Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/05/2024, 13:58 UTC

General

  • Target

    5f72277991e42ee82c12b7859fc7b420_JaffaCakes118.html

  • Size

    41KB

  • MD5

    5f72277991e42ee82c12b7859fc7b420

  • SHA1

    e53ce2b593e3d3ca7d7350399a236a917a4ccd9c

  • SHA256

    a455953329149b0076676a13ffa1fdd063c3408de20ba6aae270a4a1ab78cfc4

  • SHA512

    af32e5323a4d85f5b9e5a8e9c71268f6908329c6a87c8a2074e141c4fa0b233e9414dce9f0066c2239319ca25acd6c4a727f63f80b971d112c4438a9d2868c97

  • SSDEEP

    192:uw/Hb5nqWnQjxn5Q/enQie9NnbnQOkEntKgnQTbnxnQmSoxqcmA8f3DyESjm2nLX:4Q/U7xIGVTASd28Pdeq

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5f72277991e42ee82c12b7859fc7b420_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2592
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeec7246f8,0x7ffeec724708,0x7ffeec724718
      2⤵
        PID:4740
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2240 /prefetch:2
        2⤵
          PID:4852
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:452
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
          2⤵
            PID:1012
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
            2⤵
              PID:4420
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
              2⤵
                PID:2708
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
                2⤵
                  PID:3868
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
                  2⤵
                    PID:3468
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 /prefetch:8
                    2⤵
                      PID:564
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4472
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
                      2⤵
                        PID:652
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
                        2⤵
                          PID:2148
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,10161039552456935563,14880643187306686482,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:2160
                      • C:\Windows\System32\CompPkgSrv.exe
                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                        1⤵
                          PID:4524
                        • C:\Windows\System32\CompPkgSrv.exe
                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                          1⤵
                            PID:4560

                          Network

                          • flag-us
                            DNS
                            8.8.8.8.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            8.8.8.8.in-addr.arpa
                            IN PTR
                            Response
                            8.8.8.8.in-addr.arpa
                            IN PTR
                            dnsgoogle
                          • flag-us
                            DNS
                            28.118.140.52.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            28.118.140.52.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            cdd.net.ua
                            msedge.exe
                            Remote address:
                            8.8.8.8:53
                            Request
                            cdd.net.ua
                            IN A
                            Response
                            cdd.net.ua
                            IN A
                            89.184.88.6
                          • flag-us
                            DNS
                            cdd.net.ua
                            msedge.exe
                            Remote address:
                            8.8.8.8:53
                            Request
                            cdd.net.ua
                            IN A
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/stylesheet.css
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/stylesheet.css HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: text/css,*/*;q=0.1
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_cart.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_cart.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/store_logo.png
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/store_logo.png HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_checkout.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_checkout.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/back.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/back.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/header_account.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/header_account.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:00 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_right.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_right.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/ABAKTAL.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/ABAKTAL.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/pixel_black.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/pixel_black.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/AVELOX.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/AVELOX.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_buy_now.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/russian/images/buttons/button_buy_now.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/5%20Nok.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/5%20Nok.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/ HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/05_12_20_antibiotiki.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/05_12_20_antibiotiki.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/CLATINOL.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/CLATINOL.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/russian/images/icon.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/english/images/icon.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_left.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_left.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/pixel_trans.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/pixel_trans.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/corner_right_left.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/infobox/arrow_right.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/p.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/p.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/includes/languages/russian/images/buttons/button_quick_find.gif HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-us
                            DNS
                            14.160.190.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            14.160.190.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/bactroban.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/bactroban.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/ban%20maz.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/ban%20maz.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/VAGICINUM-ZDOROVYE.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/VAGICINUM-ZDOROVYE.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/betad.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/betad.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/ban.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/ban.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/gyno-pevaryl.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/gyno-pevaryl.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/gin.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/gin.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:01 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/klion.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/klion.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/klindamic.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/klindamic.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/zal.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/zal.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/Iodoxide.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/Iodoxide.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/fort.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/fort.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/dalacin.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/dalacin.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/DALACIN%201.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/DALACIN%201.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-pl
                            GET
                            http://cdd.net.ua/apothecary/images/zala.jpg
                            msedge.exe
                            Remote address:
                            89.184.88.6:80
                            Request
                            GET /apothecary/images/zala.jpg HTTP/1.1
                            Host: cdd.net.ua
                            Connection: keep-alive
                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
                            DNT: 1
                            Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                            Accept-Encoding: gzip, deflate
                            Accept-Language: en-US,en;q=0.9
                            Response
                            HTTP/1.1 404 Not Found
                            Server: nginx
                            Date: Mon, 20 May 2024 13:59:02 GMT
                            Content-Type: text/html; charset=iso-8859-1
                            Content-Length: 196
                            Connection: keep-alive
                          • flag-us
                            DNS
                            6.88.184.89.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            6.88.184.89.in-addr.arpa
                            IN PTR
                            Response
                            6.88.184.89.in-addr.arpa
                            IN PTR
                            svh16mirohostnet
                          • flag-us
                            DNS
                            240.221.184.93.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            240.221.184.93.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            95.221.229.192.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            95.221.229.192.in-addr.arpa
                            IN PTR
                            Response
                          • flag-nl
                            GET
                            https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                            Remote address:
                            23.62.61.129:443
                            Request
                            GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/2.0
                            host: www.bing.com
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-type: image/png
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            content-length: 1107
                            date: Mon, 20 May 2024 13:59:03 GMT
                            alt-svc: h3=":443"; ma=93600
                            x-cdn-traceid: 0.7d3d3e17.1716213543.122491cc
                          • flag-us
                            DNS
                            43.58.199.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            43.58.199.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            129.61.62.23.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            129.61.62.23.in-addr.arpa
                            IN PTR
                            Response
                            129.61.62.23.in-addr.arpa
                            IN PTR
                            a23-62-61-129deploystaticakamaitechnologiescom
                          • flag-us
                            DNS
                            228.249.119.40.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            228.249.119.40.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            103.169.127.40.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            103.169.127.40.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            56.126.166.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            56.126.166.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            26.35.223.20.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            26.35.223.20.in-addr.arpa
                            IN PTR
                            Response
                          • flag-us
                            DNS
                            tse1.mm.bing.net
                            Remote address:
                            8.8.8.8:53
                            Request
                            tse1.mm.bing.net
                            IN A
                            Response
                            tse1.mm.bing.net
                            IN CNAME
                            mm-mm.bing.net.trafficmanager.net
                            mm-mm.bing.net.trafficmanager.net
                            IN CNAME
                            dual-a-0001.a-msedge.net
                            dual-a-0001.a-msedge.net
                            IN A
                            204.79.197.200
                            dual-a-0001.a-msedge.net
                            IN A
                            13.107.21.200
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 659775
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 1943B2203EC94F77970DC6CECD10D86F Ref B: LON04EDGE1115 Ref C: 2024-05-20T14:00:44Z
                            date: Mon, 20 May 2024 14:00:43 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 621794
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: EB402D0150D34372B6F22CE644C158ED Ref B: LON04EDGE1115 Ref C: 2024-05-20T14:00:44Z
                            date: Mon, 20 May 2024 14:00:43 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239340783939_14IT4JGOWRFC6CMW9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239340783939_14IT4JGOWRFC6CMW9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 792794
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 6910722454CD4E4088A8D5A2283039AB Ref B: LON04EDGE1115 Ref C: 2024-05-20T14:00:44Z
                            date: Mon, 20 May 2024 14:00:43 GMT
                          • flag-us
                            GET
                            https://tse1.mm.bing.net/th?id=OADD2.10239340783938_154JBSOQL12JS43YR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            Remote address:
                            204.79.197.200:443
                            Request
                            GET /th?id=OADD2.10239340783938_154JBSOQL12JS43YR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
                            host: tse1.mm.bing.net
                            accept: */*
                            accept-encoding: gzip, deflate, br
                            user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                            Response
                            HTTP/2.0 200
                            cache-control: public, max-age=2592000
                            content-length: 627437
                            content-type: image/jpeg
                            x-cache: TCP_HIT
                            access-control-allow-origin: *
                            access-control-allow-headers: *
                            access-control-allow-methods: GET, POST, OPTIONS
                            timing-allow-origin: *
                            report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
                            nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                            accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                            x-msedge-ref: Ref A: 6B81F4592EAC4AA493866586B9D6FF92 Ref B: LON04EDGE1115 Ref C: 2024-05-20T14:00:44Z
                            date: Mon, 20 May 2024 14:00:43 GMT
                          • flag-us
                            DNS
                            200.197.79.204.in-addr.arpa
                            Remote address:
                            8.8.8.8:53
                            Request
                            200.197.79.204.in-addr.arpa
                            IN PTR
                            Response
                            200.197.79.204.in-addr.arpa
                            IN PTR
                            a-0001a-msedgenet
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/stylesheet.css
                            http
                            msedge.exe
                            561 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/stylesheet.css

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_cart.gif
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_cart.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/store_logo.png
                            http
                            msedge.exe
                            603 B
                            496 B
                            5
                            3

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/store_logo.png

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_checkout.gif
                            http
                            msedge.exe
                            608 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_checkout.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/back.gif
                            http
                            msedge.exe
                            597 B
                            496 B
                            5
                            3

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/back.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/header_account.gif
                            http
                            msedge.exe
                            1.0kB
                            548 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/header_account.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_right.gif
                            http
                            msedge.exe
                            613 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_right.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/ABAKTAL.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/ABAKTAL.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/pixel_black.gif
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/pixel_black.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/AVELOX.jpg
                            http
                            msedge.exe
                            599 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/AVELOX.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_buy_now.gif
                            http
                            msedge.exe
                            642 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_buy_now.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/5%20Nok.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/5%20Nok.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/
                            http
                            msedge.exe
                            589 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/05_12_20_antibiotiki.jpg
                            http
                            msedge.exe
                            613 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/05_12_20_antibiotiki.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/CLATINOL.jpg
                            http
                            msedge.exe
                            601 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/CLATINOL.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif
                            http
                            msedge.exe
                            624 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/russian/images/icon.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif
                            http
                            msedge.exe
                            624 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/english/images/icon.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_left.gif
                            http
                            msedge.exe
                            612 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_left.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/pixel_trans.gif
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/pixel_trans.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif
                            http
                            msedge.exe
                            618 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/corner_right_left.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif
                            http
                            msedge.exe
                            612 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/infobox/arrow_right.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/p.jpg
                            http
                            msedge.exe
                            594 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/p.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif
                            http
                            msedge.exe
                            691 B
                            576 B
                            6
                            5

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/includes/languages/russian/images/buttons/button_quick_find.gif

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/bactroban.jpg
                            http
                            msedge.exe
                            602 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/bactroban.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/ban%20maz.jpg
                            http
                            msedge.exe
                            700 B
                            940 B
                            7
                            5

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/ban%20maz.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/VAGICINUM-ZDOROVYE.jpg
                            http
                            msedge.exe
                            709 B
                            940 B
                            7
                            5

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/VAGICINUM-ZDOROVYE.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/betad.jpg
                            http
                            msedge.exe
                            696 B
                            940 B
                            7
                            5

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/betad.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/ban.jpg
                            http
                            msedge.exe
                            694 B
                            940 B
                            7
                            5

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/ban.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/gyno-pevaryl.jpg
                            http
                            msedge.exe
                            1.0kB
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/gyno-pevaryl.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/gin.jpg
                            http
                            msedge.exe
                            596 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/gin.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/klion.jpg
                            http
                            msedge.exe
                            650 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/klion.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/klindamic.jpg
                            http
                            msedge.exe
                            654 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/klindamic.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/zal.jpg
                            http
                            msedge.exe
                            648 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/zal.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/Iodoxide.jpg
                            http
                            msedge.exe
                            653 B
                            536 B
                            6
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/Iodoxide.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/fort.jpg
                            http
                            msedge.exe
                            597 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/fort.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/dalacin.jpg
                            http
                            msedge.exe
                            600 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/dalacin.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/DALACIN%201.jpg
                            http
                            msedge.exe
                            604 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/DALACIN%201.jpg

                            HTTP Response

                            404
                          • 89.184.88.6:80
                            http://cdd.net.ua/apothecary/images/zala.jpg
                            http
                            msedge.exe
                            597 B
                            536 B
                            5
                            4

                            HTTP Request

                            GET http://cdd.net.ua/apothecary/images/zala.jpg

                            HTTP Response

                            404
                          • 23.62.61.129:443
                            https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                            tls, http2
                            1.5kB
                            6.4kB
                            18
                            12

                            HTTP Request

                            GET https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

                            HTTP Response

                            200
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.2kB
                            8.1kB
                            15
                            11
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.3kB
                            9.5kB
                            17
                            15
                          • 204.79.197.200:443
                            https://tse1.mm.bing.net/th?id=OADD2.10239340783938_154JBSOQL12JS43YR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
                            tls, http2
                            100.3kB
                            2.8MB
                            2035
                            2032

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239360931612_153L2SVWUYAQUME4E&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239360931611_1SOG5TNNJKE1WH1R0&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239340783939_14IT4JGOWRFC6CMW9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

                            HTTP Request

                            GET https://tse1.mm.bing.net/th?id=OADD2.10239340783938_154JBSOQL12JS43YR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

                            HTTP Response

                            200

                            HTTP Response

                            200

                            HTTP Response

                            200

                            HTTP Response

                            200
                          • 204.79.197.200:443
                            tse1.mm.bing.net
                            tls, http2
                            1.3kB
                            9.5kB
                            17
                            15
                          • 8.8.8.8:53
                            8.8.8.8.in-addr.arpa
                            dns
                            66 B
                            90 B
                            1
                            1

                            DNS Request

                            8.8.8.8.in-addr.arpa

                          • 8.8.8.8:53
                            28.118.140.52.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            28.118.140.52.in-addr.arpa

                          • 8.8.8.8:53
                            cdd.net.ua
                            dns
                            msedge.exe
                            112 B
                            72 B
                            2
                            1

                            DNS Request

                            cdd.net.ua

                            DNS Request

                            cdd.net.ua

                            DNS Response

                            89.184.88.6

                          • 8.8.8.8:53
                            14.160.190.20.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            14.160.190.20.in-addr.arpa

                          • 8.8.8.8:53
                            6.88.184.89.in-addr.arpa
                            dns
                            70 B
                            102 B
                            1
                            1

                            DNS Request

                            6.88.184.89.in-addr.arpa

                          • 8.8.8.8:53
                            240.221.184.93.in-addr.arpa
                            dns
                            73 B
                            144 B
                            1
                            1

                            DNS Request

                            240.221.184.93.in-addr.arpa

                          • 8.8.8.8:53
                            95.221.229.192.in-addr.arpa
                            dns
                            73 B
                            144 B
                            1
                            1

                            DNS Request

                            95.221.229.192.in-addr.arpa

                          • 8.8.8.8:53
                            43.58.199.20.in-addr.arpa
                            dns
                            71 B
                            157 B
                            1
                            1

                            DNS Request

                            43.58.199.20.in-addr.arpa

                          • 8.8.8.8:53
                            129.61.62.23.in-addr.arpa
                            dns
                            71 B
                            135 B
                            1
                            1

                            DNS Request

                            129.61.62.23.in-addr.arpa

                          • 224.0.0.251:5353
                            522 B
                            8
                          • 8.8.8.8:53
                            228.249.119.40.in-addr.arpa
                            dns
                            73 B
                            159 B
                            1
                            1

                            DNS Request

                            228.249.119.40.in-addr.arpa

                          • 8.8.8.8:53
                            103.169.127.40.in-addr.arpa
                            dns
                            73 B
                            147 B
                            1
                            1

                            DNS Request

                            103.169.127.40.in-addr.arpa

                          • 8.8.8.8:53
                            56.126.166.20.in-addr.arpa
                            dns
                            72 B
                            158 B
                            1
                            1

                            DNS Request

                            56.126.166.20.in-addr.arpa

                          • 8.8.8.8:53
                            26.35.223.20.in-addr.arpa
                            dns
                            71 B
                            157 B
                            1
                            1

                            DNS Request

                            26.35.223.20.in-addr.arpa

                          • 8.8.8.8:53
                            tse1.mm.bing.net
                            dns
                            62 B
                            173 B
                            1
                            1

                            DNS Request

                            tse1.mm.bing.net

                            DNS Response

                            204.79.197.200
                            13.107.21.200

                          • 8.8.8.8:53
                            200.197.79.204.in-addr.arpa
                            dns
                            73 B
                            106 B
                            1
                            1

                            DNS Request

                            200.197.79.204.in-addr.arpa

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                            Filesize

                            152B

                            MD5

                            537815e7cc5c694912ac0308147852e4

                            SHA1

                            2ccdd9d9dc637db5462fe8119c0df261146c363c

                            SHA256

                            b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

                            SHA512

                            63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                            Filesize

                            152B

                            MD5

                            8b167567021ccb1a9fdf073fa9112ef0

                            SHA1

                            3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

                            SHA256

                            26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

                            SHA512

                            726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                            Filesize

                            5KB

                            MD5

                            66a7317530786d6c4028a17512d37c0a

                            SHA1

                            ba2dad06cec08f5765a9c6e9dc4fb119fb33c42b

                            SHA256

                            29d8266cddd068bffd75b09c8a2f882044d48745b38f95645306050006641928

                            SHA512

                            98dc2fd4e97777f4a36329bc1b325ff676de5d0642b6048e001a93e842de4aa55da5878d4b378c2cb9be3231e2c53071177fffbe4df357e7de880039474dae22

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                            Filesize

                            6KB

                            MD5

                            2af9864a44723a35c4dcca73e95dec18

                            SHA1

                            5a90bea553aa44fceb25e8fc840402c30de9e1e0

                            SHA256

                            9c7403fdd147a000757940d8f9090ff4c3daae9fa2a8dd5697ca89c272bf8e00

                            SHA512

                            c22ffa248dfe2077f12ba5c007ee01efe345d80dfb2ab2dad5bfaeeab54a163e7d7b5782c7df65615c9dcfe9b1fc30e963e5ca91374fbba2dc9d7d64af1397a5

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                            Filesize

                            16B

                            MD5

                            6752a1d65b201c13b62ea44016eb221f

                            SHA1

                            58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                            SHA256

                            0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                            SHA512

                            9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                          • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                            Filesize

                            11KB

                            MD5

                            3d07afa3f1d35fddfac509b07d44808b

                            SHA1

                            acba76eadee59794e8aa0c1784eaf3880e3dabae

                            SHA256

                            7db4875635c1a4e923fedee8144a879fbc3eedf13e6a44e06e4a046eab16bcca

                            SHA512

                            75c80f6fe85999a67506008a99d0c933da4ecb54b2f4f78d9b48e76e0ae9b661eecaa136b0c573df595b8e31f991383eeefdb7f428bdfccf765430b6d78a457e

                          We care about your privacy.

                          This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.