Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/05/2024, 11:36 UTC

General

  • Target

    45fed3548b6d721dc98614d02ea5d1a2_JaffaCakes118.html

  • Size

    28KB

  • MD5

    45fed3548b6d721dc98614d02ea5d1a2

  • SHA1

    ad5ecf47b8cd0e07a28fdcff9467951e4c423c4f

  • SHA256

    140cb566b8146651cf43b4172f07a1f3a9044b68e50cc4b576970cd0459c648f

  • SHA512

    b18174bf60a7824ee8a6cbfa027c02111440b311799745eff862c67a84ab71c229a285051dc73ace5bc16739f5d8ac1b7edefb51808ab3a1dbae0f03ab907890

  • SSDEEP

    192:uw/cb5naFUGnQjxn5Q/gnQieDNnHnQOkEnt0qnQTbn9nQ9efvm64PrOEFQl7MBj5:SQ/DqRmrOZSCOLSq

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\45fed3548b6d721dc98614d02ea5d1a2_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:828
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4d6046f8,0x7ffe4d604708,0x7ffe4d604718
      2⤵
        PID:4952
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
        2⤵
          PID:3992
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:4864
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
          2⤵
            PID:3260
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
            2⤵
              PID:4260
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
              2⤵
                PID:2904
              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5148 /prefetch:8
                2⤵
                  PID:868
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5148 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:852
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
                  2⤵
                    PID:3052
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
                    2⤵
                      PID:880
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
                      2⤵
                        PID:4604
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
                        2⤵
                          PID:4488
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,13557347698773411901,8299454055432475533,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3976 /prefetch:2
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:3776
                      • C:\Windows\System32\CompPkgSrv.exe
                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                        1⤵
                          PID:1540
                        • C:\Windows\System32\CompPkgSrv.exe
                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                          1⤵
                            PID:2524

                          Network

                          • flag-us
                            DNS
                            8.8.8.8.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            8.8.8.8.in-addr.arpa
                            IN PTR
                            Response
                            8.8.8.8.in-addr.arpa
                            IN PTR
                            dnsgoogle
                          • flag-us
                            DNS
                            232.168.11.51.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            232.168.11.51.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            77.190.18.2.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            77.190.18.2.in-addr.arpa
                            IN PTR
                            Response
                            77.190.18.2.in-addr.arpa
                            IN PTR
                            a2-18-190-77deploystaticakamaitechnologiescom
                          • flag-us
                            DNS
                            cdd.net.ua
                            msedge.exe
                            Remote address:
                            8.8.8.8:53
                            Request
                            cdd.net.ua
                            IN A
                            Response
                            cdd.net.ua
                            IN A
                            89.184.88.6
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/stylesheet.css
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/stylesheet.css HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: text/css,*/*;q=0.1
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/store_logo.png
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/store_logo.png HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/back.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/back.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_account.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_account.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_checkout.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_checkout.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_cart.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_cart.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:21 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_left.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_left.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/pixel_trans.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/pixel_trans.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_right_left.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/arrow_right.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/sdsdsd.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/sdsdsd.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/russian/images/buttons/button_quick_find.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/carta%20cdd.JPG
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/carta%20cdd.JPG HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/table_background_default.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/table_background_default.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/rev.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/rev.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/Pikovi.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/Pikovi.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/sup%201.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/sup%201.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/Pikovit.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/Pikovit.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_right.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_right.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/p.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/p.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/sup%202.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/sup%202.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/russian/images/icon.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/english/images/icon.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Wed, 15 May 2024 11:36:22 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-us
                            DNS
                            22.160.190.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            22.160.190.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            6.88.184.89.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            6.88.184.89.in-addr.arpa
                            IN PTR
                            Response
                            6.88.184.89.in-addr.arpa
                            IN PTR
                            svh16mirohostnet
                          • flag-us
                            DNS
                            95.221.229.192.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            95.221.229.192.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            g.bing.com
                            Remote address:
                            8.8.8.8:53
                            Request
                            g.bing.com
                            IN A
                            Response
                            g.bing.com
                            IN CNAME
                            g-bing-com.dual-a-0034.a-msedge.net
                            g-bing-com.dual-a-0034.a-msedge.net
                            IN CNAME
                            dual-a-0034.a-msedge.net
                            dual-a-0034.a-msedge.net
                            IN A
                            204.79.197.237
                            dual-a-0034.a-msedge.net
                            IN A
                            13.107.21.237
                          • flag-us
                            GET
                            https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=530628298&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6
                            Remote address:
                            204.79.197.237:443
                            Request
                            GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=530628298&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6 HTTP/2.0
                            host: g.bing.com
                            accept-encoding: gzip, deflate
                            user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                            Response
                            HTTP/2.0 204
                            cache-control: no-cache, must-revalidate
                            pragma: no-cache
                            expires: Fri, 01 Jan 1990 00:00:00 GMT
                            set-cookie: MUID=308354372077674B3D0F40B721CC663A; domain=.bing.com; expires=Mon, 09-Jun-2025 11:36:23 GMT; path=/; SameSite=None; Secure; Priority=High;
                            strict-transport-security: max-age=31536000; includeSubDomains; preload
                            access-control-allow-origin: *
                            x-cache: CONFIG_NOCACHE
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: C95026B5F78D487086C7405707322BCF Ref B: LON04EDGE0921 Ref C: 2024-05-15T11:36:23Z
                            date: Wed, 15 May 2024 11:36:23 GMT
                          • flag-us
                            GET
                            https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6
                            Remote address:
                            204.79.197.237:443
                            Request
                            GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6 HTTP/2.0
                            host: g.bing.com
                            accept-encoding: gzip, deflate
                            user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                            cookie: MUID=308354372077674B3D0F40B721CC663A; _EDGE_S=SID=06988A68380C6449385C9EE8390A6556
                            Response
                            HTTP/2.0 204
                            cache-control: no-cache, must-revalidate
                            pragma: no-cache
                            expires: Fri, 01 Jan 1990 00:00:00 GMT
                            set-cookie: MSPTC=6SU8kyuRPXLMiQRW2Bvo89qZ0egGx4lgIrD06Lhcvlo; domain=.bing.com; expires=Mon, 09-Jun-2025 11:36:24 GMT; path=/; Partitioned; secure; SameSite=None
                            strict-transport-security: max-age=31536000; includeSubDomains; preload
                            access-control-allow-origin: *
                            x-cache: CONFIG_NOCACHE
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: D0EAECE09796470BBC08E070E632F482 Ref B: LON04EDGE0921 Ref C: 2024-05-15T11:36:24Z
                            date: Wed, 15 May 2024 11:36:24 GMT
                          • flag-nl
                            GET
                            https://www.bing.com/aes/c.gif?RG=2ef009ec9c2c40698e85bfc7f6a77bb3&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240426T130810Z&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984
                            Remote address:
                            23.62.61.194:443
                            Request
                            GET /aes/c.gif?RG=2ef009ec9c2c40698e85bfc7f6a77bb3&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240426T130810Z&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984 HTTP/2.0
                            host: www.bing.com
                            accept-encoding: gzip, deflate
                            user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                            cookie: MUID=308354372077674B3D0F40B721CC663A
                            Response
                            HTTP/2.0 200
                            cache-control: private,no-store
                            pragma: no-cache
                            vary: Origin
                            p3p: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 23CE637C7EF846D1A9E7454672C09078 Ref B: LON212050702017 Ref C: 2024-05-15T11:36:24Z
                            content-length: 0
                            date: Wed, 15 May 2024 11:36:24 GMT
                            set-cookie: _EDGE_S=SID=06988A68380C6449385C9EE8390A6556; path=/; httponly; domain=bing.com
                            set-cookie: MUIDB=308354372077674B3D0F40B721CC663A; path=/; httponly; expires=Mon, 09-Jun-2025 11:36:24 GMT
                            alt-svc: h3=":443"; ma=93600
                            x-cdn-traceid: 0.be3d3e17.1715772984.bbe813f
                          • flag-us
                            DNS
                            237.197.79.204.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            237.197.79.204.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            194.61.62.23.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            194.61.62.23.in-addr.arpa
                            IN PTR
                            Response
                            194.61.62.23.in-addr.arpa
                            IN PTR
                            a23-62-61-194deploystaticakamaitechnologiescom
                          • flag-us
                            DNS
                            26.35.223.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            26.35.223.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-nl
                            GET
                            https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                            Remote address:
                            23.62.61.194:443
                            Request
                            GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/2.0
                            host: www.bing.com
                            accept: */*
                            cookie: MUID=308354372077674B3D0F40B721CC663A; _EDGE_S=SID=06988A68380C6449385C9EE8390A6556; MSPTC=6SU8kyuRPXLMiQRW2Bvo89qZ0egGx4lgIrD06Lhcvlo; MUIDB=308354372077674B3D0F40B721CC663A
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-type: image/png
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            content-length: 1107
                            date: Wed, 15 May 2024 11:36:25 GMT
                            alt-svc: h3=":443"; ma=93600
                            x-cdn-traceid: 0.be3d3e17.1715772985.bbe8782
                          • flag-us
                            DNS
                            50.23.12.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            50.23.12.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            171.39.242.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            171.39.242.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            171.39.242.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            171.39.242.20.in-addr.arpa
                            IN PTR
                          • flag-us
                            DNS
                            139.53.16.96.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            139.53.16.96.in-addr.arpa
                            IN PTR
                            Response
                            139.53.16.96.in-addr.arpa
                            IN PTR
                            a96-16-53-139deploystaticakamaitechnologiescom
                          • flag-us
                            DNS
                            79.190.18.2.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            79.190.18.2.in-addr.arpa
                            IN PTR
                            Response
                            79.190.18.2.in-addr.arpa
                            IN PTR
                            a2-18-190-79deploystaticakamaitechnologiescom
                          • flag-us
                            DNS
                            11.227.111.52.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            11.227.111.52.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            tse1.mm.bing.net
                            Remote address:
                            8.8.8.8:53
                            Request
                            tse1.mm.bing.net
                            IN A
                            Response
                            tse1.mm.bing.net
                            IN CNAME
                            mm-mm.bing.net.trafficmanager.net
                            mm-mm.bing.net.trafficmanager.net
                            IN CNAME
                            dual-a-0001.a-msedge.net
                            dual-a-0001.a-msedge.net
                            IN A
                            204.79.197.200
                            dual-a-0001.a-msedge.net
                            IN A
                            13.107.21.200
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239370639330_1D80T5H13WVAODNQ8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239370639330_1D80T5H13WVAODNQ8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 770657
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: A7CF038F96A84F0DA6998FF3445498EF Ref B: LON04EDGE1011 Ref C: 2024-05-15T11:38:01Z
                            date: Wed, 15 May 2024 11:38:00 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 659775
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 8B46CF8A5C0E46C7A7CBE7B4A4CBA305 Ref B: LON04EDGE1011 Ref C: 2024-05-15T11:38:01Z
                            date: Wed, 15 May 2024 11:38:00 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239370639329_16GDTY03HO5SY2UBG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239370639329_16GDTY03HO5SY2UBG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 835660
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 37C5684213804F1289F246BF53392F7F Ref B: LON04EDGE1011 Ref C: 2024-05-15T11:38:01Z
                            date: Wed, 15 May 2024 11:38:00 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 621794
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: DC93AA17A3CD40B393F35C08403AF34D Ref B: LON04EDGE1011 Ref C: 2024-05-15T11:38:01Z
                            date: Wed, 15 May 2024 11:38:00 GMT
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/stylesheet.css
                            http
                            msedge.exe
                            561 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/stylesheet.css

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/store_logo.png
                            http
                            msedge.exe
                            603 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/store_logo.png

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/back.gif
                            http
                            msedge.exe
                            597 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/back.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_account.gif
                            http
                            msedge.exe
                            607 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_account.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_checkout.gif
                            http
                            msedge.exe
                            608 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_checkout.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_cart.gif
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_cart.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_left.gif
                            http
                            msedge.exe
                            658 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_left.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/pixel_trans.gif
                            http
                            msedge.exe
                            650 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/pixel_trans.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif
                            http
                            msedge.exe
                            664 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif
                            http
                            msedge.exe
                            658 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/sdsdsd.jpg
                            http
                            msedge.exe
                            645 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/sdsdsd.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif
                            http
                            msedge.exe
                            691 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/carta%20cdd.JPG
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/carta%20cdd.JPG

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/table_background_default.gif
                            http
                            msedge.exe
                            617 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/table_background_default.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/rev.jpg
                            http
                            msedge.exe
                            596 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/rev.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/Pikovi.jpg
                            http
                            msedge.exe
                            599 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/Pikovi.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/sup%201.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/sup%201.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/Pikovit.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/Pikovit.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_right.gif
                            http
                            msedge.exe
                            613 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_right.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/p.jpg
                            http
                            msedge.exe
                            594 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/p.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/sup%202.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/sup%202.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif
                            http
                            msedge.exe
                            624 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif
                            http
                            msedge.exe
                            624 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif

                            HTTP Response

                            404
                          • 204.79.197.237:443
                            https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6
                            tls, http2
                            2.5kB
                            9.0kB
                            19
                            16

                            HTTP Request

                            GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=530628298&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6

                            HTTP Response

                            204

                            HTTP Request

                            GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8DZTdE5AFzgYim3_2b2y5YjVUCUzG2VhPAik-T73i2Mz5JUPuyPpe88UvStvo_BuLPr3si1ptncm7zAEqBmrdKO883YTxBEhkBrA_as5osk6IJyz_9IIghxZA-PWt_xhU3gX4pRD3Gpd5XoJx0WzTH8uhzT2af35vKgHTU3hlXLJYjwsC%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJZCUzZDlOMEg2MktaM0JYViUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9UUHRpdGxlX2VuZ2FnZQ%26rlid%3D0aa0756afdfd1a0b87d313415ae7918e&TIME=20240426T130810Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984&muid=B64DD8ED08746C05824A19614CB097A6

                            HTTP Response

                            204
                          • 23.62.61.194:443
                            https://www.bing.com/aes/c.gif?RG=2ef009ec9c2c40698e85bfc7f6a77bb3&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240426T130810Z&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984
                            tls, http2
                            1.5kB
                            5.4kB
                            17
                            13

                            HTTP Request

                            GET https://www.bing.com/aes/c.gif?RG=2ef009ec9c2c40698e85bfc7f6a77bb3&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240426T130810Z&adUnitId=11730597&localId=w:B64DD8ED-0874-6C05-824A-19614CB097A6&deviceId=6825828828100984

                            HTTP Response

                            200
                          • 23.62.61.194:443
                            https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                            tls, http2
                            1.6kB
                            6.4kB
                            17
                            13

                            HTTP Request

                            GET https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

                            HTTP Response

                            200
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.2kB
                            8.1kB
                            16
                            13
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.2kB
                            8.1kB
                            16
                            14
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.2kB
                            8.1kB
                            16
                            13
                          • 204.79.197.200:443
                            https://tse1.mm.bing.net/th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            tls, http2
                            105.8kB
                            3.0MB
                            2177
                            2171

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239370639330_1D80T5H13WVAODNQ8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239370639329_16GDTY03HO5SY2UBG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

                            HTTP Response

                            200

                            HTTP Response

                            200

                            HTTP Response

                            200

                            HTTP Response

                            200
                          • 8.8.8.8:53
                            8.8.8.8.in-addr.arpa
                            dns
                            66 B
                            90 B
                            1
                            1

                            DNS Request

                            8.8.8.8.in-addr.arpa

                          • 8.8.8.8:53
                            232.168.11.51.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            232.168.11.51.in-addr.arpa

                          • 8.8.8.8:53
                            77.190.18.2.in-addr.arpa
                            dns
                            70 B
                            133 B
                            1
                            1

                            DNS Request

                            77.190.18.2.in-addr.arpa

                          • 8.8.8.8:53
                            cdd.net.ua
                            dns
                            msedge.exe
                            56 B
                            72 B
                            1
                            1

                            DNS Request

                            cdd.net.ua

                            DNS Response

                            89.184.88.6

                          • 8.8.8.8:53
                            22.160.190.20.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            22.160.190.20.in-addr.arpa

                          • 8.8.8.8:53
                            6.88.184.89.in-addr.arpa
                            dns
                            70 B
                            102 B
                            1
                            1

                            DNS Request

                            6.88.184.89.in-addr.arpa

                          • 8.8.8.8:53
                            95.221.229.192.in-addr.arpa
                            dns
                            73 B
                            144 B
                            1
                            1

                            DNS Request

                            95.221.229.192.in-addr.arpa

                          • 8.8.8.8:53
                            g.bing.com
                            dns
                            56 B
                            151 B
                            1
                            1

                            DNS Request

                            g.bing.com

                            DNS Response

                            204.79.197.237
                            13.107.21.237

                          • 8.8.8.8:53
                            237.197.79.204.in-addr.arpa
                            dns
                            73 B
                            143 B
                            1
                            1

                            DNS Request

                            237.197.79.204.in-addr.arpa

                          • 224.0.0.251:5353
                            457 B
                            7
                          • 8.8.8.8:53
                            194.61.62.23.in-addr.arpa
                            dns
                            71 B
                            135 B
                            1
                            1

                            DNS Request

                            194.61.62.23.in-addr.arpa

                          • 8.8.8.8:53
                            26.35.223.20.in-addr.arpa
                            dns
                            71 B
                            157 B
                            1
                            1

                            DNS Request

                            26.35.223.20.in-addr.arpa

                          • 8.8.8.8:53
                            50.23.12.20.in-addr.arpa
                            dns
                            70 B
                            156 B
                            1
                            1

                            DNS Request

                            50.23.12.20.in-addr.arpa

                          • 8.8.8.8:53
                            171.39.242.20.in-addr.arpa
                            dns
                            144 B
                            158 B
                            2
                            1

                            DNS Request

                            171.39.242.20.in-addr.arpa

                            DNS Request

                            171.39.242.20.in-addr.arpa

                          • 8.8.8.8:53
                            139.53.16.96.in-addr.arpa
                            dns
                            71 B
                            135 B
                            1
                            1

                            DNS Request

                            139.53.16.96.in-addr.arpa

                          • 8.8.8.8:53
                            79.190.18.2.in-addr.arpa
                            dns
                            70 B
                            133 B
                            1
                            1

                            DNS Request

                            79.190.18.2.in-addr.arpa

                          • 8.8.8.8:53
                            11.227.111.52.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            11.227.111.52.in-addr.arpa

                          • 8.8.8.8:53
                            tse1.mm.bing.net
                            dns
                            62 B
                            173 B
                            1
                            1

                            DNS Request

                            tse1.mm.bing.net

                            DNS Response

                            204.79.197.200
                            13.107.21.200

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                            Filesize

                            152B

                            MD5

                            2daa93382bba07cbc40af372d30ec576

                            SHA1

                            c5e709dc3e2e4df2ff841fbde3e30170e7428a94

                            SHA256

                            1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

                            SHA512

                            65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                            Filesize

                            152B

                            MD5

                            ecdc2754d7d2ae862272153aa9b9ca6e

                            SHA1

                            c19bed1c6e1c998b9fa93298639ad7961339147d

                            SHA256

                            a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

                            SHA512

                            cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                            Filesize

                            5KB

                            MD5

                            b99d6a3c20e2f46157631223f67a7e38

                            SHA1

                            b88968c7f8b11fb6e4ba4504f182d21e2a78a6fe

                            SHA256

                            607655476d8c92a8ada80401c866320faa3b5a38e444b9280e378ab54b9a5889

                            SHA512

                            8af82df5af5ef4596d911a256751e69b139d64c84776c2830510005331ed5b29b5591a11091c79541691945a973dee630b1fb3c72ba35bf466f124830384c568

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                            Filesize

                            6KB

                            MD5

                            2c17d0d4fc93f109ffd4ee4684295312

                            SHA1

                            fd03abfeb278aa95ff903692b2704a975b4d7e2a

                            SHA256

                            cedf3a1eb7467db537cd943593bfc51346727815560ddf118295ae5c694037af

                            SHA512

                            6c5b515396aacbcf068b1685121b520a891e1abe4ad43ee74cc772597055d6a34d0ecfce454cebef8a8e6a0b2709baabba9281079a77c2c3838f26bd584d1512

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                            Filesize

                            16B

                            MD5

                            6752a1d65b201c13b62ea44016eb221f

                            SHA1

                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                            SHA256

                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                            SHA512

                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                            Filesize

                            11KB

                            MD5

                            23d1dd5c6f931fd589ad90329d46945f

                            SHA1

                            c98dba6413f0eae69fa8a2a1e6dddc496c4bf718

                            SHA256

                            39238b7f61678f3aabaea83d7a31ce00e7d35380984d345d72f83d57a228fa95

                            SHA512

                            bb48d323e0d43c0c813385a3477c3025eef82d2813370017f1c48be429aa337a8195d7faaf4c1848d107d223116dea8b61ac91bc460793a17dda61f9eefb70be

                          We care about your privacy.

                          This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.