Edit tour

Windows Analysis Report
https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3

Overview

General Information

Sample URL:	https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3
Analysis ID:	1619308
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1992,i,2873383733116960089,1572498857847508061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://sapiyon.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://sapiyon.com/wp-content/uploads/2020/06/cropped-Ficon-32x32.png	Avira URL Cloud: Label: malware

Source: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3

HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:65343 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:51552 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.155
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.155
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3 HTTP/1.1Host: sapiyon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sapiyon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/06/cropped-Ficon-32x32.png HTTP/1.1Host: sapiyon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/06/cropped-Ficon-32x32.png HTTP/1.1Host: sapiyon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sapiyon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 65419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65419
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal56.win@21/5@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1992,i,2873383733116960089,1572498857847508061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1992,i,2873383733116960089,1572498857847508061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://sapiyon.com/favicon.ico	100%	Avira URL Cloud	malware
https://sapiyon.com/wp-content/uploads/2020/06/cropped-Ficon-32x32.png	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
sapiyon.com	104.21.27.40	true	false		high
www.google.com	216.58.206.36	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sapiyon.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3	true		unknown
https://sapiyon.com/wp-content/uploads/2020/06/cropped-Ficon-32x32.png	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.27.40	sapiyon.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1619308
Start date and time:	2025-02-19 19:19:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@21/5@6/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.185.174, 66.102.1.84, 172.217.18.14, 142.250.186.46, 199.232.214.172, 2.23.77.188, 142.250.181.238, 142.250.185.206, 142.250.185.142, 142.250.184.238, 142.250.186.142, 142.250.80.78, 74.125.0.137, 172.217.18.3, 92.123.18.162, 20.109.210.53, 13.107.253.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, r4.sn-ab5l6nk6.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, r4---sn-ab5l6nk6.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	440
Entropy (8bit):	7.212183315080855
Encrypted:	false
SSDEEP:	12:6pn9pR5k/8NfH7R6IolwJHMbqDdEymLOTujHJOupsu/:6p9lk0T7H3DdEVEuf/
MD5:	E814099522BD01906D13433FF4889184
SHA1:	894717F8924BDAB44E89888CF06449D42255FEA6
SHA-256:	56575917D201988976CE06D6DD5876B2DA83169762EA95CD658CAFC204740569
SHA-512:	DB003A450D60203E45752688D1A754DE80C9F560CABB2628A599B5B8115E508AC9C4200F20678D67E90501BCF755049E740C6C915C7611FC83F87147F9894455
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH".....@ @Q...........I..;...O@......VP8 h........* . .>Q".E$....TH.....P..?D.U....C.F..._:.........../..(.._....B...T@F{W...@....TC.p...o.9E.o.{}-/'..wY...3.....c.s..8_.. ...E~....._`.W.r..`V.tqw.......`Z..X...#....8.O...d.....TU.&...@.j\|4.}...f....8i..X..Q;N...# .dvPH...C...c..8*o=.Wq...../B.V....h#{...z<&.C1.?._f^..8..@E.=....S.W..8a.4._.<... ..'...S....&=..Kb4...._.P....QvU.....

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	440
Entropy (8bit):	7.212183315080855
Encrypted:	false
SSDEEP:	12:6pn9pR5k/8NfH7R6IolwJHMbqDdEymLOTujHJOupsu/:6p9lk0T7H3DdEVEuf/
MD5:	E814099522BD01906D13433FF4889184
SHA1:	894717F8924BDAB44E89888CF06449D42255FEA6
SHA-256:	56575917D201988976CE06D6DD5876B2DA83169762EA95CD658CAFC204740569
SHA-512:	DB003A450D60203E45752688D1A754DE80C9F560CABB2628A599B5B8115E508AC9C4200F20678D67E90501BCF755049E740C6C915C7611FC83F87147F9894455
Malicious:	false
Reputation:	low
URL:	https://sapiyon.com/wp-content/uploads/2020/06/cropped-Ficon-32x32.png
Preview:	RIFF....WEBPVP8X..............ALPH".....@ @Q...........I..;...O@......VP8 h........* . .>Q".E$....TH.....P..?D.U....C.F..._:.........../..(.._....B...T@F{W...@....TC.p...o.9E.o.{}-/'..wY...3.....c.s..8_.. ...E~....._`.W.r..`V.tqw.......`Z..X...#....8.O...d.....TU.&...@.j\|4.}...f....8i..X..Q;N...# .dvPH...C...c..8*o=.Wq...../B.V....h#{...z<&.C1.?._f^..8..@E.=....S.W..8a.4._.<... ..'...S....&=..Kb4...._.P....QvU.....

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63089)
Category:	downloaded
Size (bytes):	63130
Entropy (8bit):	5.288104359789933
Encrypted:	false
SSDEEP:	1536:heAjA679C+QRCHXC4WHqMPB8Vx8WXwCDFYNIekHeBHmjkfzRNE4cR8+Sxp6xID1F:dd97W/ClkbfTDt
MD5:	13F40C23C9754536B73F05BC2D4C46D7
SHA1:	DD973EB4787C2CC640FD8EBA6D5E3C6D4354479C
SHA-256:	9A9D02FB28AD09B0DD17E6DBD2AA381EA9410449828DD6C24125E6ED98D55176
SHA-512:	8A6AF07BCAEA9FA6C1E25C4BB44E5EDB468B4F73A2C972A17E320EAB809CF0A22785A50A5FEF89DA88A0CD72C406715A7126F1C353CC56818A310D1556D5EFC1
Malicious:	false
Reputation:	low
URL:	https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3
Preview:	/! elementor - v3.20.0 - 26-03-2024 /.(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{381:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=(e,t)=>{t=Array.isArray(t)?t:[t];for(const n of t)if(e.constructor.name===n.prototype[Symbol.toStringTag])return!0;return!1}},8135:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class _default extends elementorModules.ViewModule{getDefaultSettings(){return{selectors:{elements:".elementor-element",nestedDocumentElements:".elementor .elementor-element"},classes:{editMode:"elementor-edit-mode"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$elements:this.$element.find(e.elements).not(this.$element.find(e.nestedDocumentElements))}}getDocumentSettings(e){let t;if(this.isEdit){t={};const e=elementor.settings.page.model;jQuery.each(e.getActiveControls(),(n=>{t[n]=e.attributes[n]}))}else t=this.$element.data("elementor-sett

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 19:20:56.219978094 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.220020056 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.220158100 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.220516920 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.220534086 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.877895117 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.878370047 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.878391981 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.879823923 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.879888058 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.882128954 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.882215977 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.922672033 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:56.922689915 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:20:56.969538927 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:20:57.690541983 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.690625906 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:57.690720081 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.690992117 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.691061020 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:57.691137075 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.691271067 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.691308975 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:57.691659927 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:57.691694975 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.159782887 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.160116911 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.160180092 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.161112070 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.161207914 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.162868977 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.163069010 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.163134098 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.164793015 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.164875984 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166152954 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166215897 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166249037 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.166309118 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166467905 CET	443	49741	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.166591883 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166630983 CET	49741	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166753054 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.166804075 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.166879892 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167066097 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167088032 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.167197943 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167233944 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167252064 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167273998 CET	443	49742	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.167341948 CET	49742	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167680979 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.167773008 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.167892933 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.168054104 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.168091059 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.632371902 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.642556906 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.642617941 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.644165993 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.644253016 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.645761013 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.645870924 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.646352053 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.646368027 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.650727987 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.651156902 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.651201963 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.654781103 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.654992104 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.655848980 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.656032085 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.689413071 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.705478907 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.705542088 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.752332926 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.938601971 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.938642025 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.938704967 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.938734055 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.938807011 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.938848019 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.938873053 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.939053059 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.939141989 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.939178944 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.939193964 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.939209938 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.939263105 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.939948082 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:58.996571064 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:58.996632099 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025384903 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025425911 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025463104 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.025484085 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025573015 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.025656939 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025942087 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.025998116 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.026010036 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.026333094 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.026370049 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.026408911 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.026421070 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027144909 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027208090 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027214050 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.027226925 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027276039 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.027292013 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027333021 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027359962 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.027373075 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.027456999 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.028007030 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.028073072 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.028110981 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.028162003 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.028175116 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.028256893 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.028851986 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.028958082 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.029114008 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.029126883 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.071687937 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.071751118 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.111804962 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.112507105 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112570047 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112658024 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112668037 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112721920 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.112756014 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112783909 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.112838984 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.112874031 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.113058090 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.113115072 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.113132954 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.113184929 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.113209963 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.113255978 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.113311052 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.119528055 CET	49744	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.119558096 CET	443	49744	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.140844107 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.183367968 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.567933083 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.568120003 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.568304062 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.568665981 CET	49743	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.568713903 CET	443	49743	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.570331097 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.570420980 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:20:59.570499897 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.570885897 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:20:59.570925951 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.028882027 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.029166937 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.029232979 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.030111074 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.030174971 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.030579090 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.030579090 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.030632019 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.030653000 CET	443	49745	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.030709028 CET	49745	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.031065941 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.031160116 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.031260014 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.031446934 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.031469107 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.539555073 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.540018082 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.540081978 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.540796041 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.541094065 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.541213989 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:00.541228056 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.541376114 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:00.595549107 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.109555006 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.109730005 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.109797955 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.112813950 CET	49746	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.112833023 CET	443	49746	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.142935991 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.143035889 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.143122911 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.143407106 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.143434048 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.622478962 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.624274969 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.624342918 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.628086090 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.628179073 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629297018 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629333019 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629369974 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629403114 CET	443	49748	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.629477024 CET	49748	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629693985 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.629784107 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:01.629862070 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.630026102 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:01.630054951 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.089169979 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.089664936 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.089730978 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.091167927 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.091243029 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.091598034 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.091684103 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.091742992 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.091761112 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.142652988 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.243592024 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.243679047 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:02.243844986 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.244805098 CET	49749	443	192.168.2.4	104.21.27.40
Feb 19, 2025 19:21:02.244870901 CET	443	49749	104.21.27.40	192.168.2.4
Feb 19, 2025 19:21:06.780821085 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:06.780875921 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:06.780920982 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:08.299920082 CET	49738	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:08.299937010 CET	443	49738	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:31.368611097 CET	80	49723	217.20.57.36	192.168.2.4
Feb 19, 2025 19:21:31.368956089 CET	49723	80	192.168.2.4	217.20.57.36
Feb 19, 2025 19:21:31.368957043 CET	49723	80	192.168.2.4	217.20.57.36
Feb 19, 2025 19:21:31.374115944 CET	80	49723	217.20.57.36	192.168.2.4
Feb 19, 2025 19:21:32.759632111 CET	51552	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:32.764728069 CET	53	51552	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:32.764801979 CET	51552	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:32.764833927 CET	51552	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:32.769891977 CET	53	51552	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:33.220088005 CET	53	51552	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:33.220984936 CET	51552	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:33.226337910 CET	53	51552	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:33.226407051 CET	51552	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:37.774775028 CET	65343	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:37.780473948 CET	53	65343	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:37.780661106 CET	65343	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:37.780661106 CET	65343	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:37.785764933 CET	53	65343	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:38.255784988 CET	53	65343	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:38.256165028 CET	65343	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:38.262229919 CET	53	65343	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:38.262310028 CET	65343	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:56.268129110 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:56.268162012 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.268224955 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:56.268441916 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:56.268462896 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.532697916 CET	49730	80	192.168.2.4	2.16.100.155
Feb 19, 2025 19:21:56.538288116 CET	80	49730	2.16.100.155	192.168.2.4
Feb 19, 2025 19:21:56.538368940 CET	49730	80	192.168.2.4	2.16.100.155
Feb 19, 2025 19:21:56.913593054 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.913894892 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:56.913921118 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.915013075 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.915308952 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:21:56.915508032 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:21:56.970330000 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:22:06.834793091 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:22:06.834960938 CET	443	65419	216.58.206.36	192.168.2.4
Feb 19, 2025 19:22:06.835050106 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:22:08.299875975 CET	65419	443	192.168.2.4	216.58.206.36
Feb 19, 2025 19:22:08.299920082 CET	443	65419	216.58.206.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 19:20:51.632179022 CET	53	62792	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:51.632837057 CET	53	58427	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:52.654041052 CET	53	52026	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:56.205516100 CET	61417	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:20:56.205677032 CET	57674	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:20:56.213017941 CET	53	61417	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:56.213144064 CET	53	57674	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:57.674568892 CET	58748	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:20:57.674808979 CET	54213	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:20:57.688256979 CET	53	58748	1.1.1.1	192.168.2.4
Feb 19, 2025 19:20:57.689738035 CET	53	54213	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:01.117654085 CET	62430	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:01.117798090 CET	57452	53	192.168.2.4	1.1.1.1
Feb 19, 2025 19:21:01.134176016 CET	53	62430	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:01.142298937 CET	53	57452	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:08.101775885 CET	138	138	192.168.2.4	192.168.2.255
Feb 19, 2025 19:21:09.716348886 CET	53	49466	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:28.715667963 CET	53	60904	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:32.759243965 CET	53	65047	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:37.774137974 CET	53	52424	1.1.1.1	192.168.2.4
Feb 19, 2025 19:21:51.388010979 CET	53	56769	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 19, 2025 19:20:56.205516100 CET	192.168.2.4	1.1.1.1	0xb058	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:20:56.205677032 CET	192.168.2.4	1.1.1.1	0xbb95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 19, 2025 19:20:57.674568892 CET	192.168.2.4	1.1.1.1	0x5069	Standard query (0)	sapiyon.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:20:57.674808979 CET	192.168.2.4	1.1.1.1	0x931	Standard query (0)	sapiyon.com	65	IN (0x0001)	false
Feb 19, 2025 19:21:01.117654085 CET	192.168.2.4	1.1.1.1	0x2ef7	Standard query (0)	sapiyon.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:21:01.117798090 CET	192.168.2.4	1.1.1.1	0x8e3f	Standard query (0)	sapiyon.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 19, 2025 19:20:56.213017941 CET	1.1.1.1	192.168.2.4	0xb058	No error (0)	www.google.com	216.58.206.36	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:20:56.213144064 CET	1.1.1.1	192.168.2.4	0xbb95	No error (0)	www.google.com		65	IN (0x0001)	false
Feb 19, 2025 19:20:57.688256979 CET	1.1.1.1	192.168.2.4	0x5069	No error (0)	sapiyon.com	104.21.27.40	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:20:57.688256979 CET	1.1.1.1	192.168.2.4	0x5069	No error (0)	sapiyon.com	172.67.168.226	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:20:57.689738035 CET	1.1.1.1	192.168.2.4	0x931	No error (0)	sapiyon.com		65	IN (0x0001)	false
Feb 19, 2025 19:21:01.134176016 CET	1.1.1.1	192.168.2.4	0x2ef7	No error (0)	sapiyon.com	104.21.27.40	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:21:01.134176016 CET	1.1.1.1	192.168.2.4	0x2ef7	No error (0)	sapiyon.com	172.67.168.226	A (IP address)	IN (0x0001)	false
Feb 19, 2025 19:21:01.142298937 CET	1.1.1.1	192.168.2.4	0x8e3f	No error (0)	sapiyon.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

sapiyon.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	104.21.27.40	443	2996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-19 18:20:58 UTC	727	OUT	GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3 HTTP/1.1 Host: sapiyon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-19 18:20:58 UTC	913	IN	HTTP/1.1 200 OK Date: Wed, 19 Feb 2025 18:20:58 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 29 Mar 2024 09:26:03 GMT ETag: W/"f69a-614c93a8460c0-gzip" Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mw0DpgEgcfT%2FuczRnM5UF0LbgfhP68P7%2F52pLMzbQcI8V0oflben1samjUA%2BemtDZZMywTvaPR%2B1P6C85zlt1ZaNR5latVwlvQtthIhy9p9p1hTQIvblZAWCB3hamg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91484622ffe243b8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1584&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1305&delivery_rate=1796923&cwnd=238&unsent_bytes=0&cid=da2aed8b67af6273&ts=320&x=0"
2025-02-19 18:20:58 UTC	456	IN	Data Raw: 37 63 65 38 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 30 2e 30 20 2d 20 32 36 2d 30 33 2d 32 30 32 34 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 34 5d 2c 7b 33 38 31 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 28 65 2c 74 29 3d 3e 7b 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3a 5b 74 5d 3b 66 6f Data Ascii: 7ce8/! elementor - v3.20.0 - 26-03-2024 /(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{381:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=(e,t)=>{t=Array.isArray(t)?t:[t];fo
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 56 69 65 77 4d 6f 64 75 6c 65 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 65 6c 65 6d 65 6e 74 73 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 22 2c 6e 65 73 74 65 64 44 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 73 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 22 7d 2c 63 6c 61 73 73 65 73 3a 7b 65 64 69 74 4d 6f 64 65 3a 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 2d 6d 6f 64 65 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 73 65 6c 65 63 74 6f 72 Data Ascii: ends elementorModules.ViewModule{getDefaultSettings(){return{selectors:{elements:".elementor-element",nestedDocumentElements:".elementor .elementor-element"},classes:{editMode:"elementor-edit-mode"}}}getDefaultElements(){const e=this.getSettings("selector
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 6f 6e 2c 20 63 61 6e 76 61 73 2c 20 64 65 74 61 69 6c 73 2c 20 69 66 72 61 6d 65 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 73 75 6d 6d 61 72 79 2c 20 74 65 78 74 61 72 65 61 2c 20 76 69 64 65 6f 2c 20 5b 61 63 63 65 73 73 6b 65 79 5d 2c 20 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 2c 20 5b 68 72 65 66 5d 2c 20 5b 74 61 62 69 6e 64 65 78 5d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 29 27 7d 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 69 74 65 6d 54 69 74 6c 65 3a 22 2e 65 2d 6e 2d 74 61 62 2d 74 69 74 6c 65 22 2c 69 74 65 6d 43 6f 6e 74 61 69 6e 65 72 3a 22 2e 65 2d 6e 2d 74 61 62 73 2d 63 6f 6e 74 65 6e 74 20 3e 20 2e 65 2d 63 6f 6e 22 7d 2c 61 72 Data Ascii: on, canvas, details, iframe, input, select, summary, textarea, video, [accesskey], [contenteditable], [href], [tabindex]:not([tabindex="-1"])'}getDefaultSettings(){return{selectors:{itemTitle:".e-n-tab-title",itemContainer:".e-n-tabs-content > .e-con"},ar
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 74 65 6d 54 69 74 6c 65 73 2e 66 69 6c 74 65 72 28 65 29 7d 6f 6e 49 6e 69 74 28 29 7b 73 75 70 65 72 2e 6f 6e 49 6e 69 74 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 62 69 6e 64 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 74 65 6d 54 69 74 6c 65 73 2e 6f 6e 28 74 68 69 73 2e 67 65 74 54 69 74 6c 65 45 76 65 6e 74 73 28 29 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 66 6f 63 75 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 2e 6f 6e 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 45 6c 65 6d 65 6e 74 45 76 65 6e 74 73 28 29 29 7d 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 74 65 6d 54 69 74 6c 65 73 2e 6f 66 66 Data Ascii: s.elements.$itemTitles.filter(e)}onInit(){super.onInit(...arguments)}bindEvents(){this.elements.$itemTitles.on(this.getTitleEvents()),this.elements.$focusableContainerElements.on(this.getContentElementEvents())}unbindEvents(){this.elements.$itemTitles.off
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 74 54 61 72 67 65 74 3f 2e 63 6c 69 63 6b 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 2c 74 7d 67 65 74 54 69 74 6c 65 49 6e 64 65 78 46 6f 63 75 73 55 70 64 61 74 65 64 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 69 3d 30 3b 73 77 69 74 63 68 28 65 2e 6b 65 79 29 7b 63 61 73 65 22 48 6f 6d 65 22 3a 69 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 45 6e 64 22 3a 69 3d 6e 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 6f 6e 73 74 20 72 3d 74 68 69 73 2e 67 65 74 4b 65 79 44 69 72 65 63 74 69 6f 6e 56 61 6c 75 65 28 65 29 3b 69 3d 6e 3c 74 2b 72 3f 31 3a 30 3d 3d 3d 74 2b 72 3f 6e 3a 74 2b 72 7d 72 65 74 75 72 6e 20 69 7d 63 68 61 6e 67 65 54 69 74 6c 65 46 6f 63 75 73 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 Data Ascii: tTarget?.click(),e.stopPropagation()),t}getTitleIndexFocusUpdated(e,t,n){let i=0;switch(e.key){case"Home":i=1;break;case"End":i=n;break;default:const r=this.getKeyDirectionValue(e);i=n<t+r?1:0===t+r?n:t+r}return i}changeTitleFocus(e){const t=this.elements
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 73 65 6c 65 63 74 6f 72 73 22 29 2c 74 3d 7b 24 73 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 3a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 65 2e 63 61 72 6f 75 73 65 6c 29 2c 24 73 77 69 70 65 72 57 72 61 70 70 65 72 3a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 65 2e 73 77 69 70 65 72 57 72 61 70 70 65 72 29 2c 24 73 77 69 70 65 72 41 72 72 6f 77 73 3a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 65 2e 73 77 69 70 65 72 41 72 72 6f 77 29 2c 24 70 61 67 69 6e 61 74 69 6f 6e 57 72 61 70 70 65 72 3a 74 68 69 Data Ascii: r-pagination-bullets"}}}getDefaultElements(){const e=this.getSettings("selectors"),t={$swiperContainer:this.$element.find(e.carousel),$swiperWrapper:this.$element.find(e.swiperWrapper),$swiperArrows:this.$element.find(e.swiperArrow),$paginationWrapper:thi
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 22 62 6f 74 68 22 3d 3d 3d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2c 6c 3d 22 64 6f 74 73 22 3d 3d 3d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 7c 7c 22 62 6f 74 68 22 3d 3d 3d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 7c 7c 65 2e 70 61 67 69 6e 61 74 69 6f 6e 3b 72 65 74 75 72 6e 20 61 26 26 28 73 2e 6e 61 76 69 67 61 74 69 6f 6e 3d 7b 70 72 65 76 45 6c 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 22 2c 6e 65 78 74 45 6c 3a 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 22 7d 29 2c 6c 26 26 28 73 2e 70 61 67 69 6e 61 74 69 6f 6e 3d 7b 65 6c 3a 60 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 24 7b 74 68 69 73 2e 67 65 74 49 44 28 29 7d 20 2e 73 77 69 70 65 72 2d 70 61 Data Ascii: "both"===e.navigation,l="dots"===e.navigation\|\|"both"===e.navigation\|\|e.pagination;return a&&(s.navigation={prevEl:".elementor-swiper-button-prev",nextEl:".elementor-swiper-button-next"}),l&&(s.pagination={el:`.elementor-element-${this.getID()} .swiper-pa
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 70 70 6c 79 4f 66 66 73 65 74 53 65 74 74 69 6e 67 73 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 69 3d 65 2e 6f 66 66 73 65 74 5f 73 69 64 65 73 3b 69 66 28 21 28 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 26 26 22 4e 65 73 74 65 64 43 61 72 6f 75 73 65 6c 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 26 26 69 26 26 22 6e 6f 6e 65 22 21 3d 3d 69 29 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 22 72 69 67 68 74 22 3a 74 68 69 73 2e 66 6f 72 63 65 53 6c 69 64 65 72 54 6f 53 68 6f 77 4e 65 78 74 53 6c 69 64 65 57 68 65 6e 4f 6e 4c 61 73 74 28 74 2c 6e 29 2c 74 68 69 73 2e 61 64 64 43 6c 61 73 73 54 6f 53 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 28 22 6f 66 66 73 65 74 2d 72 69 67 68 Data Ascii: pplyOffsetSettings(e,t,n){const i=e.offset_sides;if(!(elementorFrontend.isEditMode()&&"NestedCarousel"===this.constructor.name)&&i&&"none"!==i)switch(i){case"right":this.forceSliderToShowNextSlideWhenOnLast(t,n),this.addClassToSwiperContainer("offset-righ
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 67 65 74 53 77 69 70 65 72 53 65 74 74 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 73 77 69 70 65 72 41 72 72 6f 77 73 2e 6f 66 66 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 70 61 67 69 6e 61 74 69 6f 6e 57 72 61 70 70 65 72 2e 6f 66 66 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 73 77 69 70 65 72 43 6f 6e 74 61 69 6e 65 72 2e 6f 66 66 28 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 3a 66 6f 63 75 73 61 62 6c 65 22 29 2e 6f 66 66 28 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 Data Ascii: ntorFrontend.elements.$window.on("resize",this.getSwiperSettings.bind(this))}unbindEvents(){this.elements.$swiperArrows.off(),this.elements.$paginationWrapper.off(),this.elements.$swiperContainer.off(),this.$element.find(":focusable").off(),elementorFront
2025-02-19 18:20:58 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 75 74 69 6c 73 2e 63 6f 6e 74 72 6f 6c 73 2e 67 65 74 52 65 73 70 6f 6e 73 69 76 65 43 6f 6e 74 72 6f 6c 56 61 6c 75 65 28 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 2c 22 69 6d 61 67 65 5f 73 70 61 63 69 6e 67 5f 63 75 73 74 6f 6d 22 2c 22 73 69 7a 65 22 2c 65 29 7c 7c 30 7d 75 70 64 61 74 65 53 70 61 63 65 42 65 74 77 65 65 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 6d 61 74 63 68 28 22 69 6d 61 67 65 5f 73 70 61 63 69 6e 67 5f 63 75 73 74 6f 6d 5f 28 2e 2a 29 22 29 2c 6e 3d 74 3f 74 5b 31 5d 3a 22 64 65 73 6b 74 6f 70 22 2c 69 3d 74 68 69 73 2e 67 65 74 53 70 Data Ascii: guments[0]?arguments[0]:null;return elementorFrontend.utils.controls.getResponsiveControlValue(this.getElementSettings(),"image_spacing_custom","size",e)\|\|0}updateSpaceBetween(e){const t=e.match("image_spacing_custom_(.*)"),n=t?t[1]:"desktop",i=this.getSp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	104.21.27.40	443	2996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-19 18:20:59 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: sapiyon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-19 18:20:59 UTC	960	IN	HTTP/1.1 302 Found Date: Wed, 19 Feb 2025 18:20:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Link: <https://sapiyon.com/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://sapiyon.com/wp-content/uploads/2020/06/cropped-Ficon-32x32.png cf-cache-status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEg%2Bj3jb%2BtVwrXeUjJEMvklqIAX6HQAAZpxtAIfAIv84x6Jp5we7Bb6rYuI2BNlDbtrmajmP0W9QW4FjUxXOuWVxaQEh1YB%2F7Hz6eD2vBEThC7rsF5HHjk14nYio8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91484625fbc8c35b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1634&min_rtt=1631&rtt_var=619&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1229&delivery_rate=1756919&cwnd=189&unsent_bytes=0&cid=0a0cdf305c304cf6&ts=930&x=0"
2025-02-19 18:20:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	104.21.27.40	443	2996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-19 18:21:00 UTC	690	OUT	GET /wp-content/uploads/2020/06/cropped-Ficon-32x32.png HTTP/1.1 Host: sapiyon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-19 18:21:01 UTC	911	IN	HTTP/1.1 200 OK Date: Wed, 19 Feb 2025 18:21:01 GMT Content-Type: image/webp Content-Length: 440 Connection: close Vary: Accept Last-Modified: Sat, 18 Nov 2023 17:47:45 GMT ETag: "1b8-60a70d9aef240" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QdBn7FbSeH8ScTMSm0TLB%2BANM8mPlvfi1yt%2BedXndIdZnzX0Fohp%2Bdh98BIZlcF1xfU9RiApeFGmV6zYt3wKHQMrOGb0SWzZ50PGA8XgmAsLGXXXrK39MMG4n%2Fn8Jw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9148462f0a18c466-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3102&min_rtt=1589&rtt_var=1661&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1268&delivery_rate=1837633&cwnd=230&unsent_bytes=0&cid=59b56dd4c10bc053&ts=580&x=0"
2025-02-19 18:21:01 UTC	440	IN	Data Raw: 52 49 46 46 b0 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 00 00 1f 00 00 41 4c 50 48 22 00 00 00 01 17 40 20 40 51 f8 7f d7 95 88 f9 8f 9f 01 91 00 c9 49 1c a9 3b e9 d6 88 fe 4f 40 e7 7f 11 07 00 00 56 50 38 20 68 01 00 00 f0 0a 00 9d 01 2a 20 00 20 00 3e 51 22 8e 45 24 a2 a2 14 05 54 48 05 04 b4 80 08 50 0c 9b 3f 44 f9 55 d2 8f f3 01 98 43 fc 46 90 86 9a 5f 3a 0f ea bc 9d fc d9 fe ef dc 03 f8 c7 f3 2f f6 9d 28 1e c4 5f a9 eb ad ff d5 42 db d8 b1 d8 54 40 46 7b 57 df 07 f0 40 1a ca b4 05 18 54 43 c7 9a 70 00 fd c7 6f bb 39 45 a1 6f bf 7b 7d 2d 2f 27 04 96 77 59 de 9b ff b3 33 b6 d5 ff d3 9f ce 63 fa 73 f5 d1 38 5f aa c4 20 1a 9b fd 45 7e 03 be 04 1d 90 5f 60 cd 57 e4 72 a4 e0 60 56 c1 74 71 77 cf a3 f5 03 9a c7 0c ad 60 5a b9 db 9e 58 d4 Data Ascii: RIFFWEBPVP8XALPH"@ @QI;O@VP8 h* >Q"E$THP?DUCF_:/(_BT@F{W@TCpo9Eo{}-/'wY3cs8_ E~_`Wr`Vtqw`ZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	104.21.27.40	443	2996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-19 18:21:02 UTC	385	OUT	GET /wp-content/uploads/2020/06/cropped-Ficon-32x32.png HTTP/1.1 Host: sapiyon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-19 18:21:02 UTC	911	IN	HTTP/1.1 200 OK Date: Wed, 19 Feb 2025 18:21:02 GMT Content-Type: image/webp Content-Length: 440 Connection: close Vary: Accept Last-Modified: Sat, 18 Nov 2023 17:47:45 GMT ETag: "1b8-60a70d9aef240" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QwF446fK7ltCZy2PJl%2BRV2fU3lihIVXIuyCHcjpTHu1yri4hcTpRsDae%2BLd8e8LKE3X6scDajEUUVVCGdzoufg3xZHhttW5ypNg81r%2F%2BbYEYYOHTP4WD%2BzrL6mKclw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91484638a852c466-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=1522&rtt_var=574&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=963&delivery_rate=1918528&cwnd=230&unsent_bytes=0&cid=9cbfdc1264740e33&ts=160&x=0"
2025-02-19 18:21:02 UTC	440	IN	Data Raw: 52 49 46 46 b0 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 00 00 1f 00 00 41 4c 50 48 22 00 00 00 01 17 40 20 40 51 f8 7f d7 95 88 f9 8f 9f 01 91 00 c9 49 1c a9 3b e9 d6 88 fe 4f 40 e7 7f 11 07 00 00 56 50 38 20 68 01 00 00 f0 0a 00 9d 01 2a 20 00 20 00 3e 51 22 8e 45 24 a2 a2 14 05 54 48 05 04 b4 80 08 50 0c 9b 3f 44 f9 55 d2 8f f3 01 98 43 fc 46 90 86 9a 5f 3a 0f ea bc 9d fc d9 fe ef dc 03 f8 c7 f3 2f f6 9d 28 1e c4 5f a9 eb ad ff d5 42 db d8 b1 d8 54 40 46 7b 57 df 07 f0 40 1a ca b4 05 18 54 43 c7 9a 70 00 fd c7 6f bb 39 45 a1 6f bf 7b 7d 2d 2f 27 04 96 77 59 de 9b ff b3 33 b6 d5 ff d3 9f ce 63 fa 73 f5 d1 38 5f aa c4 20 1a 9b fd 45 7e 03 be 04 1d 90 5f 60 cd 57 e4 72 a4 e0 60 56 c1 74 71 77 cf a3 f5 03 9a c7 0c ad 60 5a b9 db 9e 58 d4 Data Ascii: RIFFWEBPVP8XALPH"@ @QI;O@VP8 h* >Q"E$THP?DUCF_:/(_BT@F{W@TCpo9Eo{}-/'wY3cs8_ E~_`Wr`Vtqw`ZX

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1136, Parent PID: 5500

General

Target ID:	0
Start time:	13:20:47
Start date:	19/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2996, Parent PID: 1136

General

Target ID:	2
Start time:	13:20:50
Start date:	19/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1992,i,2873383733116960089,1572498857847508061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6540, Parent PID: 5500

General

Target ID:	3
Start time:	13:20:57
Start date:	19/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1136, Parent PID: 5500

General

Chronological Activities

Analysis Process: chrome.exePID: 2996, Parent PID: 1136

General

Chronological Activities

Analysis Process: chrome.exePID: 6540, Parent PID: 5500

General

Chronological Activities

Disassembly

Windows Analysis Report
https://sapiyon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.3