3d4487912c29b26aadd8a38b06be3a57fc993846b8b05ae517cd175d0b4659c7

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2024, 13:20 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b3b787ced6fd03cfddeaf44651cfe2e9_JaffaCakes118.html
Size

94KB
MD5

b3b787ced6fd03cfddeaf44651cfe2e9
SHA1

e203723b178369082103bda7a18d664b6ebfb688
SHA256

3d4487912c29b26aadd8a38b06be3a57fc993846b8b05ae517cd175d0b4659c7
SHA512

05d8ce67cc983a2cec46c7e50926236c99527a99b056f7d41d05c0e316545b87939a663f335bc882d1879bc07ed711217763d4281c3099f443eeb802257698cd
SSDEEP

1536:zmTrzR5FGsM4/6+p1fhcTo7qefXKhh1MtqpLtHSckYLU3b+2pd8hNivwzTl9mr:z6zR5fM4yUqmXKhhKtqppHJ3U35pd8+r

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1496	msedge.exe
1496	msedge.exe
4796	msedge.exe
4796	msedge.exe
840	identity_helper.exe
840	identity_helper.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe
4172	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 4896	4796	msedge.exe	82
PID 4796 wrote to memory of 4896	4796	msedge.exe	82
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 4800	4796	msedge.exe	84
PID 4796 wrote to memory of 1496	4796	msedge.exe	85
PID 4796 wrote to memory of 1496	4796	msedge.exe	85
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86
PID 4796 wrote to memory of 4504	4796	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b3b787ced6fd03cfddeaf44651cfe2e9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff3c9046f8,0x7fff3c904708,0x7fff3c904718
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1980 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,9723757939614775688,5161499718814679430,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4172

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4804

Network

DNS

www.blogger.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.blogger.com

IN A

Response

www.blogger.com

IN CNAME

blogger.l.google.com

blogger.l.google.com

IN A

142.250.186.73
DNS

ajax.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

ajax.googleapis.com

IN A

Response

ajax.googleapis.com

IN A

142.250.185.170
GET

http://fonts.googleapis.com/css?family=Ropa+Sans

msedge.exe

Remote address:

142.250.185.74:80

Request

GET /css?family=Ropa+Sans HTTP/1.1
Host: fonts.googleapis.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: text/css,*/*;q=0.1
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 16 Jun 2024 13:20:21 GMT
Date: Sun, 16 Jun 2024 13:20:21 GMT
Cache-Control: private, max-age=86400, stale-while-revalidate=604800
Last-Modified: Sun, 16 Jun 2024 13:20:21 GMT
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
GET

http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js

msedge.exe

Remote address:

142.250.185.170:80

Request

GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33845
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 13 Jun 2024 09:07:59 GMT
Expires: Fri, 13 Jun 2025 09:07:59 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 274342
GET

https://www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.css

msedge.exe

Remote address:

142.250.186.73:443

Request

GET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/2.0
host: www.blogger.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.blogger.com/static/v1/widgets/640298382-widgets.js

msedge.exe

Remote address:

142.250.186.73:443

Request

GET /static/v1/widgets/640298382-widgets.js HTTP/2.0
host: www.blogger.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4739011443815551957&zx=ffb543ba-f197-4a4c-a3c8-3a5c40a4fe3b

msedge.exe

Remote address:

142.250.186.73:443

Request

GET /dyn-css/authorization.css?targetBlogID=4739011443815551957&zx=ffb543ba-f197-4a4c-a3c8-3a5c40a4fe3b HTTP/2.0
host: www.blogger.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6XTNp.woff2

msedge.exe

Remote address:

142.250.181.227:80

Request

GET /s/ropasans/v15/EYqxmaNOzLlWtsZSScy6XTNp.woff2 HTTP/1.1
Host: fonts.gstatic.com
Connection: keep-alive
Origin: null
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: */*
Referer: http://fonts.googleapis.com/
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 16896
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 13 Jun 2024 08:19:35 GMT
Expires: Fri, 13 Jun 2025 08:19:35 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 16:57:33 GMT
Content-Type: font/woff2
Age: 277246
DNS

apis.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

apis.google.com

IN A

Response

apis.google.com

IN CNAME

plus.l.google.com

plus.l.google.com

IN A

142.250.185.174
GET

https://apis.google.com/js/plusone.js

msedge.exe

Remote address:

142.250.185.174:443

Request

GET /js/plusone.js HTTP/2.0
host: apis.google.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

xslt.alexa.com

msedge.exe

Remote address:

8.8.8.8:53

Request

xslt.alexa.com

IN A

Response
DNS

lh3.googleusercontent.com

msedge.exe

Remote address:

8.8.8.8:53

Request

lh3.googleusercontent.com

IN A

Response

lh3.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

172.217.16.225
DNS

lh6.googleusercontent.com

msedge.exe

Remote address:

8.8.8.8:53

Request

lh6.googleusercontent.com

IN A

Response

lh6.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

142.250.185.97
DNS

lh4.googleusercontent.com

msedge.exe

Remote address:

8.8.8.8:53

Request

lh4.googleusercontent.com

IN A

Response

lh4.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

172.217.16.225
DNS

lh5.googleusercontent.com

msedge.exe

Remote address:

8.8.8.8:53

Request

lh5.googleusercontent.com

IN A

Response

lh5.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

172.217.16.225
GET

https://lh3.googleusercontent.com/-qhmsX4-oW5s/T-RyKTtVsEI/AAAAAAAABaI/wwMOninSOC8/s32/top-left.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-qhmsX4-oW5s/T-RyKTtVsEI/AAAAAAAABaI/wwMOninSOC8/s32/top-left.png HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh3.googleusercontent.com/-NXZd4ayVnjI/T-RyJVB1r3I/AAAAAAAABaA/b2Srh3HwI3s/s35/social-icon-rss.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-NXZd4ayVnjI/T-RyJVB1r3I/AAAAAAAABaA/b2Srh3HwI3s/s35/social-icon-rss.png HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh3.googleusercontent.com/-j9rF5KwVkns/UF2_bZyAmfI/AAAAAAAAD2k/oJSG6pMhszE/s758/1339670779image-30.jpg

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-j9rF5KwVkns/UF2_bZyAmfI/AAAAAAAAD2k/oJSG6pMhszE/s758/1339670779image-30.jpg HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh3.googleusercontent.com/-oSvsT_B9dWE/UF2_guTDmyI/AAAAAAAAD3c/VADxiUiTCWQ/s758/image-3.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-oSvsT_B9dWE/UF2_guTDmyI/AAAAAAAAD3c/VADxiUiTCWQ/s758/image-3.png HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh3.googleusercontent.com/--5XxV4Nfvgc/UF2_io-3rvI/AAAAAAAAD4A/Jp4QtZhRCTk/s758/image-9.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /--5XxV4Nfvgc/UF2_io-3rvI/AAAAAAAAD4A/Jp4QtZhRCTk/s758/image-9.png HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh3.googleusercontent.com/-IrUA35cPV_A/UF2_e2Tq_NI/AAAAAAAAD3M/7HzvyQzjnjI/s758/1339670793image-33.jpg

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-IrUA35cPV_A/UF2_e2Tq_NI/AAAAAAAAD3M/7HzvyQzjnjI/s758/1339670793image-33.jpg HTTP/2.0
host: lh3.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-x3Qr23x6Yww/T-Rx8L7tyfI/AAAAAAAABXc/9OH_ecFARnk/s10/bg-texture-1.jpg

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-x3Qr23x6Yww/T-Rx8L7tyfI/AAAAAAAABXc/9OH_ecFARnk/s10/bg-texture-1.jpg HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-JZJ7IpVPpyU/T-RyK29Oo1I/AAAAAAAABaY/JFSB03spJI4/s32/top-right.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-JZJ7IpVPpyU/T-RyK29Oo1I/AAAAAAAABaY/JFSB03spJI4/s32/top-right.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-rS5ib24gvyw/T-RyBfYYc_I/AAAAAAAABYU/j5ZHJl-y7Vo/s239/left-block-bottom.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-rS5ib24gvyw/T-RyBfYYc_I/AAAAAAAABYU/j5ZHJl-y7Vo/s239/left-block-bottom.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-OiBjED8Jpsk/T-RyGRbgScI/AAAAAAAABZc/RTzXpPXA2tI/s35/social-icon-facebook.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-OiBjED8Jpsk/T-RyGRbgScI/AAAAAAAABZc/RTzXpPXA2tI/s35/social-icon-facebook.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-mfixzRh9QkE/T-RyJEDZUHI/AAAAAAAABZ8/WCwbo5oIFfc/s35/social-icon-google.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-mfixzRh9QkE/T-RyJEDZUHI/AAAAAAAABZ8/WCwbo5oIFfc/s35/social-icon-google.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-NOPKxa6CeNw/UF2_hjX-PFI/AAAAAAAAD3w/_FhtyY4wuyc/s758/image-7.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-NOPKxa6CeNw/UF2_hjX-PFI/AAAAAAAAD3w/_FhtyY4wuyc/s758/image-7.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-l_GlOUgTjaM/UF2_cmLejlI/AAAAAAAAD2w/pQonNdzolOs/s758/1339670784image-31.jpg

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-l_GlOUgTjaM/UF2_cmLejlI/AAAAAAAAD2w/pQonNdzolOs/s758/1339670784image-31.jpg HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-ltpleu7A0fo/UF2_eh2iP6I/AAAAAAAAD28/vQhyFGARTfE/s758/image-12.png

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-ltpleu7A0fo/UF2_eh2iP6I/AAAAAAAAD28/vQhyFGARTfE/s758/image-12.png HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh6.googleusercontent.com/-g7UaTLwFwxM/UF2_fTlbZAI/AAAAAAAAD3E/0nh4bpQUfYc/s758/1339670797image-34.jpg

msedge.exe

Remote address:

142.250.185.97:443

Request

GET /-g7UaTLwFwxM/UF2_fTlbZAI/AAAAAAAAD3E/0nh4bpQUfYc/s758/1339670797image-34.jpg HTTP/2.0
host: lh6.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-ghHo3sKt6Fs/T-RyERFryUI/AAAAAAAABZQ/YguthuZ7BTE/s14/search-loupe.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-ghHo3sKt6Fs/T-RyERFryUI/AAAAAAAABZQ/YguthuZ7BTE/s14/search-loupe.png HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-cYlEiqk6wxE/T-RyGFg8DkI/AAAAAAAABZg/1TEmwLNCdVY/s35/social-icon-digg.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-cYlEiqk6wxE/T-RyGFg8DkI/AAAAAAAABZg/1TEmwLNCdVY/s35/social-icon-digg.png HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-SapD5GznC84/UF2_hoUp3XI/AAAAAAAAD3s/vQ-sb3B5hIs/s758/image-5.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-SapD5GznC84/UF2_hoUp3XI/AAAAAAAAD3s/vQ-sb3B5hIs/s758/image-5.png HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-t8xfYgo93Fk/UF2_cZK6BRI/AAAAAAAAD2s/oKlaSdWYkf4/s758/1339670788image-32.jpg

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-t8xfYgo93Fk/UF2_cZK6BRI/AAAAAAAAD2s/oKlaSdWYkf4/s758/1339670788image-32.jpg HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-Ec0KSeyWT18/UF2_fThK0GI/AAAAAAAAD3I/bWiIyJdI5X0/s758/image-13.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-Ec0KSeyWT18/UF2_fThK0GI/AAAAAAAAD3I/bWiIyJdI5X0/s758/image-13.png HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh5.googleusercontent.com/-6s0pAGSlKoE/UF2_f8OUPxI/AAAAAAAAD3k/x25DBp9lwNI/s758/image-14.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-6s0pAGSlKoE/UF2_f8OUPxI/AAAAAAAAD3k/x25DBp9lwNI/s758/image-14.png HTTP/2.0
host: lh5.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh4.googleusercontent.com/-hcg4m0Bn0ZQ/T-RyCJEn6nI/AAAAAAAABYk/oOhenIy-87k/s239/left-block-top.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-hcg4m0Bn0ZQ/T-RyCJEn6nI/AAAAAAAABYk/oOhenIy-87k/s239/left-block-top.png HTTP/2.0
host: lh4.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh4.googleusercontent.com/-mr6zhU_OXMw/T-RyILkjJ-I/AAAAAAAABZw/PoyKNSn5Xoc/s35/social-icon-twitter.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-mr6zhU_OXMw/T-RyILkjJ-I/AAAAAAAABZw/PoyKNSn5Xoc/s35/social-icon-twitter.png HTTP/2.0
host: lh4.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh4.googleusercontent.com/-Uxh4725fh7w/UF2_hcb173I/AAAAAAAAD30/sVX6PYqqVJU/s758/image-4.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-Uxh4725fh7w/UF2_hcb173I/AAAAAAAAD30/sVX6PYqqVJU/s758/image-4.png HTTP/2.0
host: lh4.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://lh4.googleusercontent.com/-9V_1_RNbMJw/UF2_iEFaEeI/AAAAAAAAD4M/70I2h70AuGA/s758/image-8.png

msedge.exe

Remote address:

172.217.16.225:443

Request

GET /-9V_1_RNbMJw/UF2_iEFaEeI/AAAAAAAAD4M/70I2h70AuGA/s758/image-8.png HTTP/2.0
host: lh4.googleusercontent.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6UzNpY5I.woff2

msedge.exe

Remote address:

142.250.181.227:80

Request

GET /s/ropasans/v15/EYqxmaNOzLlWtsZSScy6UzNpY5I.woff2 HTTP/1.1
Host: fonts.gstatic.com
Connection: keep-alive
Origin: null
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: */*
Referer: http://fonts.googleapis.com/
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 15 Jun 2024 22:21:03 GMT
Expires: Sun, 15 Jun 2025 22:21:03 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 17:00:59 GMT
Content-Type: font/woff2
Age: 53958
DNS

srv.sayyac.net

msedge.exe

Remote address:

8.8.8.8:53

Request

srv.sayyac.net

IN A

Response

srv.sayyac.net

IN A

31.186.15.180
DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

23.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

23.159.190.20.in-addr.arpa

IN PTR

Response
DNS

170.185.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

170.185.250.142.in-addr.arpa

IN PTR

Response

170.185.250.142.in-addr.arpa

IN PTR

fra16s51-in-f101e100net
DNS

74.185.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

74.185.250.142.in-addr.arpa

IN PTR

Response

74.185.250.142.in-addr.arpa

IN PTR

fra16s48-in-f101e100net
DNS

73.186.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

73.186.250.142.in-addr.arpa

IN PTR

Response

73.186.250.142.in-addr.arpa

IN PTR

fra24s05-in-f91e100net
DNS

144.107.17.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

144.107.17.2.in-addr.arpa

IN PTR

Response

144.107.17.2.in-addr.arpa

IN PTR

a2-17-107-144deploystaticakamaitechnologiescom
DNS

227.181.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

227.181.250.142.in-addr.arpa

IN PTR

Response

227.181.250.142.in-addr.arpa

IN PTR

fra16s56-in-f31e100net
DNS

225.16.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

225.16.217.172.in-addr.arpa

IN PTR

Response

225.16.217.172.in-addr.arpa

IN PTR

mad08s04-in-f11e100net

225.16.217.172.in-addr.arpa

IN PTR

lhr48s28-in-f1�H
DNS

174.185.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.185.250.142.in-addr.arpa

IN PTR

Response

174.185.250.142.in-addr.arpa

IN PTR

fra16s51-in-f141e100net
DNS

97.185.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.185.250.142.in-addr.arpa

IN PTR

Response

97.185.250.142.in-addr.arpa

IN PTR

fra16s49-in-f11e100net
DNS

resources.blogblog.com

msedge.exe

Remote address:

8.8.8.8:53

Request

resources.blogblog.com

IN A

Response

resources.blogblog.com

IN CNAME

blogger.l.google.com

blogger.l.google.com

IN A

142.250.186.73
DNS

developers.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

developers.google.com

IN A

Response

developers.google.com

IN A

216.58.201.110
GET

https://resources.blogblog.com/img/icon18_wrench_allbkg.png

msedge.exe

Remote address:

142.250.186.73:443

Request

GET /img/icon18_wrench_allbkg.png HTTP/2.0
host: resources.blogblog.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

http://srv.sayyac.net/sa.js?_salogin=pes2013indir&_sav=4.3

msedge.exe

Remote address:

31.186.15.180:80

Request

GET /sa.js?_salogin=pes2013indir&_sav=4.3 HTTP/1.1
Host: srv.sayyac.net
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Intervention: <https://permanently-removed.invalid/feature/5718547946799104>; level="warning"
DNT: 1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Server: nginx
Date: Sun, 16 Jun 2024 13:20:22 GMT
Content-Type: application/x-javascript
Content-Length: 0
Last-Modified: Wed, 16 Mar 2022 14:29:23 GMT
Connection: close
ETag: "6231f443-0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Cache-Control: public
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-Ranges: bytes
GET

http://developers.google.com/

msedge.exe

Remote address:

216.58.201.110:80

Request

GET / HTTP/1.1
Host: developers.google.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
DNT: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Location: https://developers.google.com/
X-Cloud-Trace-Context: 6461ae740ce642051658043c62ee705e
Date: Sun, 16 Jun 2024 13:20:22 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
DNS

accounts.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN A

Response

accounts.google.com

IN A

142.250.27.84
GET

https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__

msedge.exe

Remote address:

142.250.27.84:443

Request

GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__ HTTP/2.0
host: accounts.google.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://developers.google.com/

msedge.exe

Remote address:

216.58.201.110:443

Request

GET / HTTP/2.0
host: developers.google.com
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

widgets.amung.us

msedge.exe

Remote address:

8.8.8.8:53

Request

widgets.amung.us

IN A

Response

widgets.amung.us

IN A

104.22.75.171

widgets.amung.us

IN A

104.22.74.171

widgets.amung.us

IN A

172.67.8.141
DNS

www.facebook.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.facebook.com

IN A

Response

www.facebook.com

IN CNAME

star-mini.c10r.facebook.com

star-mini.c10r.facebook.com

IN A

163.70.147.35
GET

http://widgets.amung.us/tab.js

msedge.exe

Remote address:

104.22.75.171:80

Request

GET /tab.js HTTP/1.1
Host: widgets.amung.us
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Date: Sun, 16 Jun 2024 13:20:22 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 12 Jan 2023 17:19:26 GMT
etag: W/"63c0411e-728a"
expires: Mon, 17 Jun 2024 13:20:22 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: REVALIDATED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 894b18cbea770eb2-AMS
alt-svc: h3=":443"; ma=86400
DNS

www.soratemplates.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.soratemplates.com

IN A

Response

www.soratemplates.com

IN CNAME

ghs.google.com

ghs.google.com

IN A

142.250.179.243
GET

http://www.soratemplates.com/

msedge.exe

Remote address:

142.250.179.243:80

Request

GET / HTTP/1.1
Host: www.soratemplates.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
DNT: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Location: https://www.soratemplates.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 16 Jun 2024 13:20:22 GMT
Expires: Sun, 16 Jun 2024 13:20:22 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 194
Server: GSE
DNS

t.dtscout.com

msedge.exe

Remote address:

8.8.8.8:53

Request

t.dtscout.com

IN A

Response

t.dtscout.com

IN A

141.101.120.10

t.dtscout.com

IN A

141.101.120.11
GET

https://t.dtscout.com/i/?l=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2Fb3b787ced6fd03cfddeaf44651cfe2e9_JaffaCakes118.html&j=

msedge.exe

Remote address:

141.101.120.10:443

Request

GET /i/?l=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2Fb3b787ced6fd03cfddeaf44651cfe2e9_JaffaCakes118.html&j= HTTP/2.0
host: t.dtscout.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:20:22 GMT
content-type: application/javascript
x-s: ger1
set-cookie: m=1; Domain=dtscout.com; Expires=Sun, 16-Jun-2024 14:43:42 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
set-cookie: df=1718544022; Domain=dtscout.com; Expires=Tue, 24-Sep-2024 13:20:22 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.226
expires: Sun, 16 Jun 2024 13:20:21 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NM2s16dp8gvhUKV2U%2BXpak%2B39KMXD3ul1OcMB4FoGEtd5coI5WodGGofeVUoF7nbUChiJGaWVxisUdIsbUoBNaQmANKShPW0yTSzyS2%2F7q%2BCQa187I1euHlFe3Tk%2F2s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 894b18cefd3288b6-LHR
content-encoding: br
GET

https://t.dtscout.com/pv/?_a=v&_h=&_ss=1vr3mtafm2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=gb&_pl=d&_cbid=2jil&_cb=_dtspv.c

msedge.exe

Remote address:

141.101.120.10:443

Request

GET /pv/?_a=v&_h=&_ss=1vr3mtafm2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=gb&_pl=d&_cbid=2jil&_cb=_dtspv.c HTTP/2.0
host: t.dtscout.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: m=1
cookie: df=1718544022

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:20:23 GMT
content-type: application/javascript
x-t: 0.118
x-c: 0
expires: Sun, 16 Jun 2024 13:20:22 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PV70J0x%2FJx4swf8RMEy1cFmkFA0NfYWqKcmrACenEtjpGFVGhx%2F%2B%2BDYwNAlRC7l6fCYykwYxtlgTw57bZQzhXVxoBxVifpIaf%2FSoCVV2EBWzGwKsA7Rmr8snsr%2FSoYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 894b18cf9dda88b6-LHR
content-encoding: br
GET

https://www.soratemplates.com/

msedge.exe

Remote address:

142.250.179.243:443

Request

GET / HTTP/2.0
host: www.soratemplates.com
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.soratemplates.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=hitungtotaldata

msedge.exe

Remote address:

142.250.179.243:443

Request

GET /feeds/posts/summary?max-results=1&alt=json-in-script&callback=hitungtotaldata HTTP/2.0
host: www.soratemplates.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.soratemplates.com/favicon.ico

msedge.exe

Remote address:

142.250.179.243:443

Request

GET /favicon.ico HTTP/2.0
host: www.soratemplates.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _ga=GA1.2.1431896476.1718544024
cookie: _gid=GA1.2.1293421993.1718544024
cookie: _gat=1
cookie: _ga_BRCF9TVVM1=GS1.2.1718544024.1.0.1718544024.0.0.0
DNS

110.201.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

110.201.58.216.in-addr.arpa

IN PTR

Response

110.201.58.216.in-addr.arpa

IN PTR

lhr48s48-in-f141e100net

110.201.58.216.in-addr.arpa

IN PTR

prg03s02-in-f110�I

110.201.58.216.in-addr.arpa

IN PTR

prg03s02-in-f14�I
DNS

180.15.186.31.in-addr.arpa

Remote address:

8.8.8.8:53

Request

180.15.186.31.in-addr.arpa

IN PTR

Response

180.15.186.31.in-addr.arpa

IN PTR

reverse-31-186-15-180turkticaretnet
DNS

84.27.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

84.27.250.142.in-addr.arpa

IN PTR

Response

84.27.250.142.in-addr.arpa

IN PTR

ra-in-f841e100net
DNS

35.147.70.163.in-addr.arpa

Remote address:

8.8.8.8:53

Request

35.147.70.163.in-addr.arpa

IN PTR

Response

35.147.70.163.in-addr.arpa

IN PTR

edge-star-mini-shv-01-lhr6facebookcom
DNS

171.75.22.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

171.75.22.104.in-addr.arpa

IN PTR

Response
DNS

243.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

243.179.250.142.in-addr.arpa

IN PTR

Response

243.179.250.142.in-addr.arpa

IN PTR

lhr25s31-in-f191e100net
GET

https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js

msedge.exe

Remote address:

142.250.185.170:443

Request

GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/2.0
host: ajax.googleapis.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

maxcdn.bootstrapcdn.com

msedge.exe

Remote address:

8.8.8.8:53

Request

maxcdn.bootstrapcdn.com

IN A

Response

maxcdn.bootstrapcdn.com

IN A

104.18.11.207

maxcdn.bootstrapcdn.com

IN A

104.18.10.207
DNS

3.bp.blogspot.com

msedge.exe

Remote address:

8.8.8.8:53

Request

3.bp.blogspot.com

IN A

Response

3.bp.blogspot.com

IN CNAME

photos-ugc.l.googleusercontent.com

photos-ugc.l.googleusercontent.com

IN A

142.250.180.1
DNS

blogger.googleusercontent.com

msedge.exe

Remote address:

8.8.8.8:53

Request

blogger.googleusercontent.com

IN A

Response

blogger.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

142.250.185.97
DNS

1.bp.blogspot.com

msedge.exe

Remote address:

8.8.8.8:53

Request

1.bp.blogspot.com

IN A

Response

1.bp.blogspot.com

IN CNAME

photos-ugc.l.googleusercontent.com

photos-ugc.l.googleusercontent.com

IN A

142.250.186.161
GET

https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

msedge.exe

Remote address:

104.18.11.207:443

Request

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/2.0
host: maxcdn.bootstrapcdn.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:20:23 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: FR
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:26:37
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 947
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c4b498d989fef1d3664dfa00faa33903
cdn-cache: HIT
cf-cache-status: HIT
age: 7466216
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 894b18d1df1d6405-LHR
alt-svc: h3=":443"; ma=86400
GET

https://3.bp.blogspot.com/-aW3mFZgMpDE/WaeX8x0HEBI/AAAAAAAAFMA/1qMpwK8duQARyBx0ghaKRq18SrAVMWbawCLcBGAs/s1600/logo.png

msedge.exe

Remote address:

142.250.180.1:443

Request

GET /-aW3mFZgMpDE/WaeX8x0HEBI/AAAAAAAAFMA/1qMpwK8duQARyBx0ghaKRq18SrAVMWbawCLcBGAs/s1600/logo.png HTTP/2.0
host: 3.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://1.bp.blogspot.com/-WwHHnIyYQok/Waea4LcrICI/AAAAAAAADv0/7IDKQ-TC6ucsHFq4qwXmynVdblpMK2vUQCK4BGAYYCw/s400/payments.png

msedge.exe

Remote address:

142.250.186.161:443

Request

GET /-WwHHnIyYQok/Waea4LcrICI/AAAAAAAADv0/7IDKQ-TC6ucsHFq4qwXmynVdblpMK2vUQCK4BGAYYCw/s400/payments.png HTTP/2.0
host: 1.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://4.bp.blogspot.com/-y37k35Pc6TQ/U2UzrFiRmDI/AAAAAAAADrU/CJnhFBGBr_8/s1600/main-content-background.jpg

msedge.exe

Remote address:

142.250.186.161:443

Request

GET /-y37k35Pc6TQ/U2UzrFiRmDI/AAAAAAAADrU/CJnhFBGBr_8/s1600/main-content-background.jpg HTTP/2.0
host: 4.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://4.bp.blogspot.com/-74KOUcC-bUo/U07WETlUW2I/AAAAAAAADao/NVUVE27yx1M/s1600/menu-background.png

msedge.exe

Remote address:

142.250.186.161:443

Request

GET /-74KOUcC-bUo/U07WETlUW2I/AAAAAAAADao/NVUVE27yx1M/s1600/menu-background.png HTTP/2.0
host: 4.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://4.bp.blogspot.com/-ZKD9Zp9PYsY/U2UztC_VBEI/AAAAAAAADro/uQFa9L3_l0s/s1600/main-menu-divider.png

msedge.exe

Remote address:

142.250.186.161:443

Request

GET /-ZKD9Zp9PYsY/U2UztC_VBEI/AAAAAAAADro/uQFa9L3_l0s/s1600/main-menu-divider.png HTTP/2.0
host: 4.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://2.bp.blogspot.com/-KnU2UyhNtPk/U2UzmMDzfgI/AAAAAAAADp4/hefks4jX-ck/s1600/bottom-shadow.png

msedge.exe

Remote address:

142.250.186.161:443

Request

GET /-KnU2UyhNtPk/U2UzmMDzfgI/AAAAAAAADp4/hefks4jX-ck/s1600/bottom-shadow.png HTTP/2.0
host: 2.bp.blogspot.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

googleads.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

172.217.16.194
DNS

connect.facebook.net

msedge.exe

Remote address:

8.8.8.8:53

Request

connect.facebook.net

IN A

Response

connect.facebook.net

IN CNAME

scontent.xx.fbcdn.net

scontent.xx.fbcdn.net

IN A

163.70.147.23
DNS

4.bp.blogspot.com

msedge.exe

Remote address:

8.8.8.8:53

Request

4.bp.blogspot.com

IN A

Response

4.bp.blogspot.com

IN CNAME

photos-ugc.l.googleusercontent.com

photos-ugc.l.googleusercontent.com

IN A

142.250.186.161
DNS

2.bp.blogspot.com

msedge.exe

Remote address:

8.8.8.8:53

Request

2.bp.blogspot.com

IN A

Response

2.bp.blogspot.com

IN CNAME

photos-ugc.l.googleusercontent.com

photos-ugc.l.googleusercontent.com

IN A

142.250.186.161
GET

https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

msedge.exe

Remote address:

104.18.11.207:443

Request

GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/2.0
host: maxcdn.bootstrapcdn.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://www.soratemplates.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:20:23 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: FR
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:51:35
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1072
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6df3deab6c4fb6d13aeb34fee997811a
cdn-cache: HIT
cf-cache-status: HIT
age: 7765833
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 894b18d42e936352-LHR
alt-svc: h3=":443"; ma=86400
DNS

10.120.101.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.120.101.141.in-addr.arpa

IN PTR

Response
DNS

226.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.179.250.142.in-addr.arpa

IN PTR

Response

226.179.250.142.in-addr.arpa

IN PTR

lhr25s31-in-f21e100net
DNS

1.180.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.180.250.142.in-addr.arpa

IN PTR

Response

1.180.250.142.in-addr.arpa

IN PTR

lhr25s32-in-f11e100net
DNS

207.11.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

207.11.18.104.in-addr.arpa

IN PTR

Response
DNS

161.186.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.186.250.142.in-addr.arpa

IN PTR

Response

161.186.250.142.in-addr.arpa

IN PTR

fra24s08-in-f11e100net
DNS

194.16.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.16.217.172.in-addr.arpa

IN PTR

Response

194.16.217.172.in-addr.arpa

IN PTR

fra16s08-in-f1941e100net

194.16.217.172.in-addr.arpa

IN PTR

fra16s08-in-f2�J

194.16.217.172.in-addr.arpa

IN PTR

fra16s65-in-f2�J
DNS

23.147.70.163.in-addr.arpa

Remote address:

8.8.8.8:53

Request

23.147.70.163.in-addr.arpa

IN PTR

Response

23.147.70.163.in-addr.arpa

IN PTR

xx-fbcdn-shv-01-lhr6fbcdnnet
DNS

fundingchoicesmessages.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

fundingchoicesmessages.google.com

IN A

Response

fundingchoicesmessages.google.com

IN CNAME

www3.l.google.com

www3.l.google.com

IN A

142.250.187.238
GET

https://fundingchoicesmessages.google.com/i/ca-pub-7037533604525321?href=https%3A%2F%2Fwww.soratemplates.com&ers=2

msedge.exe

Remote address:

142.250.187.238:443

Request

GET /i/ca-pub-7037533604525321?href=https%3A%2F%2Fwww.soratemplates.com&ers=2 HTTP/2.0
host: fundingchoicesmessages.google.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

238.187.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

238.187.250.142.in-addr.arpa

IN PTR

Response

238.187.250.142.in-addr.arpa

IN PTR

lhr25s34-in-f141e100net
DNS

142.16.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

142.16.217.172.in-addr.arpa

IN PTR

Response

142.16.217.172.in-addr.arpa

IN PTR

fra15s46-in-f141e100net

142.16.217.172.in-addr.arpa

IN PTR

zrh04s06-in-f142�I
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response
DNS

232.181.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

232.181.250.142.in-addr.arpa

IN PTR

Response

232.181.250.142.in-addr.arpa

IN PTR

fra16s56-in-f81e100net
DNS

region1.google-analytics.com

msedge.exe

Remote address:

8.8.8.8:53

Request

region1.google-analytics.com

IN A

Response

region1.google-analytics.com

IN A

216.239.34.36

region1.google-analytics.com

IN A

216.239.32.36
POST

https://region1.google-analytics.com/g/collect?v=2&tid=G-BRCF9TVVM1&gtm=45je46c0v9134928740za200&_p=1718544023720&gcd=13l3l3l3l2&npa=0&dma=0&tcfd=10000&tag_exp=0&ul=en-us&sr=1280x720&cid=1431896476.1718544024&ir=1&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.soratemplates.com%2F&dt=High%20Quality%20Free%20Blogger%20Templates&sid=1718544024&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2633&_z=fetch

msedge.exe

Remote address:

216.239.34.36:443

Request

POST /g/collect?v=2&tid=G-BRCF9TVVM1&gtm=45je46c0v9134928740za200&_p=1718544023720&gcd=13l3l3l3l2&npa=0&dma=0&tcfd=10000&tag_exp=0&ul=en-us&sr=1280x720&cid=1431896476.1718544024&ir=1&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.soratemplates.com%2F&dt=High%20Quality%20Free%20Blogger%20Templates&sid=1718544024&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2633&_z=fetch HTTP/2.0
host: region1.google-analytics.com
content-length: 0
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://www.soratemplates.com
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://www.soratemplates.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

g.bing.com

Remote address:

8.8.8.8:53

Request

g.bing.com

IN A

Response

g.bing.com

IN CNAME

g-bing-com.dual-a-0034.a-msedge.net

g-bing-com.dual-a-0034.a-msedge.net

IN CNAME

dual-a-0034.a-msedge.net

dual-a-0034.a-msedge.net

IN A

204.79.197.237

dual-a-0034.a-msedge.net

IN A

13.107.21.237
GET

https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B

Remote address:

204.79.197.237:443

Request

GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=314C22E633BF66F136213646325F6729; domain=.bing.com; expires=Fri, 11-Jul-2025 13:20:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 313DB7AA33A547FBACFD17BE51FBB996 Ref B: LON04EDGE1215 Ref C: 2024-06-16T13:20:25Z
date: Sun, 16 Jun 2024 13:20:24 GMT
GET

https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B

Remote address:

204.79.197.237:443

Request

GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=314C22E633BF66F136213646325F6729; _EDGE_S=SID=109E3BF75B1E6EA108112F575A496FBD

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MSPTC=5tj_S8wkwZC6xrUpYWR_v2XRg1Db20nssXHFwuS4QY8; domain=.bing.com; expires=Fri, 11-Jul-2025 13:20:25 GMT; path=/; Partitioned; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9FAA9D49AC1B49AC81F25C4A1193AE80 Ref B: LON04EDGE1215 Ref C: 2024-06-16T13:20:25Z
date: Sun, 16 Jun 2024 13:20:25 GMT
GET

https://www.bing.com/aes/c.gif?RG=b62a3748a1d64f9a9a81b4a6650e484b&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T190916Z&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407

Remote address:

2.17.107.120:443

Request

GET /aes/c.gif?RG=b62a3748a1d64f9a9a81b4a6650e484b&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T190916Z&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407 HTTP/2.0
host: www.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=314C22E633BF66F136213646325F6729

Response

HTTP/2.0 200

cache-control: private,no-store
pragma: no-cache
vary: Origin
p3p: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A94BA8BD5A3D410E88E9340F4DD2F682 Ref B: AMS04EDGE1207 Ref C: 2024-06-16T13:20:25Z
content-length: 0
date: Sun, 16 Jun 2024 13:20:25 GMT
set-cookie: _EDGE_S=SID=109E3BF75B1E6EA108112F575A496FBD; path=/; httponly; domain=bing.com
set-cookie: MUIDB=314C22E633BF66F136213646325F6729; path=/; httponly; expires=Fri, 11-Jul-2025 13:20:25 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.746b1102.1718544025.89fcb8
DNS

237.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

237.197.79.204.in-addr.arpa

IN PTR

Response
DNS

36.34.239.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

36.34.239.216.in-addr.arpa

IN PTR

Response
DNS

120.107.17.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

120.107.17.2.in-addr.arpa

IN PTR

Response

120.107.17.2.in-addr.arpa

IN PTR

a2-17-107-120deploystaticakamaitechnologiescom
DNS

whos.amung.us

Remote address:

8.8.8.8:53

Request

whos.amung.us

IN A

Response

whos.amung.us

IN A

104.22.74.171

whos.amung.us

IN A

172.67.8.141

whos.amung.us

IN A

104.22.75.171
DNS

whos.amung.us

Remote address:

8.8.8.8:53

Request

whos.amung.us

IN A

Response

whos.amung.us

IN A

104.22.75.171

whos.amung.us

IN A

172.67.8.141

whos.amung.us

IN A

104.22.74.171
DNS

103.169.127.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.169.127.40.in-addr.arpa

IN PTR

Response
DNS

15.164.165.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

15.164.165.52.in-addr.arpa

IN PTR

Response
DNS

107.12.20.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

107.12.20.2.in-addr.arpa

IN PTR

Response

107.12.20.2.in-addr.arpa

IN PTR

a2-20-12-107deploystaticakamaitechnologiescom
DNS

203.107.17.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

203.107.17.2.in-addr.arpa

IN PTR

Response

203.107.17.2.in-addr.arpa

IN PTR

a2-17-107-203deploystaticakamaitechnologiescom
DNS

21.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.236.111.52.in-addr.arpa

IN PTR

Response
DNS

63.141.182.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

63.141.182.52.in-addr.arpa

IN PTR

Response

142.250.185.74:80

http://fonts.googleapis.com/css?family=Ropa+Sans

http

msedge.exe

658 B
1.3kB
7
7

HTTP Request

GET http://fonts.googleapis.com/css?family=Ropa+Sans

HTTP Response

200
142.250.185.170:80

http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js

http

msedge.exe

1.2kB
36.0kB
19
31

HTTP Request

GET http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js

HTTP Response

200
142.250.186.73:443

https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4739011443815551957&zx=ffb543ba-f197-4a4c-a3c8-3a5c40a4fe3b

tls, http2

msedge.exe

4.5kB
98.4kB
68
87

HTTP Request

GET https://www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.css

HTTP Request

GET https://www.blogger.com/static/v1/widgets/640298382-widgets.js

HTTP Request

GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4739011443815551957&zx=ffb543ba-f197-4a4c-a3c8-3a5c40a4fe3b
142.250.181.227:80

http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6XTNp.woff2

http

msedge.exe

994 B
18.5kB
13
19

HTTP Request

GET http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6XTNp.woff2

HTTP Response

200
142.250.185.174:443

https://apis.google.com/js/plusone.js

tls, http2

msedge.exe

2.5kB
29.3kB
32
31

HTTP Request

GET https://apis.google.com/js/plusone.js
172.217.16.225:443

lh3.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
172.217.16.225:443

https://lh3.googleusercontent.com/-IrUA35cPV_A/UF2_e2Tq_NI/AAAAAAAAD3M/7HzvyQzjnjI/s758/1339670793image-33.jpg

tls, http2

msedge.exe

13.2kB
566.7kB
250
424

HTTP Request

GET https://lh3.googleusercontent.com/-qhmsX4-oW5s/T-RyKTtVsEI/AAAAAAAABaI/wwMOninSOC8/s32/top-left.png

HTTP Request

GET https://lh3.googleusercontent.com/-NXZd4ayVnjI/T-RyJVB1r3I/AAAAAAAABaA/b2Srh3HwI3s/s35/social-icon-rss.png

HTTP Request

GET https://lh3.googleusercontent.com/-j9rF5KwVkns/UF2_bZyAmfI/AAAAAAAAD2k/oJSG6pMhszE/s758/1339670779image-30.jpg

HTTP Request

GET https://lh3.googleusercontent.com/-oSvsT_B9dWE/UF2_guTDmyI/AAAAAAAAD3c/VADxiUiTCWQ/s758/image-3.png

HTTP Request

GET https://lh3.googleusercontent.com/--5XxV4Nfvgc/UF2_io-3rvI/AAAAAAAAD4A/Jp4QtZhRCTk/s758/image-9.png

HTTP Request

GET https://lh3.googleusercontent.com/-IrUA35cPV_A/UF2_e2Tq_NI/AAAAAAAAD3M/7HzvyQzjnjI/s758/1339670793image-33.jpg
172.217.16.225:443

lh3.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
172.217.16.225:443

lh3.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
142.250.185.97:443

lh6.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.5kB
10
11
142.250.185.97:443

lh6.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.5kB
10
11
142.250.185.97:443

https://lh6.googleusercontent.com/-g7UaTLwFwxM/UF2_fTlbZAI/AAAAAAAAD3E/0nh4bpQUfYc/s758/1339670797image-34.jpg

tls, http2

msedge.exe

11.4kB
461.2kB
204
355

HTTP Request

GET https://lh6.googleusercontent.com/-x3Qr23x6Yww/T-Rx8L7tyfI/AAAAAAAABXc/9OH_ecFARnk/s10/bg-texture-1.jpg

HTTP Request

GET https://lh6.googleusercontent.com/-JZJ7IpVPpyU/T-RyK29Oo1I/AAAAAAAABaY/JFSB03spJI4/s32/top-right.png

HTTP Request

GET https://lh6.googleusercontent.com/-rS5ib24gvyw/T-RyBfYYc_I/AAAAAAAABYU/j5ZHJl-y7Vo/s239/left-block-bottom.png

HTTP Request

GET https://lh6.googleusercontent.com/-OiBjED8Jpsk/T-RyGRbgScI/AAAAAAAABZc/RTzXpPXA2tI/s35/social-icon-facebook.png

HTTP Request

GET https://lh6.googleusercontent.com/-mfixzRh9QkE/T-RyJEDZUHI/AAAAAAAABZ8/WCwbo5oIFfc/s35/social-icon-google.png

HTTP Request

GET https://lh6.googleusercontent.com/-NOPKxa6CeNw/UF2_hjX-PFI/AAAAAAAAD3w/_FhtyY4wuyc/s758/image-7.png

HTTP Request

GET https://lh6.googleusercontent.com/-l_GlOUgTjaM/UF2_cmLejlI/AAAAAAAAD2w/pQonNdzolOs/s758/1339670784image-31.jpg

HTTP Request

GET https://lh6.googleusercontent.com/-ltpleu7A0fo/UF2_eh2iP6I/AAAAAAAAD28/vQhyFGARTfE/s758/image-12.png

HTTP Request

GET https://lh6.googleusercontent.com/-g7UaTLwFwxM/UF2_fTlbZAI/AAAAAAAAD3E/0nh4bpQUfYc/s758/1339670797image-34.jpg
142.250.185.97:443

lh6.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.5kB
10
11
172.217.16.225:443

lh5.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
172.217.16.225:443

https://lh5.googleusercontent.com/-6s0pAGSlKoE/UF2_f8OUPxI/AAAAAAAAD3k/x25DBp9lwNI/s758/image-14.png

tls, http2

msedge.exe

6.5kB
208.0kB
105
169

HTTP Request

GET https://lh5.googleusercontent.com/-ghHo3sKt6Fs/T-RyERFryUI/AAAAAAAABZQ/YguthuZ7BTE/s14/search-loupe.png

HTTP Request

GET https://lh5.googleusercontent.com/-cYlEiqk6wxE/T-RyGFg8DkI/AAAAAAAABZg/1TEmwLNCdVY/s35/social-icon-digg.png

HTTP Request

GET https://lh5.googleusercontent.com/-SapD5GznC84/UF2_hoUp3XI/AAAAAAAAD3s/vQ-sb3B5hIs/s758/image-5.png

HTTP Request

GET https://lh5.googleusercontent.com/-t8xfYgo93Fk/UF2_cZK6BRI/AAAAAAAAD2s/oKlaSdWYkf4/s758/1339670788image-32.jpg

HTTP Request

GET https://lh5.googleusercontent.com/-Ec0KSeyWT18/UF2_fThK0GI/AAAAAAAAD3I/bWiIyJdI5X0/s758/image-13.png

HTTP Request

GET https://lh5.googleusercontent.com/-6s0pAGSlKoE/UF2_f8OUPxI/AAAAAAAAD3k/x25DBp9lwNI/s758/image-14.png
172.217.16.225:443

lh4.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
172.217.16.225:443

lh4.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
172.217.16.225:443

https://lh4.googleusercontent.com/-9V_1_RNbMJw/UF2_iEFaEeI/AAAAAAAAD4M/70I2h70AuGA/s758/image-8.png

tls, http2

msedge.exe

3.0kB
29.0kB
32
39

HTTP Request

GET https://lh4.googleusercontent.com/-hcg4m0Bn0ZQ/T-RyCJEn6nI/AAAAAAAABYk/oOhenIy-87k/s239/left-block-top.png

HTTP Request

GET https://lh4.googleusercontent.com/-mr6zhU_OXMw/T-RyILkjJ-I/AAAAAAAABZw/PoyKNSn5Xoc/s35/social-icon-twitter.png

HTTP Request

GET https://lh4.googleusercontent.com/-Uxh4725fh7w/UF2_hcb173I/AAAAAAAAD30/sVX6PYqqVJU/s758/image-4.png

HTTP Request

GET https://lh4.googleusercontent.com/-9V_1_RNbMJw/UF2_iEFaEeI/AAAAAAAAD4M/70I2h70AuGA/s758/image-8.png
142.250.185.97:443

lh6.googleusercontent.com

tls

msedge.exe

1.1kB
9.5kB
12
10
172.217.16.225:443

lh5.googleusercontent.com

tls, http2

msedge.exe

1.0kB
10.7kB
10
11
142.250.185.97:443

lh6.googleusercontent.com

tls

msedge.exe

1.1kB
9.5kB
12
10
172.217.16.225:443

lh4.googleusercontent.com

tls

msedge.exe

1.1kB
9.7kB
12
10
172.217.16.225:443

lh3.googleusercontent.com

tls

msedge.exe

1.1kB
9.7kB
12
10
172.217.16.225:443

lh5.googleusercontent.com

tls, http2

msedge.exe

1.1kB
10.8kB
11
13
142.250.181.227:80

http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6UzNpY5I.woff2

http

msedge.exe

859 B
10.3kB
10
13

HTTP Request

GET http://fonts.gstatic.com/s/ropasans/v15/EYqxmaNOzLlWtsZSScy6UzNpY5I.woff2

HTTP Response

200
172.217.16.225:443

lh5.googleusercontent.com

tls, http2

msedge.exe

1.1kB
10.8kB
11
13
172.217.16.194:445

pagead2.googlesyndication.com

260 B
5
142.250.186.73:443

https://resources.blogblog.com/img/icon18_wrench_allbkg.png

tls, http2

msedge.exe

1.8kB
7.0kB
15
16

HTTP Request

GET https://resources.blogblog.com/img/icon18_wrench_allbkg.png
31.186.15.180:80

http://srv.sayyac.net/sa.js?_salogin=pes2013indir&_sav=4.3

http

msedge.exe

656 B
608 B
5
4

HTTP Request

GET http://srv.sayyac.net/sa.js?_salogin=pes2013indir&_sav=4.3

HTTP Response

200
216.58.201.110:80

http://developers.google.com/

http

msedge.exe

775 B
527 B
7
6

HTTP Request

GET http://developers.google.com/

HTTP Response

301
142.250.27.84:443

https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__

tls, http2

msedge.exe

2.2kB
7.7kB
18
19

HTTP Request

GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__
216.58.201.110:443

https://developers.google.com/

tls, http2

msedge.exe

1.9kB
8.7kB
15
16

HTTP Request

GET https://developers.google.com/
104.22.75.171:80

http://widgets.amung.us/tab.js

http

msedge.exe

947 B
20.6kB
14
21

HTTP Request

GET http://widgets.amung.us/tab.js

HTTP Response

200
163.70.147.35:80

www.facebook.com

msedge.exe

236 B
208 B
5
4
142.250.179.243:80

http://www.soratemplates.com/

http

msedge.exe

775 B
952 B
7
7

HTTP Request

GET http://www.soratemplates.com/

HTTP Response

301
142.250.179.243:80

www.soratemplates.com

msedge.exe

236 B
208 B
5
4
141.101.120.10:443

https://t.dtscout.com/pv/?_a=v&_h=&_ss=1vr3mtafm2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=gb&_pl=d&_cbid=2jil&_cb=_dtspv.c

tls, http2

msedge.exe

2.1kB
7.8kB
18
18

HTTP Request

GET https://t.dtscout.com/i/?l=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2Fb3b787ced6fd03cfddeaf44651cfe2e9_JaffaCakes118.html&j=

HTTP Response

200

HTTP Request

GET https://t.dtscout.com/pv/?_a=v&_h=&_ss=1vr3mtafm2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=gb&_pl=d&_cbid=2jil&_cb=_dtspv.c

HTTP Response

200
142.250.179.243:443

https://www.soratemplates.com/favicon.ico

tls, http2

msedge.exe

3.4kB
46.3kB
40
64

HTTP Request

GET https://www.soratemplates.com/

HTTP Request

GET https://www.soratemplates.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=hitungtotaldata

HTTP Request

GET https://www.soratemplates.com/favicon.ico
142.250.185.170:443

https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js

tls, http2

msedge.exe

2.8kB
41.9kB
36
39

HTTP Request

GET https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
142.250.179.226:139

pagead2.googlesyndication.com

260 B
5
104.18.11.207:443

https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

tls, http2

msedge.exe

2.0kB
14.3kB
19
22

HTTP Request

GET https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

HTTP Response

200
142.250.180.1:443

https://3.bp.blogspot.com/-aW3mFZgMpDE/WaeX8x0HEBI/AAAAAAAAFMA/1qMpwK8duQARyBx0ghaKRq18SrAVMWbawCLcBGAs/s1600/logo.png

tls, http2

msedge.exe

1.9kB
10.5kB
16
18

HTTP Request

GET https://3.bp.blogspot.com/-aW3mFZgMpDE/WaeX8x0HEBI/AAAAAAAAFMA/1qMpwK8duQARyBx0ghaKRq18SrAVMWbawCLcBGAs/s1600/logo.png
142.250.186.161:443

https://2.bp.blogspot.com/-KnU2UyhNtPk/U2UzmMDzfgI/AAAAAAAADp4/hefks4jX-ck/s1600/bottom-shadow.png

tls, http2

msedge.exe

3.0kB
17.6kB
29
36

HTTP Request

GET https://1.bp.blogspot.com/-WwHHnIyYQok/Waea4LcrICI/AAAAAAAADv0/7IDKQ-TC6ucsHFq4qwXmynVdblpMK2vUQCK4BGAYYCw/s400/payments.png

HTTP Request

GET https://4.bp.blogspot.com/-y37k35Pc6TQ/U2UzrFiRmDI/AAAAAAAADrU/CJnhFBGBr_8/s1600/main-content-background.jpg

HTTP Request

GET https://4.bp.blogspot.com/-74KOUcC-bUo/U07WETlUW2I/AAAAAAAADao/NVUVE27yx1M/s1600/menu-background.png

HTTP Request

GET https://4.bp.blogspot.com/-ZKD9Zp9PYsY/U2UztC_VBEI/AAAAAAAADro/uQFa9L3_l0s/s1600/main-menu-divider.png

HTTP Request

GET https://2.bp.blogspot.com/-KnU2UyhNtPk/U2UzmMDzfgI/AAAAAAAADp4/hefks4jX-ck/s1600/bottom-shadow.png
172.217.16.194:443

googleads.g.doubleclick.net

tls, http2

msedge.exe

1.0kB
6.0kB
10
10
163.70.147.23:443

connect.facebook.net

tls

msedge.exe

3.5kB
97.9kB
50
87
104.18.11.207:443

https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

tls, http2

msedge.exe

4.2kB
86.7kB
67
73

HTTP Request

GET https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

HTTP Response

200
142.250.187.238:443

https://fundingchoicesmessages.google.com/i/ca-pub-7037533604525321?href=https%3A%2F%2Fwww.soratemplates.com&ers=2

tls, http2

msedge.exe

3.4kB
79.6kB
48
66

HTTP Request

GET https://fundingchoicesmessages.google.com/i/ca-pub-7037533604525321?href=https%3A%2F%2Fwww.soratemplates.com&ers=2
216.239.34.36:443

https://region1.google-analytics.com/g/collect?v=2&tid=G-BRCF9TVVM1&gtm=45je46c0v9134928740za200&_p=1718544023720&gcd=13l3l3l3l2&npa=0&dma=0&tcfd=10000&tag_exp=0&ul=en-us&sr=1280x720&cid=1431896476.1718544024&ir=1&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.soratemplates.com%2F&dt=High%20Quality%20Free%20Blogger%20Templates&sid=1718544024&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2633&_z=fetch

tls, http2

msedge.exe

2.1kB
7.2kB
15
17

HTTP Request

POST https://region1.google-analytics.com/g/collect?v=2&tid=G-BRCF9TVVM1&gtm=45je46c0v9134928740za200&_p=1718544023720&gcd=13l3l3l3l2&npa=0&dma=0&tcfd=10000&tag_exp=0&ul=en-us&sr=1280x720&cid=1431896476.1718544024&ir=1&uaa=x86&uamb=0&uam=&uap=Windows&uapv=10.0&uaw=0&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.soratemplates.com%2F&dt=High%20Quality%20Free%20Blogger%20Templates&sid=1718544024&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2633&_z=fetch
204.79.197.237:443

https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B

tls, http2

2.5kB
9.0kB
19
17

HTTP Request

GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B

HTTP Response

204

HTTP Request

GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8KZJ5xKc0SQPinT0FypdBCDVUCUzaNmKWLphrFrdVeFSN6pOFyCdej2lSW-4XcrxI2VHlNK98bUoKFAPHZL5ZOIrsxT7U-pdURXkydfaXOSD3bsPt-lAFmnV8a5e1Tw1Ikrr1XERofaf-dm0Cm_a4Ezr1A9Q_ikNYQ20aStuw58GjU9-1%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZnRyeSUzZm9jaWQlM2RjbW05eDUydGw4dw%26rlid%3D1f332469a240167db6c8420102fcaaa3&TIME=20240611T190916Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407&muid=82EA48EC8031841EBBBB3EE75126D09B

HTTP Response

204
2.17.107.120:443

https://www.bing.com/aes/c.gif?RG=b62a3748a1d64f9a9a81b4a6650e484b&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T190916Z&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407

tls, http2

1.4kB
5.3kB
16
11

HTTP Request

GET https://www.bing.com/aes/c.gif?RG=b62a3748a1d64f9a9a81b4a6650e484b&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T190916Z&adUnitId=11730597&localId=w:82EA48EC-8031-841E-BBBB-3EE75126D09B&deviceId=6896198597119407

HTTP Response

200
104.22.74.171:445

whos.amung.us

260 B
5
172.67.8.141:445

whos.amung.us

260 B
5
104.22.75.171:445

whos.amung.us

260 B
5

8.8.8.8:53

www.blogger.com

dns

msedge.exe

61 B
108 B
1
1

DNS Request

www.blogger.com

DNS Response

142.250.186.73
8.8.8.8:53

ajax.googleapis.com

dns

msedge.exe

65 B
81 B
1
1

DNS Request

ajax.googleapis.com

DNS Response

142.250.185.170
8.8.8.8:53

apis.google.com

dns

msedge.exe

61 B
98 B
1
1

DNS Request

apis.google.com

DNS Response

142.250.185.174
8.8.8.8:53

xslt.alexa.com

dns

msedge.exe

60 B
142 B
1
1

DNS Request

xslt.alexa.com
142.250.186.73:443

www.blogger.com

https

msedge.exe

7.5kB
93.9kB
58
87
8.8.8.8:53

lh3.googleusercontent.com

dns

msedge.exe

71 B
116 B
1
1

DNS Request

lh3.googleusercontent.com

DNS Response

172.217.16.225
8.8.8.8:53

lh6.googleusercontent.com

dns

msedge.exe

71 B
116 B
1
1

DNS Request

lh6.googleusercontent.com

DNS Response

142.250.185.97
8.8.8.8:53

lh4.googleusercontent.com

dns

msedge.exe

71 B
116 B
1
1

DNS Request

lh4.googleusercontent.com

DNS Response

172.217.16.225
8.8.8.8:53

lh5.googleusercontent.com

dns

msedge.exe

71 B
116 B
1
1

DNS Request

lh5.googleusercontent.com

DNS Response

172.217.16.225
142.250.185.174:443

apis.google.com

https

msedge.exe

8.1kB
247.9kB
70
187
8.8.8.8:53

srv.sayyac.net

dns

msedge.exe

60 B
76 B
1
1

DNS Request

srv.sayyac.net

DNS Response

31.186.15.180
8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

66 B
90 B
1
1

DNS Request

8.8.8.8.in-addr.arpa
8.8.8.8:53

23.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

23.159.190.20.in-addr.arpa
8.8.8.8:53

170.185.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

170.185.250.142.in-addr.arpa
8.8.8.8:53

74.185.250.142.in-addr.arpa

dns

73 B
112 B
1
1

DNS Request

74.185.250.142.in-addr.arpa
8.8.8.8:53

73.186.250.142.in-addr.arpa

dns

73 B
111 B
1
1

DNS Request

73.186.250.142.in-addr.arpa
8.8.8.8:53

144.107.17.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

144.107.17.2.in-addr.arpa
8.8.8.8:53

227.181.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

227.181.250.142.in-addr.arpa
8.8.8.8:53

225.16.217.172.in-addr.arpa

dns

73 B
140 B
1
1

DNS Request

225.16.217.172.in-addr.arpa
8.8.8.8:53

174.185.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

174.185.250.142.in-addr.arpa
8.8.8.8:53

97.185.250.142.in-addr.arpa

dns

73 B
111 B
1
1

DNS Request

97.185.250.142.in-addr.arpa
172.217.16.225:443

lh5.googleusercontent.com

https

msedge.exe

4.3kB
8.9kB
15
16
8.8.8.8:53

resources.blogblog.com

dns

msedge.exe

68 B
115 B
1
1

DNS Request

resources.blogblog.com

DNS Response

142.250.186.73
8.8.8.8:53

developers.google.com

dns

msedge.exe

67 B
83 B
1
1

DNS Request

developers.google.com

DNS Response

216.58.201.110
8.8.8.8:53

accounts.google.com

dns

msedge.exe

65 B
81 B
1
1

DNS Request

accounts.google.com

DNS Response

142.250.27.84
142.250.185.97:443

lh6.googleusercontent.com

https

msedge.exe

8.4kB
101.3kB
54
87
8.8.8.8:53

widgets.amung.us

dns

msedge.exe

62 B
110 B
1
1

DNS Request

widgets.amung.us

DNS Response

104.22.75.171

104.22.74.171

172.67.8.141
8.8.8.8:53

www.facebook.com

dns

msedge.exe

62 B
107 B
1
1

DNS Request

www.facebook.com

DNS Response

163.70.147.35
8.8.8.8:53

www.soratemplates.com

dns

msedge.exe

67 B
108 B
1
1

DNS Request

www.soratemplates.com

DNS Response

142.250.179.243
8.8.8.8:53

t.dtscout.com

dns

msedge.exe

59 B
91 B
1
1

DNS Request

t.dtscout.com

DNS Response

141.101.120.10

141.101.120.11
8.8.8.8:53

110.201.58.216.in-addr.arpa

dns

73 B
173 B
1
1

DNS Request

110.201.58.216.in-addr.arpa
8.8.8.8:53

180.15.186.31.in-addr.arpa

dns

72 B
123 B
1
1

DNS Request

180.15.186.31.in-addr.arpa
8.8.8.8:53

84.27.250.142.in-addr.arpa

dns

72 B
105 B
1
1

DNS Request

84.27.250.142.in-addr.arpa
8.8.8.8:53

35.147.70.163.in-addr.arpa

dns

72 B
125 B
1
1

DNS Request

35.147.70.163.in-addr.arpa
8.8.8.8:53

171.75.22.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

171.75.22.104.in-addr.arpa
8.8.8.8:53

243.179.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

243.179.250.142.in-addr.arpa
8.8.8.8:53

maxcdn.bootstrapcdn.com

dns

msedge.exe

69 B
101 B
1
1

DNS Request

maxcdn.bootstrapcdn.com

DNS Response

104.18.11.207

104.18.10.207
8.8.8.8:53

3.bp.blogspot.com

dns

msedge.exe

63 B
124 B
1
1

DNS Request

3.bp.blogspot.com

DNS Response

142.250.180.1
8.8.8.8:53

blogger.googleusercontent.com

dns

msedge.exe

75 B
120 B
1
1

DNS Request

blogger.googleusercontent.com

DNS Response

142.250.185.97
8.8.8.8:53

1.bp.blogspot.com

dns

msedge.exe

63 B
124 B
1
1

DNS Request

1.bp.blogspot.com

DNS Response

142.250.186.161
8.8.8.8:53

googleads.g.doubleclick.net

dns

msedge.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

172.217.16.194
142.250.186.161:443

1.bp.blogspot.com

https

msedge.exe

4.1kB
18.6kB
13
19
142.250.180.1:443

3.bp.blogspot.com

https

msedge.exe

4.4kB
29.6kB
18
28
8.8.8.8:53

connect.facebook.net

dns

msedge.exe

66 B
114 B
1
1

DNS Request

connect.facebook.net

DNS Response

163.70.147.23
8.8.8.8:53

4.bp.blogspot.com

dns

msedge.exe

63 B
124 B
1
1

DNS Request

4.bp.blogspot.com

DNS Response

142.250.186.161
8.8.8.8:53

2.bp.blogspot.com

dns

msedge.exe

63 B
124 B
1
1

DNS Request

2.bp.blogspot.com

DNS Response

142.250.186.161
8.8.8.8:53

10.120.101.141.in-addr.arpa

dns

73 B
135 B
1
1

DNS Request

10.120.101.141.in-addr.arpa
8.8.8.8:53

226.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

226.179.250.142.in-addr.arpa
8.8.8.8:53

1.180.250.142.in-addr.arpa

dns

72 B
110 B
1
1

DNS Request

1.180.250.142.in-addr.arpa
8.8.8.8:53

207.11.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

207.11.18.104.in-addr.arpa
8.8.8.8:53

161.186.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

161.186.250.142.in-addr.arpa
8.8.8.8:53

194.16.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

194.16.217.172.in-addr.arpa
8.8.8.8:53

23.147.70.163.in-addr.arpa

dns

72 B
116 B
1
1

DNS Request

23.147.70.163.in-addr.arpa
8.8.8.8:53

fundingchoicesmessages.google.com

dns

msedge.exe

79 B
116 B
1
1

DNS Request

fundingchoicesmessages.google.com

DNS Response

142.250.187.238
142.250.187.238:443

fundingchoicesmessages.google.com

https

msedge.exe

6.3kB
72.8kB
36
61
8.8.8.8:53

238.187.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

238.187.250.142.in-addr.arpa
8.8.8.8:53

142.16.217.172.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

142.16.217.172.in-addr.arpa
8.8.8.8:53

26.35.223.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

26.35.223.20.in-addr.arpa
8.8.8.8:53

232.181.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

232.181.250.142.in-addr.arpa
8.8.8.8:53

region1.google-analytics.com

dns

msedge.exe

74 B
106 B
1
1

DNS Request

region1.google-analytics.com

DNS Response

216.239.34.36

216.239.32.36
8.8.8.8:53

g.bing.com

dns

56 B
151 B
1
1

DNS Request

g.bing.com

DNS Response

204.79.197.237

13.107.21.237
8.8.8.8:53

237.197.79.204.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

237.197.79.204.in-addr.arpa
8.8.8.8:53

36.34.239.216.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

36.34.239.216.in-addr.arpa
8.8.8.8:53

120.107.17.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

120.107.17.2.in-addr.arpa
224.0.0.251:5353

msedge.exe

396 B
6
8.8.8.8:53

whos.amung.us

dns

59 B
107 B
1
1

DNS Request

whos.amung.us

DNS Response

104.22.74.171

172.67.8.141

104.22.75.171
8.8.8.8:53

whos.amung.us

dns

59 B
107 B
1
1

DNS Request

whos.amung.us

DNS Response

104.22.75.171

172.67.8.141

104.22.74.171
8.8.8.8:53

103.169.127.40.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

103.169.127.40.in-addr.arpa
8.8.8.8:53

15.164.165.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

15.164.165.52.in-addr.arpa
8.8.8.8:53

107.12.20.2.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

107.12.20.2.in-addr.arpa
8.8.8.8:53

203.107.17.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

203.107.17.2.in-addr.arpa
8.8.8.8:53

21.236.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

21.236.111.52.in-addr.arpa
8.8.8.8:53

63.141.182.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

63.141.182.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c5abc082d9d9307e797b7e89a2f755f4

SHA1
54c442690a8727f1d3453b6452198d3ec4ec13df

SHA256
a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716

SHA512
ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b4a74bc775caf3de7fc9cde3c30ce482

SHA1
c6ed3161390e5493f71182a6cb98d51c9063775d

SHA256
dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280

SHA512
55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35ab286b-33d6-4f59-bc5a-d5afd4dbe889.tmp

Filesize
6KB

MD5
80d61fbbef4d9d69e8c145fac1b1b392

SHA1
889f53959995a4c4dfdb273929e5130be5fa1c83

SHA256
91651f76fcf3b407ff346a0b4d6a53ad9bfdad3e39ff6f8e55f26b60de8539f9

SHA512
02c1f91fea04f89a2f53c59845de13655168f5b2f49a8ab08d20fa3edc5dc5c3b1bf2f8a0888c39dccd49b2d34c26dfd04d826b16b268a34d409e237bca40cf9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
0b93e55216d99e67a692c3329f9db669

SHA1
1edd451309c6ff0ad325edfd557744f71b2c996d

SHA256
bfe7f9072ed753d2718724914e56852ba60995276d5751fb8d791f575ccf893a

SHA512
8153acce3f82ef4dbf8ccaf64fd82633a21831f351ff1c461421e0c8de0fc46587b3cb023a9fe06e4e5fc12fc339eaf887183fb82b4cb49ddc44df5f35a1de70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
b52767d9b8a7df69b17b306d4d98b49a

SHA1
15c4cf857b91601a8fccd7a402f8ea0adb9570ad

SHA256
84efd321c71d786190a2bfb64c124cbfccb13597ed65af18c375f60715017519

SHA512
81a5f6c0cad89ebe7288eb7b2f4045eb412879328cf7598d5146a70abfa156c376359744b7ff1a19b4343c3a70bd62350d9835053cb5159af52b8e0f0efab1dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
6f47e06a0f56e7a466192026892554f8

SHA1
8deb5541d626c41e1b1271ef2650da7a7a39b842

SHA256
cc2273ca2cb9f25570bd10b0cad949359d81de18fb9d8358f5da5a341e33f4dc

SHA512
327256bc19240dc740569f5602f475e9a287ff1cf5d02be22b96d21aa95b7b126deb26df9fa0ec67fa738cf07adb3b1b407a520a9669453ede81eb187e90370e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1bd9592d0f8d584d528062dd820f874d

SHA1
7856c86a39697ab50826169d243456848565d374

SHA256
d31f87fe67e66493d456f868f162640165338ea5847fbc8941227af17bfd2e2d

SHA512
cbe8388b353cadb5d8bf18eaf05a763aa6d27266681eee0a46969bd6bb5309b55842048ae14918f4eb7bedd442080c4c0d5d643344f4b59166d34d7efc15904b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request