encrypted:	false
SSDEEP:	96:cNLTsiCQLE/GAWAMRO0Kij6gtidCw8hstV1cjNZfI8ujZ:yLThCQYGAWROfijLgltV1cNZfI8ujZ
MD5:	D84CAC48ADB243C6361F234CA934C2BD
SHA1:	A270AB6B03E28F1E41FF7D78579C5A779955E16F
SHA-256:	C9C276F971EFBEC91DABFD2D2E67B2637B6C1902BD923A76D0E1D5DE964F7CD6
SHA-512:	135B5B13BEA1B2A3CC943393754D53233A9411409BCF55971AF45D244C5A0CBFC087D77782E0FEB9D269FF942230EE12F4877BDEF360CDE1A3911D1B109FAF91
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html
Preview:	<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <meta name="description" content="author">.. <title>Officials_Windows..........</title>... <link rel="preconnect" href="https://fonts.gstatic.com/">... <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css" integrity="sha384-JcKb8q3iqJ61gNV9KGb8thSsNjpSL0n8PARn9HuZOnIxN0hoP+VmmDGMN5t9UJ0Z" crossorigin="anonymous">.. <link href="mystyle.css" rel="stylesheet">.. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css">...<link href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">........ <script type="text/javascript">.. var ph

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	7.973973264994348
Encrypted:	false
SSDEEP:	192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK
MD5:	AF4D371A10271DAFEB343F1EACE762BC
SHA1:	6D11D743BC3CFB169D70BC86450F18351DC1A905
SHA-256:	60BF0ABA6526436F3930C58C12047687FBB6BFF4DD180CCE4613458ED3439EA2
SHA-512:	98E1D4804A31F0EC40307BB02D7AF0E25E1A01F2D0F69676CD55F97F64A8D50ECFD5BE05525956C4A80BF0D98810BADBB08ACB2927CD78963BCDDE9F96E25BA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
Preview:	wOF2..............=....?.............................`..T.......6..6.$..h. ..Z....Z0.".8...W..b3..L...P..^.....ZEX..w.a.R...?..~......C`.3f.0.g.j..8"6B.Y.\|.h....%.Y%i.L2..L.'...Ahf.v.......Z.FRQ@B..E.....z.H...6....on..n....3....jz?.c....{J.Yd..T.......o.N../.6..%.@..;..'.N.?......9...S..Ok...."N.I..Zh..tY!._..t.......I....e..R.\|.......Y ...%.BZ..(..A9.T...y.....Ts_n:......o2I[...j....z.x. ....[.a.j^..j..IH....D....g...X\..B..s.a.`...,.l.)a-k@7Pq.,.......C!.\|...\|H.....7S..&...B.H..h..i...0....~..B..l..n.rE.......E..5.XL.d:.cuy..P.l...\|<....B.Qx..%@=..............[..\|P.;f.....z.o...o.Z......3N...}..yv.KOM`...w.V<.................7n..`...H.s...f.{:i....R. .a.&.X..1!....&Y..S..tLY..#.h...!.Fy....91;qi4.+2.?.kBj2;.+...@.MH..^..0&.8...SM.0V....%...@......lHO...]....Z......Je~...:.%..K#z..!A./.51.-..1.ta..8k...c]."."b.B..$+..,..#....x.H..Y...k.I.6....O.AW.....A.;..7.5E..t..*m.P..M.6l..g(0pk(....u.Y...&2.G..d.kE..2.8<.".Mo.....p\[S...Uh+A%.F.][P......r

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.093180351645959
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWObVDP7bR2p0bgLWSTnME:hax0rKRHkhzRH/Un2i2GprK5YWOxDDb8
MD5:	FF2C8BFBA75571474A683525DA159067
SHA1:	02748B3C4D32F612240084386586BE2276ECB07D
SHA-256:	2919E3C9D34B7E9AA5A686AB3765D2B7ED512012BD40417A837259056EAA809A
SHA-512:	1ABB8C519F1C695350DBFF7DF70167A4E41163BCDC09DC023115BED90226EA19B9D3D7323DB9729604709F73EE97DF17ECE0EBE4F6731C167630EFD102E933C0
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/favicon.ico
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 78030364-a01e-00d2-065c-9793fd000000</li><li>TimeStamp : 2024-04-25T22:02:07.3769364Z</li></ul></p></body></html>

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/kane.png
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5152), with no line terminators
Category:	downloaded
Size (bytes):	5152
Entropy (8bit):	5.207643243201636
Encrypted:	false
SSDEEP:	96:nn3J7DcXKKxWdYRJ8cEl7SH++uNWL4anUf50Y5jBnTjNj/3Jx1t:n3Jn7KxWWJOI++uNOTnUf5n5jlTd/tt
MD5:	25DBE1435EC57843C4AB2CECAFBD04A9
SHA1:	1DAED29EB389B328254978B4A6386C3CB38B0D9C
SHA-256:	EC536798BA63ED167F3620C2081486ECF9254E3CF97AEF8052CFC12B2D1BFB84
SHA-512:	97DF01BA14C4234DDF060A86AFC7255664D6C475DAF957D936833BFCA5BFA02048FBA68B65E05E43082105DC693D11043150BF24FED11DC25FF62419245BE3F7
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/haruto.js
Preview:	(function(_0x4c076a,_0x27deb0){var _0x3a142c=_0x4237,_0x2946ae=_0x4c076a();while(!![]){try{var _0x33d82b=-parseInt(_0x3a142c(0xc9))/0x1+parseInt(_0x3a142c(0xe8))/0x2+parseInt(_0x3a142c(0xd1))/0x3(-parseInt(_0x3a142c(0xd4))/0x4)+-parseInt(_0x3a142c(0xde))/0x5+-parseInt(_0x3a142c(0xca))/0x6(parseInt(_0x3a142c(0xe0))/0x7)+parseInt(_0x3a142c(0xcd))/0x8+-parseInt(_0x3a142c(0xe3))/0x9*(-parseInt(_0x3a142c(0xc8))/0xa);if(_0x33d82b===_0x27deb0)break;else _0x2946ae['push'](_0x2946ae['shift']());}catch(_0x2dbbe0){_0x2946ae['push'](_0x2946ae['shift']());}}}(_0x3453,0xbdd81));function _0x3bbf(_0x657311,_0x1d6100){var _0x332eb8=_0x5933();return _0x3bbf=function(_0x1b171c,_0x1e94ad){_0x1b171c=_0x1b171c-0xbf;var _0x108772=_0x332eb8[_0x1b171c];return _0x108772;},_0x3bbf(_0x657311,_0x1d6100);}var _0x281415=_0x3bbf;function _0x4237(_0x532717,_0x3b9438){var _0x34534a=_0x3453();return _0x4237=function(_0x4237a5,_0x5713f4){_0x4237a5=_0x4237a5-0xc3;var _0x219fac=_0x34534a[_0x4237a5];return _0x219fac;},_0x

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	3.971495148462712
Encrypted:	false
SSDEEP:	6:C/sULnipM878mgO9lQe8tbwN9zIi28hCRoPTZVhodQkq+dTe8Hod0Cw:S1ipM8YuQe8tuzo8hSoRoNU8HoE
MD5:	8D78510A23D26CA8456663A060C1AB7C
SHA1:	00F1AC87D12DE82D8E4978A3B0637EE8097D4EAA
SHA-256:	AC9D36E334AA53D47A22042AE131D2D9D43B4DE48B63DF6B6DA8247B9BAD0AE2
SHA-512:	C61E3A2E4E8C9762AABFD6B999D769F5E14EADF286EB8E810E413B5A00AC9380B340B65E23C6F81985C71B0438AB363F25CDAC7376CEC5CFE796753D91F46CD6
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/ado.js
Preview:	.. $(document).ready(function() {.. var audioElement = document.createElement('audio');.. audioElement.setAttribute('src', 'Safeviews.mp3');.. .. audioElement.addEventListener('ended', function() {.. this.play();.. }, false);.. .. .. $('#map').click(function() {.. audioElement.play();.. .. });.. .. });

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/rdwbs.png
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	dropped
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14226
Entropy (8bit):	5.362443636977356
Encrypted:	false
SSDEEP:	192:x3pao3pbA5KoA5cn5yon50ORoOZN5BoN5BE5hoE5hr5Yor5SC5MoC5Ox5wox5bpu:x3t3RIf5WpSaFR+rE4PFzpy
MD5:	DCE36A48BCF330832152E582D29373B8
SHA1:	CD44276B28CF6BE734F61E45644ED6EA0AD08E6E
SHA-256:	3F6E8EFB65DFF0486271D787D60BE7D84387C203BEBD36159794E6E2C28C31F3
SHA-512:	9AEB715E29544546108257435DB1163BAE92D0E0FDD52B46EF1136D48E7A75352B82056EF6CFA35E04B64F8F0788174CB2B75B4493AF3D3FF87B055327E0F295
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.108957560099808
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWO8qR2p0bk2E:hax0rKRHkhzRH/Un2i2GprK5YWObhk3
MD5:	63BA42DA7CAC13E1EB0EF8D8C7A3FBD1
SHA1:	92C4B88366186D1E7EAB48AE632537B4EA90F04B
SHA-256:	2220284B0337BC285A8ED364CCD62EA0BAA80B266D00A2386F7798C66EDFD06E
SHA-512:	79E08C4DE0E55C38B4DC7871D47B62423B07C16C9CD4EA87B0C5E2BC4BCCD08E0E3E070B50B041BB0080F6636A016E22B6B11ACCC4405C17CE4744A9A109AE17
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/yaketsuku.mp3
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 135dc715-901e-00ab-315c-976fd9000000</li><li>TimeStamp : 2024-04-25T22:02:04.4588772Z</li></ul></p></body></html>

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	downloaded
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/fuji.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4666), with no line terminators
Category:	downloaded
Size (bytes):	4666
Entropy (8bit):	5.302868549458744
Encrypted:	false
SSDEEP:	96:y4i2cLKIzsS58MYztKheFSd6ZAnKl9k8hhJVSafdIzaOP5wtZ91yfqQf4tlvKHS5:C2cLPzsS58MYztKhh6Zt9hP2zRP5wtZZ
MD5:	876B05F6044B21D9E1A1E2C53BA847C3
SHA1:	8938C32F281207D167DE1F51EA6CF60C33CC1B4C
SHA-256:	F5342B436E889CA2184C1B322FE2A631412D85B445DECB8F1B6F020329D7178D
SHA-512:	FEA8AD9FA842D935A94BFB34E9B0DFC40A7543A32C4B214937FD1AC38AE29420C5943E3D0E99613ACC10A39A0BECF32EE50B67071C15910A40413808698F0967
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/itsuki.js
Preview:	var _0x1143c3=_0x44f8;function _0x44f8(_0x10494b,_0x4c1d23){var _0x482497=_0x4824();return _0x44f8=function(_0x44f80c,_0x113a1b){_0x44f80c=_0x44f80c-0xe4;var _0x42e1c0=_0x482497[_0x44f80c];return _0x42e1c0;},_0x44f8(_0x10494b,_0x4c1d23);}(function(_0x4304c4,_0x12ca27){var _0x59f05d=_0x44f8,_0x4bce22=_0x4304c4();while(!![]){try{var _0x2ca6f6=parseInt(_0x59f05d(0xf9))/0x1+parseInt(_0x59f05d(0x105))/0x2+-parseInt(_0x59f05d(0x103))/0x3(-parseInt(_0x59f05d(0x100))/0x4)+parseInt(_0x59f05d(0xfc))/0x5+-parseInt(_0x59f05d(0xf1))/0x6(-parseInt(_0x59f05d(0x104))/0x7)+parseInt(_0x59f05d(0x108))/0x8(parseInt(_0x59f05d(0xf7))/0x9)+parseInt(_0x59f05d(0x10b))/0xa(-parseInt(_0x59f05d(0xf4))/0xb);if(_0x2ca6f6===_0x12ca27)break;else _0x4bce22['push'](_0x4bce22['shift']());}catch(_0x4c259d){_0x4bce22['push'](_0x4bce22['shift']());}}}(_0x4824,0x4f6fe));function _0x6650(){var _0x2e771b=_0x44f8,_0x56d10a=[_0x2e771b(0x10e),_0x2e771b(0xef),'42chsVrk',_0x2e771b(0xe7),_0x2e771b(0xeb),'9887501weJLZl','40bkqHT

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.053343035750733
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWO5GzuIAvfR2p0b3E:hax0rKRHkhzRH/Un2i2GprK5YWO5GuIV
MD5:	288BF7FFBAC5853D6A639E611E2174B8
SHA1:	AE0D0F299B69694100D4B9B02E59EAD52D3454A1
SHA-256:	48710520A1D4E6323A6C75F5832EC1907958FA6F644AE8B14D216B1FFB2533E9
SHA-512:	403A2A4E9DE038206C2BB985583FA6DCEAA079DC4A5AC62F7F3BA27FF0A028C4B58F47D68612A0A1F47BD53B904DD3FB38797FEABA7A7DDEC1CEB0AAF1946791
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/takashi.mp3
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 7d5803e3-001e-00e4-265c-971e8d000000</li><li>TimeStamp : 2024-04-25T22:02:04.4526354Z</li></ul></p></body></html>

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3829), with no line terminators
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	5.148341057398745
Encrypted:	false
SSDEEP:	48:kiVcqIyGggolrX2UQe0DzGbExQgpxJwOeOBuHgwLHACBhASVUF/IF/NUF/fF/fFD:Q+2wytZCvLzn9OYBMtEux
MD5:	B7E42972220B534E2E32B38C3876572D
SHA1:	76B4384936878AE8656F3DF843BEB7A3D88FD86B
SHA-256:	DF2698E6CF74ED890AFA92DA10051F880DF2CE0B3257B73C5D9AE2F6BEA82D3C
SHA-512:	FDE037E2E1B4FAF726016C70A89E07F268E46A457A5636813AA8D032CFF4528690BB9CF24A7A4EAE37134F65F632987BB5C94998DFFC0D06BDE181A8968B9B0F
Malicious:	false
Reputation:	low
URL:	https://d2fuc4clr7gvcn.cloudfront.net/track.js
Preview:	var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365,j=d*10;if(!this.getCookie('_gauges_unique_hour')){this.setCookie('_gauges_unique_hour',1,b)}if(!this.getCookie('_gauges_unique_day')){this.setCookie('_gauges_unique_day',1,f)}if(!this.getCookie('_gauges_unique_month')){this.setCookie('_gauges_unique_month',1,c)}if(!this.getCookie('_gauges_unique_year')){this.setCookie('_gauges_unique_year',1,d)}this.setCookie('_gauges_unique',1,d)}},push:function(a){var b=a.shift();if(b=='track'){_gauges.track()}},url:function(){var a,b,f,c=this.$('gauges-tracker');if(c){b=c.getAttribute('data-site-id');f=c.getAttribute('data-track-path');if(!f){f=c.src.replace('/track.js','/track.gif')}a=String(f);a+="?h[site_id]="+b;a+="&h[resource]="+this.resource();a+="&h[referrer]="+this.referrer();a+="&h[title]=

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	114283
Entropy (8bit):	7.254845925020668
Encrypted:	false
SSDEEP:	1536:Bym/tGBkwZi95piznb3+XazaCsMZZ5N7M43wZZMyy2l9V7tBlPFKuanNA:BvAkw2QbusaCjxNoEoSyy2lT7tUu0NA
MD5:	E9BCD8FA1AC0DA5231A30C9F2952682B
SHA1:	6082AFF7E3627F6BEA6E44C41E123A3A512355DE
SHA-256:	89CA019A76F84336D2903B88D7F45EFF070B359A35FF3C06DA3668212F76FFA1
SHA-512:	676085969C4F7167BD1CDAD74EC9EB2DBC0DF89D72859134C724EA0C63924148F99A1CD7BE567847B0BEF81C6EADCE13643C8E1284A7ED19E26FD4FD6FBC77E9
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/Safeviews.mp3:2f7589387b5b45:0
Preview:	ID3......#TSSE.......Lavf58.29.100...............................................Info.......u..H\|............."$&),.1468;>@CEGJMPRUWY\_adgiknqsvx{}......................................................Lavc58.54............$.@......H\|........................................................................................................................................................................................................................................d...-N-.`5.... .......@..4.....%b5a..#G.u?...........Dp...iH`....0./.....yR.`..N7...B.....i....f..=...H..18.Hh..'..-hY.4......C...Q,$...%..Y.=.C......>...JG.....0h7.......Y..'..@...'.. i!.Cx.H<X...!......9.9).qs...@.9t.....: pad..!...4......`H....Q..bf1.+8........x.\:.R....^.i.....\|...0..,..H......39N.A.g8...r.H....H_v;..2.z...`,.5-`FU...)....\|H0...&.....H.q.}......%.C..8m..=FV2.........dT...E..Y..... .............4....%..y.B.w.yZ.=......<...L.p..MT..L.....j*h..`.P.!.....$T...x3.$......7...Y....>v.l.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	dropped
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	downloaded
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
URL:	https://jpmanysexcomvistsxx.z13.web.core.windows.net/kyoto.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:01:51.880665064 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 00:01:52.599428892 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 00:02:01.144922018 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.145005941 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.145090103 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.145544052 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.145569086 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.146008015 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.146054983 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.146116018 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.146342993 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.146358013 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.413755894 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.414024115 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.414052010 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.415697098 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.415776968 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.416830063 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.416914940 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.416990042 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.417000055 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.421291113 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.421513081 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.421534061 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.423126936 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.423221111 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.424092054 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.424207926 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.424241066 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.460057974 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.468151093 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.476116896 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.476131916 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.492269993 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 00:02:01.524434090 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.709634066 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.709763050 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.709861994 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.709935904 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.709964991 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710015059 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.710037947 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710154057 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710207939 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.710220098 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710506916 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710556984 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.710567951 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710700989 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710752010 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.710762978 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710872889 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.710922003 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.710931063 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711066961 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711118937 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.711128950 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711643934 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711697102 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.711707115 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711813927 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.711865902 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.711875916 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.712234020 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.712287903 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.712300062 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.712706089 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.712759972 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.712975979 CEST	49738	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.713001966 CEST	443	49738	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.721692085 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.721750975 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.721790075 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.721800089 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.721822977 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.721877098 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.721884012 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722065926 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722110987 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.722116947 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722254992 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722299099 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.722305059 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722425938 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722471952 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.722477913 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722595930 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722641945 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.722649097 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722765923 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.722810984 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.722816944 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723014116 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723061085 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.723067045 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723664045 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723717928 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.723723888 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723871946 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.723918915 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.723925114 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.724539042 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.724596024 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.724601984 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.724706888 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.724752903 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.724757910 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725298882 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725354910 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.725362062 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725465059 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725507021 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.725512981 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725616932 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.725660086 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.725667000 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.726340055 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.726394892 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.726401091 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.726489067 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.726536036 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.726541996 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727046013 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727094889 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.727101088 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727195978 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727235079 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.727240086 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727802038 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.727844954 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.727850914 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.728739977 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.728806973 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.728812933 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.769773006 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.848479986 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.848773003 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.848906040 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.848906994 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.848937988 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.849263906 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.849325895 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.849334955 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.849379063 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.850150108 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.850224018 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.850519896 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.850703001 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.850709915 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.850732088 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.850754976 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.851326942 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.851494074 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.851500988 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.851552010 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.851629972 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.851687908 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.852405071 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.852467060 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.852514982 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.852571011 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.853338957 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.853404045 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.854082108 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.854147911 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.854176998 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.854239941 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.855079889 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.855215073 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.855880022 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.855940104 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.856086969 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.856152058 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.856734037 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.856786013 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.974215984 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.974296093 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.974529028 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.974589109 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.974905014 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.974960089 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.975967884 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976027966 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.976286888 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976335049 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.976385117 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976433992 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.976499081 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976548910 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.976666927 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976707935 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.976762056 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976950884 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.976995945 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.977159977 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.977185965 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:01.977229118 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:01.977349043 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.039112091 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.039127111 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.039182901 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.044627905 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.044644117 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.164123058 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.164175034 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.164247036 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.164917946 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.164932013 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.300767899 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.301701069 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.301734924 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.302218914 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.305147886 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.305238008 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.305627108 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.348165035 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.424484968 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.424899101 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.424923897 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.426333904 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.426393032 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.428613901 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.428684950 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.430526018 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.430532932 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.472774029 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.610580921 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610650063 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610688925 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.610699892 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610748053 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610780954 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.610788107 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610843897 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610876083 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610878944 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.610889912 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.610922098 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.611526966 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.611740112 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.611777067 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.611785889 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612045050 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612081051 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.612088919 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612165928 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612200022 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.612206936 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612340927 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612374067 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.612380981 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.612961054 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613013983 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.613020897 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613164902 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613199949 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.613207102 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613838911 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613873959 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.613881111 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613953114 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.613990068 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.613996983 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614660025 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614698887 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.614706039 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614825964 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614860058 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.614876032 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614957094 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.614990950 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.614998102 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.615705013 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.615744114 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.615751028 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.615827084 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.615864038 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.615870953 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620496035 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620553017 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620557070 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.620565891 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620600939 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.620609045 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620651960 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620682955 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.620690107 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620743990 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620784998 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.620794058 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620897055 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.620935917 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.621615887 CEST	49748	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:02.621628046 CEST	443	49748	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:02.716506958 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.716556072 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.716604948 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.716628075 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.716679096 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.716716051 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.716722965 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.716870070 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717103004 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717133045 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.717139006 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717206001 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717324972 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.717331886 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717371941 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.717614889 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717716932 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.717763901 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.717771053 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718450069 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718499899 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.718506098 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718605042 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718638897 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718646049 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.718652010 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.718687057 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.718744993 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.719400883 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.719481945 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.719487906 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.719621897 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.719660997 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.719666004 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.720242977 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.720284939 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.720292091 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.720298052 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.720423937 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.720447063 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.720453024 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721148968 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.721398115 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721544027 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721616030 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721648932 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.721654892 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721765995 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.721771955 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.721997023 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722064018 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722079039 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.722085953 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722115993 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.722124100 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722862959 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722899914 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722903967 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.722909927 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.722944975 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.722996950 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.723934889 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.723992109 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.723998070 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.770801067 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.841120005 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.841171980 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.841195107 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.841233015 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.842082024 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.842154980 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.842363119 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.842406034 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.842809916 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.842859030 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.843111992 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.843164921 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.844113111 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.844157934 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.844165087 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.844182014 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:02.844216108 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.844382048 CEST	49751	443	192.168.2.4	104.17.25.14
Apr 26, 2024 00:02:02.844393969 CEST	443	49751	104.17.25.14	192.168.2.4
Apr 26, 2024 00:02:03.555885077 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.555936098 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:03.556135893 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.556710005 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.556725025 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:03.887563944 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:03.887608051 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:03.887892008 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:03.888160944 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:03.888176918 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:03.954914093 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:03.962809086 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.962840080 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:03.964514017 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:03.964634895 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.965821981 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:03.965915918 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:04.008120060 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:04.008150101 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:04.050133944 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:04.120351076 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.120435953 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.120517969 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.127146006 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.127185106 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.147871017 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.148590088 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.148612976 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.149760008 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.149823904 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.152507067 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.152617931 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.152880907 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.152888060 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.194303036 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.394032001 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.394119978 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.399925947 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.399946928 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.400389910 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.423981905 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.424770117 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.424832106 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.424856901 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.424899101 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.426364899 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.426424026 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.426506996 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.436700106 CEST	49758	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:02:04.436717987 CEST	443	49758	65.8.184.63	192.168.2.4
Apr 26, 2024 00:02:04.441541910 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.498656988 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.540154934 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.591938019 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:04.591981888 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:04.592037916 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:04.592261076 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:04.592283010 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:04.672930002 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.673015118 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.673104048 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.673151016 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.673182964 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.673182964 CEST	49759	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.673193932 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.673202991 CEST	443	49759	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.699596882 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.699634075 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.699702978 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.699950933 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.699966908 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.966540098 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.966609001 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.968380928 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:04.968390942 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.968717098 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:04.969753027 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:05.012130022 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:05.068938017 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.074794054 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.074821949 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.076416016 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.076504946 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.083651066 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.083765984 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.084126949 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.084136009 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.131289005 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.216342926 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:05.216512918 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:05.216566086 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:05.218755960 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:05.218775034 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:05.218903065 CEST	49764	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:02:05.218909025 CEST	443	49764	23.202.106.101	192.168.2.4
Apr 26, 2024 00:02:05.441293001 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.441767931 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.441832066 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.444942951 CEST	49763	443	192.168.2.4	54.156.134.49
Apr 26, 2024 00:02:05.444963932 CEST	443	49763	54.156.134.49	192.168.2.4
Apr 26, 2024 00:02:05.769056082 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:05.769125938 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:05.769212961 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:05.769583941 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:05.769613028 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:05.923852921 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:05.923913002 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:05.923974037 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:05.924325943 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:05.924345016 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.029793978 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.035857916 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.035890102 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.039732933 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.039813042 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.053744078 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.053950071 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.053960085 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.096127033 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.106650114 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.106687069 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.148123026 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.340852976 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.340910912 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.340953112 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.340991974 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341026068 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.341031075 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341099977 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341137886 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.341162920 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341209888 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341219902 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.341236115 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.341264009 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.342431068 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342499018 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.342514038 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342613935 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342674971 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.342685938 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342758894 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342834949 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.342924118 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.342936039 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343260050 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343323946 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.343334913 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343384981 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.343522072 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343750954 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343816042 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.343821049 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343848944 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.343904972 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.344330072 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.344512939 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.344561100 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.344573021 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.344660044 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.344856024 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.344867945 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.345402956 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.345511913 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.345573902 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.345586061 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.345731020 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.345742941 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.346626043 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.346740961 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.346802950 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.346815109 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.346911907 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.346963882 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.346976042 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.347023010 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.347033978 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.347424984 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.347490072 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.347501993 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.347632885 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.347696066 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.347707987 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.348118067 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.348195076 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.348213911 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.388190985 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.390146017 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.390659094 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.390691996 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.391917944 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.391994953 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.392591953 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.392678022 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.392755985 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.433974028 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.434003115 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.467120886 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.467212915 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.467233896 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.467272043 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.467324972 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.467338085 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.467367887 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.467421055 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.467614889 CEST	49768	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:02:06.467647076 CEST	443	49768	104.18.10.207	192.168.2.4
Apr 26, 2024 00:02:06.480015039 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.554550886 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.554635048 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:06.554719925 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.556036949 CEST	49769	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:02:06.556062937 CEST	443	49769	54.161.134.69	192.168.2.4
Apr 26, 2024 00:02:13.934401035 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:13.934557915 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:02:13.934798956 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:15.464261055 CEST	49754	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:02:15.464287996 CEST	443	49754	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.348131895 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:03.348165035 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.348282099 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:03.351969957 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:03.351984978 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.686127901 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.686393976 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:03.686403990 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.686861038 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.687210083 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:03.687289953 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:03.740948915 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:11.537939072 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:03:11.538098097 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:03:11.662415028 CEST	80	49723	72.21.81.240	192.168.2.4
Apr 26, 2024 00:03:11.662457943 CEST	80	49724	72.21.81.240	192.168.2.4
Apr 26, 2024 00:03:11.662477970 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:03:11.662513971 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:03:13.670610905 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:13.670800924 CEST	443	49780	142.250.217.164	192.168.2.4
Apr 26, 2024 00:03:13.670871019 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:15.104680061 CEST	49780	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:03:15.104701996 CEST	443	49780	142.250.217.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:01:58.930388927 CEST	53	62382	1.1.1.1	192.168.2.4
Apr 26, 2024 00:01:58.930969000 CEST	53	65078	1.1.1.1	192.168.2.4
Apr 26, 2024 00:01:59.892730951 CEST	53	51709	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.017451048 CEST	64253	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:01.017600060 CEST	60802	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:01.018023968 CEST	63613	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:01.018162012 CEST	64874	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:01.143796921 CEST	53	63613	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.144136906 CEST	53	64253	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.144181013 CEST	53	64874	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.144948959 CEST	53	64759	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.145297050 CEST	53	60802	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:01.151201963 CEST	53	62511	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:02.037369013 CEST	49445	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:02.037967920 CEST	62624	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:02.162822008 CEST	53	49445	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:02.163252115 CEST	53	62624	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:03.372555017 CEST	61738	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:03.372885942 CEST	58068	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:03.497431040 CEST	53	61738	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:03.498277903 CEST	53	58068	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:03.739439964 CEST	65474	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:03.740120888 CEST	58862	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:03.867585897 CEST	53	65474	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:03.883255005 CEST	53	58862	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:04.461467981 CEST	54005	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:04.461760044 CEST	55443	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:04.589735985 CEST	53	55443	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:04.591506004 CEST	53	54005	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:05.793900013 CEST	62014	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:05.794369936 CEST	64685	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:02:05.922275066 CEST	53	62014	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:05.922359943 CEST	53	64685	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:17.142724037 CEST	53	63496	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:23.171152115 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 00:02:36.345330954 CEST	53	52442	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:58.661397934 CEST	53	64117	1.1.1.1	192.168.2.4
Apr 26, 2024 00:02:58.677128077 CEST	53	61201	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 00:02:02.830666065 CEST	192.168.2.4	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 00:02:01.017451048 CEST	192.168.2.4	1.1.1.1	0xe875	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.017600060 CEST	192.168.2.4	1.1.1.1	0x5146	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 00:02:01.018023968 CEST	192.168.2.4	1.1.1.1	0x8962	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.018162012 CEST	192.168.2.4	1.1.1.1	0xd649	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 00:02:02.037369013 CEST	192.168.2.4	1.1.1.1	0x156d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:02.037967920 CEST	192.168.2.4	1.1.1.1	0x45e9	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 00:02:03.372555017 CEST	192.168.2.4	1.1.1.1	0x670e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.372885942 CEST	192.168.2.4	1.1.1.1	0xcded	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 00:02:03.739439964 CEST	192.168.2.4	1.1.1.1	0x5e50	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.740120888 CEST	192.168.2.4	1.1.1.1	0x9ab9	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	65	IN (0x0001)	false
Apr 26, 2024 00:02:04.461467981 CEST	192.168.2.4	1.1.1.1	0xdb92	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:04.461760044 CEST	192.168.2.4	1.1.1.1	0x3e0	Standard query (0)	track.gaug.es	65	IN (0x0001)	false
Apr 26, 2024 00:02:05.793900013 CEST	192.168.2.4	1.1.1.1	0x8389	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:05.794369936 CEST	192.168.2.4	1.1.1.1	0x445a	Standard query (0)	track.gaug.es	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 00:02:01.143796921 CEST	1.1.1.1	192.168.2.4	0x8962	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.143796921 CEST	1.1.1.1	192.168.2.4	0x8962	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.144136906 CEST	1.1.1.1	192.168.2.4	0xe875	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.144136906 CEST	1.1.1.1	192.168.2.4	0xe875	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:01.144181013 CEST	1.1.1.1	192.168.2.4	0xd649	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 00:02:01.145297050 CEST	1.1.1.1	192.168.2.4	0x5146	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 00:02:02.162822008 CEST	1.1.1.1	192.168.2.4	0x156d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:02.162822008 CEST	1.1.1.1	192.168.2.4	0x156d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:02.163252115 CEST	1.1.1.1	192.168.2.4	0x45e9	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 00:02:03.497431040 CEST	1.1.1.1	192.168.2.4	0x670e	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.498277903 CEST	1.1.1.1	192.168.2.4	0xcded	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 00:02:03.867585897 CEST	1.1.1.1	192.168.2.4	0x5e50	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.63	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.867585897 CEST	1.1.1.1	192.168.2.4	0x5e50	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.867585897 CEST	1.1.1.1	192.168.2.4	0x5e50	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:03.867585897 CEST	1.1.1.1	192.168.2.4	0x5e50	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.131	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:04.591506004 CEST	1.1.1.1	192.168.2.4	0xdb92	No error (0)	track.gaug.es		54.156.134.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:04.591506004 CEST	1.1.1.1	192.168.2.4	0xdb92	No error (0)	track.gaug.es		54.197.93.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:04.591506004 CEST	1.1.1.1	192.168.2.4	0xdb92	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:05.922275066 CEST	1.1.1.1	192.168.2.4	0x8389	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:05.922275066 CEST	1.1.1.1	192.168.2.4	0x8389	No error (0)	track.gaug.es		54.197.93.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:05.922275066 CEST	1.1.1.1	192.168.2.4	0x8389	No error (0)	track.gaug.es		54.156.134.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:16.308585882 CEST	1.1.1.1	192.168.2.4	0x1476	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:02:16.308585882 CEST	1.1.1.1	192.168.2.4	0x1476	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:29.865128040 CEST	1.1.1.1	192.168.2.4	0x9849	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:02:29.865128040 CEST	1.1.1.1	192.168.2.4	0x9849	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:02:51.429812908 CEST	1.1.1.1	192.168.2.4	0x119c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:02:51.429812908 CEST	1.1.1.1	192.168.2.4	0x119c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:03:11.634850025 CEST	1.1.1.1	192.168.2.4	0xf765	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:03:11.634850025 CEST	1.1.1.1	192.168.2.4	0xf765	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

d2fuc4clr7gvcn.cloudfront.net

track.gaug.es

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	104.18.10.207	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:01 UTC	664	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:01 UTC	919	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:02:01 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 03/18/2024 12:53:25 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 819222e6cd0b27637362e69af7e48559 CDN-Cache: HIT CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a19d703c3e4c04-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:02:01 UTC	450	IN	Data Raw: 37 63 31 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c1c/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c Data Ascii: -secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-appl
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d Data Ascii: decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{m
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d Data Ascii: input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit]
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 Data Ascii: font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e Data Ascii: :inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:n
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c Data Ascii: md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 Data Ascii: %}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-wi
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 Data Ascii: row:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 Data Ascii: er-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;ord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	104.18.10.207	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:01 UTC	608	OUT	GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:01 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:02:01 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4fbd15cb6047af93373f4f895639c8bf" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-CachedAt: 03/18/2024 12:53:39 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 67f0b32c730556a53f71824bda46c9d9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 725975 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a19d7038e067b7-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:02:01 UTC	438	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e Data Ascii: -webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:n
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 66 69 Data Ascii: otate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{fi
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 74 3a Data Ascii: :100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-heart:
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 Data Ascii: }.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}.f
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: nt:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\f0
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: efore,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{content
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 7d 2e Data Ascii: ontent:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"}.
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: t:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content:"
2024-04-25 22:02:01 UTC	1369	IN	Data Raw: 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 Data Ascii: ard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f0f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	104.18.10.207	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:02 UTC	648	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:02 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:02:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 03/18/2024 12:53:26 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 14c2299935c0a4cde55178cad210f89f CDN-Cache: HIT CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a19d75cade74c0-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:02:02 UTC	436	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0f/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 Data Ascii: "],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writab
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: [0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){r
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: pe:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){v
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e Data Ascii: .bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 Data Ascii: lass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))retu
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 Data Ascii: ean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTi
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 Data Ascii: config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carous
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e Data Ascii: nt.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 Data Ascii: items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49751	104.17.25.14	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:02 UTC	584	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:02 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:02:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 718516 Expires: Tue, 15 Apr 2025 22:02:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lUtHDu1SUqNmJHjUhfSFVOudPV4sWmrv0%2FH3CM1TawC9wxZtNC8TFmvZwhtKDhPZVggc3CSZi84rCOFgC0V3fYA8rnIxRDqK7H8RGekzFeSupOl5NbOyMvZyXWUSt0negZfVZdEY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a19d7689010349-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:02:02 UTC	414	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 7bf6/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2c 6a 3d 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 7b 7d 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 22 32 2e 31 2e 33 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a Data Ascii: toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a){r
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: b\|\|[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:function(
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 23 22 29 2c 4f 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d Data Ascii: rn-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"("+M+")(?:"+L+"([*^$\|!~]?=
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 62 29 7b 48 3d 7b 61 70 70 6c 79 3a 45 2e Data Ascii: =function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},eb=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fb){H={apply:E.
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 28 61 2c 62 Data Ascii: n a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ib(a){return a[u]=!0,a}function jb(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function kb(a,b
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 24 2e 74 65 73 74 28 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 64 3d 75 Data Ascii: tAttribute("className")}),c.getElementsByTagName=jb(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=jb(function(a){return o.appendChild(a).id=u
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 Data Ascii: "+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length\|\|q.pus
2024-04-25 22:02:02 UTC	1369	IN	Data Raw: 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 67 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 67 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 5b 61 5d Data Ascii: Position(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g\|\|a.ownerDocument===v&&t(v,a)?-1:b===g\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,h=[a]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49758	65.8.184.63	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:04 UTC	565	OUT	GET /track.js HTTP/1.1 Host: d2fuc4clr7gvcn.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:04 UTC	486	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3829 Connection: close Accept-Ranges: bytes Date: Thu, 25 Apr 2024 14:54:42 GMT ETag: "65f04ae5-ef5" Last-Modified: Tue, 12 Mar 2024 12:30:29 GMT Server: nginx/1.10.3 (Ubuntu) Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9df0661694135666b2bd52748cde9006.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: hu2omEVvz5xmeF6G8o3Y0nMzvPXquiNHvZYEv-FVQER4FlmxyB2-4Q== Age: 25642
2024-04-25 22:02:04 UTC	3829	IN	Data Raw: 76 61 72 20 5f 67 61 75 67 65 73 3d 5f 67 61 75 67 65 73 7c 7c 5b 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 28 5f 67 61 75 67 65 73 5b 27 73 6c 69 63 65 27 5d 29 3f 5f 67 61 75 67 65 73 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 3b 5f 67 61 75 67 65 73 3d 7b 74 72 61 63 6b 5f 72 65 66 65 72 72 65 72 3a 74 72 75 65 2c 69 6d 61 67 65 3a 6e 65 77 20 49 6d 61 67 65 28 29 2c 74 72 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 27 5f 67 61 75 67 65 73 5f 63 6f 6f 6b 69 65 27 2c 31 2c 31 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 75 72 6c 28 29 3b 69 66 28 61 29 7b 74 68 69 73 2e 69 6d 61 67 65 2e 73 72 63 3d 61 3b 76 61 72 20 62 3d 36 30 2a 36 30 2c 66 3d 62 2a 32 34 2c 63 3d 66 2a 33 31 2c 64 3d 66 2a 33 36 35 Data Ascii: var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49759	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:02:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=118940 Date: Thu, 25 Apr 2024 22:02:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:02:05 UTC	487	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=118973 Date: Thu, 25 Apr 2024 22:02:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 22:02:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49763	54.156.134.49	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:05 UTC	1175	OUT	GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fjpmanysexcomvistsxx.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714082523874 HTTP/1.1 Host: track.gaug.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jpmanysexcomvistsxx.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:05 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Thu, 25 Apr 2024 22:02:05 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 22:02:05 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-25 22:02:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49768	104.18.10.207	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:06 UTC	688	OUT	GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jpmanysexcomvistsxx.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:06 UTC	898	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:02:06 GMT Content-Type: font/woff2 Content-Length: 66624 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "db812d8a70a4e88e888744c1c9a27e89" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-CachedAt: 10/31/2023 19:08:24 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 976 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e8a8af4d30cdafa1b4863f782384ab8c CDN-Cache: HIT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a19d8d1d486dd7-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:02:06 UTC	471	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 04 40 00 0e 00 00 00 02 2a e8 00 01 03 e0 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 87 f6 1c 86 b0 35 01 36 02 24 03 94 0a 0b 8a 10 00 04 20 05 87 08 07 b0 20 3f 77 65 62 66 06 5b fc c1 91 80 d6 40 d6 8c 17 e5 a6 6e 43 80 c7 cb 9c e5 74 01 54 4c b7 c9 a1 f4 66 05 88 d6 74 1d a1 c8 c8 b0 71 00 c6 e8 a9 35 fb ff ff ff 3f 3d 69 88 6c e5 d2 91 5c db 76 6c 20 82 03 54 ff 83 ec 90 62 16 d2 15 d9 20 f4 31 07 66 c3 ba 9e 37 d4 54 87 51 d3 0a 8a 82 44 13 3b 3a bf d0 ae 12 31 95 6c d7 be 6a 76 88 af 65 d2 07 ec d2 6e 93 0f 45 89 a8 07 df a0 6b 35 3e ef a3 64 0f 37 51 a9 6c 8a 7f 42 61 94 dc 0a 92 75 e2 78 5d 2e f9 85 8b d6 f9 c0 57 92 43 b5 86 91 c8 24 ae 38 Data Ascii: wOF2@*?FFTM `r56$ ?webf[@nCtTLftq5?=il\vl Tb 1f7TQD;:1ljvenEk5>d7QlBaux].WC$8
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 30 a2 b6 11 2d 95 c2 46 95 12 69 81 62 05 46 22 32 cf 3c 45 45 c5 a8 13 ed 3b eb f4 22 75 3f d1 9c fd db d9 dd 14 0e 1a 82 d4 52 d9 81 5a ea 48 52 b1 1d 44 d3 fb b7 78 aa 59 2c 0d 35 82 54 74 a6 76 62 14 aa 9c 65 cf bc e6 59 4e 7f eb a9 73 46 4e 44 2b 03 ff fa f3 b7 f6 f4 b6 ef b7 31 08 09 08 87 95 18 cf a4 60 80 b6 d9 01 da 44 0b 28 92 26 36 62 61 50 36 28 a0 80 d5 18 11 58 b3 36 67 4e 57 c6 36 6b 2e d5 39 5d ba a8 76 1d 1f eb a1 9a ea ff ac 24 43 66 b4 76 c0 76 fa 10 78 40 10 b0 2d 4a b8 60 47 b0 97 d9 77 d4 fe 77 5b 10 d8 41 83 c0 14 13 04 b8 e5 34 03 6d 73 49 3e 00 c5 ff cf 69 ef d9 cf 13 f3 18 1e 70 05 c3 80 46 28 32 62 b5 bb da 18 7e 48 c9 5d 4a 95 5d 94 b1 6a dd b9 ad dc d4 46 cd 66 2d 7e 0b 40 fc c7 f3 c5 1a fa 67 67 0f 42 a0 2d a0 05 54 78 ee 25 Data Ascii: 0-FibF"2<EE;"u?RZHRDxY,5TtvbeYNsFND+1`D(&6baP6(X6gNW6k.9]v$Cfvvx@-J`Gww[A4msI>ipF(2b~H]J]jFf-~@ggB-Tx%
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 41 27 fb 46 00 47 b8 fd 93 63 15 54 35 3a c6 8a 60 71 52 aa c6 4f c9 89 ad de 90 ec 55 0e 51 c3 d4 b1 e5 d9 5e 28 08 e6 ec 9c 54 c3 56 61 03 c6 6d bf 89 35 90 a4 76 b3 ec 50 1d 25 d4 5e 29 4a 11 89 15 2c 66 2b e9 52 1a 4a 46 b2 b9 2c ca f0 80 cc 9c f1 d3 a1 d4 fe cc ae 14 41 ac d5 78 08 01 28 0c ad 48 9e 8c 8f b7 7d cb 5c 89 e1 c7 c2 69 05 83 8b 0d 86 16 22 1c 82 07 18 13 f1 6c e1 ca 44 6f bb 50 d5 24 e3 d4 44 af 11 e8 7d 11 15 5c a8 8b b0 5a 28 69 31 c7 25 87 84 d7 77 65 1a 36 41 d2 d5 95 bc 07 ac 8d 4a 5d 16 4d 34 65 b4 88 20 c3 67 b8 92 c4 c8 e5 62 f1 94 3e 6a 40 91 14 a6 dc 65 55 77 0a 75 a7 4e ea 53 33 15 40 7d 08 a2 b7 33 41 ee 99 58 c3 ca 3f 64 b5 9b 7a ac 38 69 1e 14 43 2f d5 c1 c9 9b c4 00 e5 4a 4b 45 00 af 96 c4 27 26 85 c4 5d e1 10 3d cf 7a ce Data Ascii: A'FGcT5:`qROUQ^(TVam5vP%^)J,f+RJF,Ax(H}\i"lDoP$D}\Z(i1%we6AJ]M4e gb>j@eUwuNS3@}3AX?dz8iC/JKE'&]=z
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 31 15 81 12 21 b0 aa 32 fa 17 ad 48 27 3a d6 49 1a 5f 66 15 ca 2c d5 43 03 62 a4 01 99 9a 6a a3 41 5c a3 ce 88 b2 f5 4c e1 94 af 31 20 29 d9 c8 48 92 b9 02 61 98 99 15 b6 09 82 3d ae eb 9d e9 4e 28 55 c9 3b 0e 9b b8 b3 71 b0 be 9e 95 f5 6c 71 e3 ce e1 d1 92 64 3b 68 b0 db d1 33 60 67 07 ac 6b 7a 10 8e 22 ad 25 e5 85 d6 e7 bc cb 28 ec f3 38 fd 02 90 58 58 d0 8c cc 4a 6b 05 5f af 77 b3 6f 5d d3 9e a4 1e 20 0f 02 bc b7 1a 4a e9 38 61 34 da 36 a4 26 d7 30 33 33 3d d5 06 05 39 9e 05 29 ca 76 cc 9e ae f5 be 26 d2 da cd 4a 50 56 de fd cc 1a cb a2 30 fa db 5c 98 71 ac 24 ae b6 a9 48 ea e9 59 10 88 31 69 b6 be 39 ff 1e 2f 99 69 a3 7d ab b7 34 2c 7f 72 a4 d3 70 d5 bb 80 a6 72 cd 57 c7 75 62 cf 15 88 f9 69 dc 9d 13 b3 46 b7 23 a3 0b 1b 5d c0 ee 17 95 da b1 29 62 ab Data Ascii: 1!2H':I_f,CbjA\L1 )Ha=N(U;qlqd;h3`gkz"%(8XXJk_wo] J8a46&033=9)v&JPV0\q$HY1i9/i}4,rprWubiF#])b
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: ae 6c 5c 67 85 05 66 77 94 50 4b 7c a3 72 10 af 9e 28 30 dc c3 4a 23 23 72 50 b9 3c b5 2e b7 c1 3d 24 a8 8c 56 0a f3 d3 ad 7d 6b aa 80 cd 0a 22 6c 57 c1 6d 94 74 76 2e 14 1a f5 e6 95 41 37 e6 ec 2d c8 5f 08 e2 68 a4 50 ad e0 f5 2c a7 75 65 09 2d 7c b1 3a 89 f8 78 16 a9 6b d9 56 4f e2 6e 2f d7 65 70 5d 13 de 1d 5e 1c f2 df 74 b2 8f 32 09 9d 6e 28 7c 99 72 a5 08 47 3c 06 04 80 db 72 ca 78 f2 34 d3 20 ce aa 02 ca a1 68 24 81 e8 e0 44 b1 a4 b8 94 17 a9 ff eb 49 e1 f9 ed 50 31 87 52 75 a9 6e 36 cd 8f de 3c 5b 78 f8 38 52 77 8a 71 19 e3 e3 74 51 49 9c a4 9e 61 20 0a be 32 c2 5f 55 fb 5a 98 93 89 24 ee 56 20 98 f1 1e 5e 58 47 72 e7 0e 03 3d 0b 98 9e 77 9c 44 df 75 4a 7a b0 01 da 1c 6b 33 bb ac 9c 50 45 00 76 ae 60 9e 8b 2e 4f 52 38 5d 05 19 64 01 af 8b 24 46 f3 Data Ascii: l\gfwPK\|r(0J##rP<.=$V}k"lWmtv.A7-_hP,ue-\|:xkVOn/ep]^t2n(\|rG<rx4 h$DIP1Run6<[x8RwqtQIa 2_UZ$V ^XGr=wDuJzk3PEv`.OR8]d$F
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: bb 34 bf ce e6 6b 73 bc a9 6f 78 84 87 e9 b3 74 6f b8 c0 7a 2d 0d 04 31 75 76 e0 d0 13 a7 62 ef 2a c8 c1 c6 62 f7 61 5b f2 7f 95 05 17 5c f0 51 85 36 86 21 51 43 08 f8 ec de 9e f7 a0 36 e7 b9 ea 1f fa 32 30 dc f6 1c c4 bd 72 b9 26 90 52 13 68 5b c0 35 b0 80 a5 52 09 3b 96 a8 5f 93 3a 20 54 3a 83 f8 2b 4d 7e ac 3a b7 db bc 52 de 1d 3f c2 15 31 d6 ae 84 9a cf 08 17 f5 20 e1 5c de e9 1b 21 10 dc 8e 60 30 ef d1 ab 65 e5 8b 56 ce ae 88 d4 7b 1e 44 46 6e 2d 8f 24 f9 2b 3c 77 a0 5f 19 11 e3 c1 d0 fa 07 a4 b1 5f 29 21 91 78 6c 27 98 4c 45 d2 3f f0 6d c4 e0 3c 47 ce 5b e3 54 ff 8f 2a 31 f6 d7 09 31 e7 db ac 27 ff 36 ce 4f b3 24 c0 e7 99 de fc 71 e9 e9 e3 82 f8 88 f5 14 75 cd f7 34 94 61 7c 39 3d 99 ad 16 f5 1f 17 2b 35 9b 9b 15 bd bd 9c b0 dc f8 86 bf ea 1a 13 49 Data Ascii: 4ksoxtoz-1uvbba[\Q6!QC620r&Rh[5R;_: T:+M~:R?1 \!`0eV{DFn-$+<w__)!xl'LE?m<G[T11'6O$qu4a\|9=+5I
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 8d d3 05 4b ce 94 77 30 87 af 3b fc d5 57 6f f0 25 3b 3e a3 72 4a 02 8e 7c 21 21 02 ea c6 4d c3 66 05 f1 f8 08 04 c7 30 fb 88 43 90 65 a2 37 0a 86 7b 55 14 21 fe b7 06 0e 11 8f 73 09 c9 d7 dd a9 1f 42 0f 09 11 10 b5 0d 7e 88 1f fa a9 1e 22 b6 8b c5 42 31 71 9c 2a 4e f2 b8 fc 6a 84 2b 37 5e 37 5e 26 d4 44 43 85 cf 9e 3e 70 14 42 d7 5b a6 69 5b 97 49 b5 4a f7 e7 7b a5 18 70 55 0f 86 5b 2f 54 12 25 70 6f 36 94 c2 5a b3 23 6a d6 c7 12 27 cf c1 6c 9a 1f 32 46 09 ce 3b 78 c6 45 c6 07 7d 6f 77 8e 91 cc f0 73 48 b7 25 9f 6d fe b9 9f 4f 17 d5 4d 98 0e a7 25 95 a3 81 78 42 20 ea 57 ce 62 c4 f3 d2 b8 cb 6a f9 30 e2 ab eb 04 19 8e 01 f9 89 8e 03 dd c1 f1 de 15 17 4c 18 99 e6 04 f3 40 e5 e8 3a 49 cf e0 39 aa 8a 70 8a 74 e5 b0 0d f9 b4 04 5d a6 78 55 db 54 2a 67 b4 b5 Data Ascii: Kw0;Wo%;>rJ\|!!Mf0Ce7{U!sB~"B1qNj+7^7^&DC>pB[i[IJ{pU[/T%po6Z#j'l2F;xE}owsH%mOM%xB Wbj0L@:I9pt]xUTg
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 4a 68 8d d5 20 b6 63 6c c2 74 f5 95 5c 17 5b a7 db df 2d 6c 10 65 33 1f 60 2d 63 51 a5 1c 94 c5 ad ff 07 83 c9 26 51 85 a1 d3 47 27 20 99 90 ad 2c 11 85 78 c2 6a 10 f3 77 31 78 03 05 fb 8a 6f 84 81 15 7b 96 e5 32 7c 94 49 2b 0c 13 88 06 1e 84 bb 98 4f f7 ae 7e dc 08 93 80 27 33 c0 ea bd 99 47 19 05 9a a6 3c 8b 5d e1 42 93 d0 e9 16 94 d4 36 35 1e 40 c8 42 7a 5d 32 e2 22 5f 31 9e 2a 81 8f 3f e4 89 e4 39 31 14 9b bc 93 f5 52 b8 ca 84 22 7c 72 9b 72 49 b5 4f db e5 35 ee 06 42 2f ab 62 7d 41 0c ff c4 7e fa d1 53 b0 8e 90 3c 7d 1a e0 fe cb 36 2f 7e ac c8 52 64 d6 de d5 66 36 c4 4c 49 6b 84 f1 b8 29 36 67 47 af a2 1a d3 8b d3 e6 9e 3a ed 5c 18 36 75 95 a8 21 3d a7 a8 a2 2f 30 0f 32 d4 4a 9d 22 47 1d f5 f6 78 5a 3a 53 bb 98 c5 fb 6d 79 fb fd 33 ad 52 32 cb 91 59 Data Ascii: Jh clt\[-le3`-cQ&QG' ,xjw1xo{2\|I+O~'3G<]B65@Bz]2"_1*?91R"\|rrIO5B/b}A~S<}6/~Rdf6LIk)6gG:\6u!=/02J"GxZ:Smy3R2Y
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: cc e6 34 32 68 e9 d2 39 d9 18 72 69 d3 0a 6c 23 83 33 f1 36 d5 be 22 4b be 0c 9d 21 4e 23 16 a7 67 aa 6d e7 52 79 04 77 33 ea 08 03 a1 ea 77 55 0c 76 23 86 e6 8b d5 fd c1 b5 b8 d7 42 5c 83 18 02 5e 0d 8b 04 12 0d d0 cf 89 e8 60 cf 1a 19 1a e2 42 f1 a0 55 22 5e 90 91 26 8e 15 c3 66 0f cf 5b b1 71 03 98 b6 f8 6e 1e e1 34 78 95 73 6f f9 9c ee 2f 46 52 b3 5e 85 e0 ca c6 39 1b 0e 50 cd 90 04 d0 14 f1 df fe cc 0c dd 32 b8 94 9b 10 e8 41 aa f7 9c b4 a5 7c bb e8 7f 12 6d dd a5 7c e4 b5 dc 55 cf a0 69 f7 16 cd 8f 58 b1 b5 c4 5e fd b7 ca b9 e3 9c f1 e1 ba d6 71 1a d6 93 bb 90 98 4a 87 15 02 b1 cb b2 0f 9a 02 e9 7e c3 6e 26 6b 69 0c a7 60 13 3b 18 bd 63 bb 40 62 4a 62 b2 32 a2 21 09 9e cd 85 83 0c 4d 0b 76 51 d4 18 45 73 c2 c5 24 f6 cb 39 c7 b3 f4 ef 8a 72 7b 55 39 Data Ascii: 42h9ril#36"K!N#gmRyw3wUv#B\^`BU"^&f[qn4xso/FR^9P2A\|m\|UiX^qJ~n&ki`;c@bJb2!MvQEs$9r{U9
2024-04-25 22:02:06 UTC	1369	IN	Data Raw: 64 f2 b9 dc 1d 71 a4 b7 46 3f 18 81 87 b1 7a d3 34 d2 a0 e4 11 af 63 49 75 2f 64 86 f8 14 ac be 6a 21 f4 f5 c3 23 ee 60 da d0 85 96 3d 96 ba 74 c3 9f c6 b5 9c 93 c6 38 6f 3c 14 fc 21 13 fd ae 54 6b 57 95 92 4c 9c e8 01 24 af cc 87 e7 8d 90 13 ce af c8 70 35 2c 20 01 8d 77 e5 c1 73 69 88 5e a1 fe 11 16 e6 f1 71 4b 50 e0 a6 b7 cc 15 ad 92 c9 b4 13 b2 60 68 48 f4 8a a5 d1 c1 0b a3 13 73 05 08 69 e2 f7 be 25 99 7d 8c b4 ac 40 4e ad 57 f7 74 b6 72 c6 81 a8 bd e4 9c 43 de 8f da a8 50 97 d8 e7 50 2e 41 c9 d2 87 b2 39 05 3b 70 c0 f9 ff b7 69 e3 9d e1 b2 5a 5d cb a8 cb 9b d9 15 8d bd 29 85 eb ae 9c e3 79 f7 46 4a c2 4a 1c 2d e2 2f 29 b6 fb 60 2f 4c 7e 2d d8 1e 42 b8 74 b8 27 cf 5a 85 13 a7 ac f3 ea 85 67 93 66 3a 94 4a ee 4d ee 63 7b b1 83 66 c8 99 3d e9 54 38 86 Data Ascii: dqF?z4cIu/dj!#`=t8o<!TkWL$p5, wsi^qKP`hHsi%}@NWtrCPP.A9;piZ])yFJJ-/)`/L~-Bt'Zgf:JMc{f=T8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49769	54.161.134.69	443	2124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:02:06 UTC	911	OUT	GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fjpmanysexcomvistsxx.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714082523874 HTTP/1.1 Host: track.gaug.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:02:06 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Thu, 25 Apr 2024 22:02:06 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 22:02:06 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-25 22:02:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3488, Parent PID: 2784

General

Target ID:	0
Start time:	00:01:54
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2124, Parent PID: 3488

General

Target ID:	2
Start time:	00:01:57
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,9026972089338350667,7397339389741624143,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6452, Parent PID: 2784

General

Target ID:	3
Start time:	00:01:59
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Windows Analysis Report
https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html