Help
RSS
API
Feed
Maltego
Contact
Domain > thepacketrat.com
×
Welcome!
Right click nodes and scroll the mouse to navigate the graph.
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2015-02-19
65.254.250.114
(
ClassC
)
2024-08-29
192.0.78.25
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Thu, 29 Aug 2024 05:17:29 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveLocation: https://thepacketrat.com/X-ac: 3.sea _bur BYPASSAlt-Svc: h3:443; ma86400 html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>nginx/center>/body>/html>
Port 443
HTTP/1.1 200 OKServer: nginxDate: Thu, 29 Aug 2024 05:17:30 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveStrict-Transport-Security: max-age31536000Vary: Accept-EncodingX-hacker: Want root? Visit join.a8c.com/hacker and mention this header.Host-Header: WordPress.comVary: accept, content-type, cookieLink: https://wp.me/321Kt>; relshortlinkX-ac: 3.sea _bur MISSAlt-Svc: h3:443; ma86400 !DOCTYPE html>html classno-js langen> head> meta charsetUTF-8> meta nameviewport contentwidthdevice-width, initial-scale1.0 > link relprofile hrefhttps://gmpg.org/xfn/11> title>The Packet Rat – The Packet Rat: sniffing my way through cyberspace/title>meta namerobots contentmax-image-preview:large />!-- Async WordPress.com Remote Login -->script idwpcom_remote_login_js>var wpcom_remote_login_extra_auth ;function wpcom_remote_login_remove_dom_node_id( element_id ) { var dom_node document.getElementById( element_id ); if ( dom_node ) { dom_node.parentNode.removeChild( dom_node ); }}function wpcom_remote_login_remove_dom_node_classes( class_name ) { var dom_nodes document.querySelectorAll( . + class_name ); for ( var i 0; i dom_nodes.length; i++ ) { dom_nodes i .parentNode.removeChild( dom_nodes i ); }}function wpcom_remote_login_final_cleanup() { wpcom_remote_login_remove_dom_node_classes( wpcom_remote_login_msg ); wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key ); wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_validate ); wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_js ); wpcom_remote_login_remove_dom_node_id( wpcom_request_access_iframe ); wpcom_remote_login_remove_dom_node_id( wpcom_request_access_styles );}// Watch for messages back from the remote loginwindow.addEventListener( message, function( e ) { if ( e.origin https://r-login.wordpress.com ) { var data {}; try { data JSON.parse( e.data ); } catch( e ) { wpcom_remote_login_final_cleanup(); return; } if ( data.msg LOGIN ) { // Clean up the login check iframe wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key ); var id_regex new RegExp( /^0-9+$/ ); var token_regex new RegExp( /^.*|.*|.*$/ ); if ( token_regex.test( data.token ) && id_regex.test( data.wpcomid ) ) { // We have everything we need to ask for a login var script document.createElement( script ); script.setAttribute( id, wpcom_remote_login_validate ); script.src /remote-login.php?wpcom_remote_loginvalidate + &wpcomid + data.wpcomid + &token + encodeURIComponent( data.token ) + &host + window.location.protocol + // + window.location.hostname + &postid38 + &is_singular; document.body.appendChild( script ); } return; } // Safari ITP, not logged in, so redirect if ( data.msg LOGIN-REDIRECT ) { window.location https://wordpress.com/log-in?redirect_to + window.location.href; return; } // Safari ITP, storage access failed, remove the request if ( data.msg LOGIN-REMOVE ) { var css_zap html { -webkit-transition: margin-top 1s; transition: margin-top 1s; } /* 9001 */ html { margin-top: 0 !important; } * html body { margin-top: 0 !important; } @media screen and ( max-width: 782px ) { html { margin-top: 0 !important; } * html body { margin-top: 0 !important; } }; var style_zap document.createElement( style ); style_zap.type text/css; style_zap.appendChild( document.createTextNode( css_zap ) ); document.body.appendChild( style_zap ); var e document.getElementById( wpcom_request_access_iframe ); e.parentNode.removeChild( e ); document.cookie wordpress_com_login_accessdenied; path/; max-age31536000; return; } // Safari ITP if ( data.msg REQUEST_ACCESS ) { console.log( request access: safari ); // Check ITP iframe enable/disable knob if ( wpcom_remote_login_extra_auth ! safari_itp_iframe ) { return; } // If we are in a private window there is no ITP. var private_window false; try { var opendb window.openDatabase( null, null, null, null ); } catch( e ) { private_window true; } if ( private_window ) { console.log( private window ); return; } var iframe document.createElement( iframe ); iframe.id wpcom_request_access_iframe; iframe.setAttribute( scrolling, no ); iframe.setAttribute( sandbox, allow-storage-access-by-user-activation allow-scripts allow-same-origin allow-top-navigation-by-user-activation ); iframe.src https://r-login.wordpress.com/remote-login.php?wpcom_remote_loginrequest_access&origin + encodeURIComponent( data.origin ) + &wpcomid + encodeURIComponent( data.wpcomid ); var css html { -webkit-transition: margin-top 1s; transition: margin-top 1s; } /* 9001 */ html { margin-top: 46px !important; } * html body { margin-top: 46px !important; } @media screen and ( max-width: 660px ) { html { margin-top: 71px !important; } * html body { margin-top: 71px !important; } #wpcom_request_access_iframe { display: block; height: 71px !important; } } #wpcom_request_access_iframe { border: 0px; height: 46px; position: fixed; top: 0; left: 0; width: 100%; min-width: 100%; z-index: 99999; background: #23282d; } ; var style document.createElement( style ); style.type text/css; style.id wpcom_request_access_styles; style.appendChild( document.createTextNode( css ) ); document.body.appendChild( style ); document.body.appendChild( iframe ); } if ( data.msg DONE ) { wpcom_remote_login_final_cleanup(); } }}, false );// Inject the remote login iframe after the page has had a chance to load// more critical resourceswindow.addEventListener( DOMContentLoaded, function( e ) { var iframe document.createElement( iframe ); iframe.style.display none; iframe.setAttribute( scrolling, no ); iframe.setAttribute( id, wpcom_remote_login_key ); iframe.src https://r-login.wordpress.com/remote-login.php + ?wpcom_remote_loginkey + &originaHR0cHM6Ly90aGVwYWNrZXRyYXQuY29t + &wpcomid44812389 + &time1724908649; document.body.appendChild( iframe );}, false );/script>link reldns-prefetch href//s1.wp.com />link reldns-prefetch href//s2.wp.com />link reldns-prefetch href//s0.wp.com />link reldns-prefetch href//s.pubmine.com />link reldns-prefetch href//x.bidswitch.net />link reldns-prefetch href//static.criteo.net />link reldns-prefetch href//ib.adnxs.com />link reldns-prefetch href//aax.amazon-adsystem.com />link reldns-prefetch href//bidder.criteo.com />link reldns-prefetch href//cas.criteo.com />link reldns-prefetch href//gum.criteo.com />link reldns-prefetch href//ads.pubmatic.com />link reldns-prefetch href//gads.pubmatic.com />link reldns-prefetch href//tpc.googlesyndication.com />link reldns-prefetch href//ad.doubleclick.net />link reldns-prefetch href//googleads.g.doubleclick.net />link reldns-prefetch href//www.googletagservices.com />link reldns-prefetch href//cdn.switchadhub.com />link reldns-prefetch href//delivery.g.switchadhub.com />link reldns-prefetch href//delivery.swid.switchadhub.com />link reldns-prefetch href//a.teads.tv />link reldns-prefetch href//prebid.media.net />link reldns-prefetch href//adserver-us.adtech.advertising.com />link reldns-prefetch href//fastlane.rubiconproject.com />link reldns-prefetch href//prebid-server.rubiconproject.com />link reldns-prefetch href//hb-api.omnitagjs.com />link reldns-prefetch href//mtrx.go.sonobi.com />link reldns-prefetch href//apex.go.sonobi.com />link reldns-prefetch href//u.openx.net />link relalternate typeapplication/rss+xml titleThe Packet Rat » Feed hrefhttps://thepacketrat.com/feed/ />link relalternate typeapplication/rss+xml titleThe Packet Rat » Comments Feed hrefhttps://thepacketrat.com/comments/feed/ /> script typetext/javascript> /* !CDATA */ function addLoadEvent(func) { var oldonload window.onload; if (typeof window.onload ! function) { window.onload func; } else { window.onload function () { oldonload(); func(); } } } /* > */ /script> script>window._wpemojiSettings {baseUrl:https:\/\/s0.wp.com\/wp-content\/mu-plugins\/wpcom-smileys\/twemoji\/2\/72x72\/,ext:.png,svgUrl:https:\/\/s0.wp.com\/wp-content\/mu-plugins\/wpcom-smileys\/twemoji\/2\/svg\/,svgExt:.svg,source:{concatemoji:https:\/\/s1.wp.com\/wp-includes\/js\/wp-emoji-release.min.js?m1719498190i&ver6.6.1-alpha-58760}};/*! This file is auto-generated */!function(i,n){var o,s,e;function c(e){try{var t{supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var tnew Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return ert})}function u(e,t,n){switch(t){caseflag:return n(e,\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f,\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f)?!1:!n(e,\ud83c\uddfa\ud83c\uddf3,\ud83c\uddfa\u200b\ud83c\uddf3)&&!n(e,\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f,\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f);caseemoji:return!n(e,\ud83d\udc26\u200d\u2b1b,\ud83d\udc26\u200b\u2b1b)}return!1}function f(e,t,n){var rundefined!typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement(canvas),ar.getContext(2d,{willReadFrequently:!0}),o(a.textBaselinetop,a.font600 32px Arial,{});return e.forEach(function(e){oet(a,e,n)}),o}function t(e){var ti.createElement(script);t.srce,t.defer!0,i.head.appendChild(t)}undefined!typeof Promise&&(owpEmojiSettingsSupports,sflag,emoji,n.supports{everything:!0,everythingExceptFlag:!0},enew Promise(function(e){i.addEventListener(DOMContentLoaded,e,{once:!0})}),new Promise(function(t){var nfunction(){try{var eJSON.parse(sessionStorage.getItem(o));if(objecttypeof e&&numbertypeof e.timestamp&&(new Date).valueOf()e.timestamp+604800&&objecttypeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if(undefined!typeof Worker&&undefined!typeof OffscreenCanvas&&undefined!typeof URL&&URL.createObjectURL&&undefined!typeof Blob)try{var epostMessage(+f.toString()+(+JSON.stringify(s),u.toString(),p.toString().join(,)+));,rnew Blob(e,{type:text/javascript}),anew Worker(URL.createObjectURL(r),{name:wpTestEmojiSupports});return void(a.onmessagefunction(e){c(ne.data),a.terminate(),t(n)})}catch(e){}c(nf(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supportstet,n.supports.everythingn.supports.everything&&n.supportst,flag!t&&(n.supports.everythingExceptFlagn.supports.everythingExceptFlag&&n.supportst);n.supports.everythingExceptFlagn.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady!1,n.readyCallbackfunction(){n.DOMReady!0}}).then(function(){return e}).then(function(){var e;n.supports.everything||(n.readyCallback(),(en.source||{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window._wpemojiSettings);/script>link crossoriginanonymous relstylesheet idall-css-0-1 hrefhttps://s0.wp.com/_static/??/wp-content/blog-plugins/wordads/global.css,/wp-content/mu-plugins/widgets/eu-cookie-law/templates/style.css?m1642463000j&cssminifyyes typetext/css mediaall />style idwp-emoji-styles-inline-css> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 0.07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; }/style>link crossoriginanonymous relstylesheet idall-css-2-1 hrefhttps://s2.wp.com/wp-content/plugins/gutenberg-core/v19.0.0/build/block-library/style.css?m1723658785i&cssminifyyes typetext/css mediaall />style idwp-block-library-inline-css>.has-text-align-justify { text-align:justify;}.has-text-align-justify{text-align:justify;}/style>link crossoriginanonymous relstylesheet idall-css-4-1 hrefhttps://s2.wp.com/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpoZmFkYGRuZGmQBAHPvL0Y&cssminifyyes typetext/css mediaall />style idjetpack-sharing-buttons-style-inline-css>.jetpack-sharing-buttons__services-list{display:flex;flex-direction:row;flex-wrap:wrap;gap:0;list-style-type:none;margin:5px;padding:0}.jetpack-sharing-buttons__services-list.has-small-icon-size{font-size:12px}.jetpack-sharing-buttons__services-list.has-normal-icon-size{font-size:16px}.jetpack-sharing-buttons__services-list.has-large-icon-size{font-size:24px}.jetpack-sharing-buttons__services-list.has-huge-icon-size{font-size:36px}@media print{.jetpack-sharing-buttons__services-list{display:none!important}}.editor-styles-wrapper .wp-block-jetpack-sharing-buttons{gap:0;padding-inline-start:0}ul.jetpack-sharing-buttons__services-list.has-background{padding:1.25em 2.375em}/style>link crossoriginanonymous relstylesheet idall-css-6-1 hrefhttps://s2.wp.com/_static/??-eJyVjEEOwiAQAD/ksgGN4sH4Fko3hJYCYZea/r49mF6Nx0lmBj8VfMlCWbCmHmJmDP3AgVqAIRU/M04k1fkZkttKFwgtjsiyJVKe+YL/LJqTmAP/yH35ZkZpqzRwXGoiaLSqG46R5TTgHL2Xl75bba/GPB/TDthVT3U&cssminifyyes typetext/css mediaall />style idclassic-theme-styles-inline-css>/*! This file is auto-generated */.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}/style>link crossoriginanonymous relstylesheet idall-css-8-1 hrefhttps://s1.wp.com/_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m1432920480j&cssminifyyes typetext/css mediaall />style idglobal-styles-inline-css>:root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--accent: #e22658;--wp--preset--color--primary: #000000;--wp--preset--color--secondary: #6d6d6d;--wp--preset--color--subtle-background: #dbdbdb;--wp--preset--color--background: #ffffff;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 18px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 26.25px;--wp--preset--font-size--x-large: 42px;--wp--preset--font-size--normal: 21px;--wp--preset--font-size--larger: 32px;--wp--preset--font-family--albert-sans: Albert Sans, sans-serif;--wp--preset--font-family--alegreya: Alegreya, serif;--wp--preset--font-family--arvo: Arvo, serif;--wp--preset--font-family--bodoni-moda: Bodoni Moda, serif;--wp--preset--font-family--bricolage-grotesque: Bricolage Grotesque, sans-serif;--wp--preset--font-family--cabin: Cabin, sans-serif;--wp--preset--font-family--chivo: Chivo, sans-serif;--wp--preset--font-family--commissioner: Commissioner, sans-serif;--wp--preset--font-family--cormorant: Cormorant, serif;--wp--preset--font-family--courier-prime: Courier Prime, monospace;--wp--preset--font-family--crimson-pro: Crimson Pro, serif;--wp--preset--font-family--dm-mono: DM Mono, monospace;--wp--preset--font-family--dm-sans: DM Sans, sans-serif;--wp--preset--font-family--dm-serif-display: DM Serif Display, serif;--wp--preset--font-family--domine: Domine, serif;--wp--preset--font-family--eb-garamond: EB Garamond, serif;--wp--preset--font-family--epilogue: Epilogue, sans-serif;--wp--preset--font-family--fahkwang: Fahkwang, sans-serif;--wp--preset--font-family--figtree: Figtree, sans-serif;--wp--preset--font-family--fira-sans: Fira Sans, sans-serif;--wp--preset--font-family--fjalla-one: Fjalla One, sans-serif;--wp--preset--font-family--fraunces: Fraunces, serif;--wp--preset--font-family--gabarito: Gabarito, system-ui;--wp--preset--font-family--ibm-plex-mono: IBM Plex Mono, monospace;--wp--preset--font-family--ibm-plex-sans: IBM Plex Sans, sans-serif;--wp--preset--font-family--ibarra-real-nova: Ibarra Real Nova, serif;--wp--preset--font-family--instrument-serif: Instrument Serif, serif;--wp--preset--font-family--inter: Inter, sans-serif;--wp--preset--font-family--josefin-sans: Josefin Sans, sans-serif;--wp--preset--font-family--jost: Jost, sans-serif;--wp--preset--font-family--libre-baskerville: Libre Baskerville, serif;--wp--preset--font-family--libre-franklin: Libre Franklin, sans-serif;--wp--preset--font-family--literata: Literata, serif;--wp--preset--font-family--lora: Lora, serif;--wp--preset--font-family--merriweather: Merriweather, serif;--wp--preset--font-family--montserrat: Montserrat, sans-serif;--wp--preset--font-family--newsreader: Newsreader, serif;--wp--preset--font-family--noto-sans-mono: Noto Sans Mono, sans-serif;--wp--preset--font-family--nunito: Nunito, sans-serif;--wp--preset--font-family--open-sans: Open Sans, sans-serif;--wp--preset--font-family--overpass: Overpass, sans-serif;--wp--preset--font-family--pt-serif: PT Serif, serif;--wp--preset--font-family--petrona: Petrona, serif;--wp--preset--font-family--piazzolla: Piazzolla, serif;--wp--preset--font-family--playfair-display: Playfair Display, serif;--wp--preset--font-family--plus-jakarta-sans: Plus Jakarta Sans, sans-serif;--wp--preset--font-family--poppins: Poppins, sans-serif;--wp--preset--font-family--raleway: Raleway, sans-serif;--wp--preset--font-family--roboto: Roboto, sans-serif;--wp--preset--font-family--roboto-slab: Roboto Slab, serif;--wp--preset--font-family--rubik: Rubik, sans-serif;--wp--preset--font-family--rufina: Rufina, serif;--wp--preset--font-family--sora: Sora, sans-serif;--wp--preset--font-family--source-sans-3: Source Sans 3, sans-serif;--wp--preset--font-family--source-serif-4: Source Serif 4, serif;--wp--preset--font-family--space-mono: Space Mono, monospace;--wp--preset--font-family--syne: Syne, sans-serif;--wp--preset--font-family--texturina: Texturina, serif;--wp--preset--font-family--urbanist: Urbanist, sans-serif;--wp--preset--font-family--work-sans: Work Sans, sans-serif;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;}.has-albert-sans-font-family{font-family: var(--wp--preset--font-family--albert-sans) !important;}.has-alegreya-font-family{font-family: var(--wp--preset--font-family--alegreya) !important;}.has-arvo-font-family{font-family: var(--wp--preset--font-family--arvo) !important;}.has-bodoni-moda-font-family{font-family: var(--wp--preset--font-family--bodoni-moda) !important;}.has-bricolage-grotesque-font-family{font-family: var(--wp--preset--font-family--bricolage-grotesque) !important;}.has-cabin-font-family{font-family: var(--wp--preset--font-family--cabin) !important;}.has-chivo-font-family{font-family: var(--wp--preset--font-family--chivo) !important;}.has-commissioner-font-family{font-family: var(--wp--preset--font-family--commissioner) !important;}.has-cormorant-font-family{font-family: var(--wp--preset--font-family--cormorant) !important;}.has-courier-prime-font-family{font-family: var(--wp--preset--font-family--courier-prime) !important;}.has-crimson-pro-font-family{font-family: var(--wp--preset--font-family--crimson-pro) !important;}.has-dm-mono-font-family{font-family: var(--wp--preset--font-family--dm-mono) !important;}.has-dm-sans-font-family{font-family: var(--wp--preset--font-family--dm-sans) !important;}.has-dm-serif-display-font-family{font-family: var(--wp--preset--font-family--dm-serif-display) !important;}.has-domine-font-family{font-family: var(--wp--preset--font-family--domine) !important;}.has-eb-garamond-font-family{font-family: var(--wp--preset--font-family--eb-garamond) !important;}.has-epilogue-font-family{font-family: var(--wp--preset--font-family--epilogue) !important;}.has-fahkwang-font-family{font-family: var(--wp--preset--font-family--fahkwang) !important;}.has-figtree-font-family{font-family: var(--wp--preset--font-family--figtree) !important;}.has-fira-sans-font-family{font-family: var(--wp--preset--font-family--fira-sans) !important;}.has-fjalla-one-font-family{font-family: var(--wp--preset--font-family--fjalla-one) !important;}.has-fraunces-font-family{font-family: var(--wp--preset--font-family--fraunces) !important;}.has-gabarito-font-family{font-family: var(--wp--preset--font-family--gabarito) !important;}.has-ibm-plex-mono-font-family{font-family: var(--wp--preset--font-family--ibm-plex-mono) !important;}.has-ibm-plex-sans-font-family{font-family: var(--wp--preset--font-family--ibm-plex-sans) !important;}.has-ibarra-real-nova-font-family{font-family: var(--wp--preset--font-family--ibarra-real-nova) !important;}.has-instrument-serif-font-family{font-family: var(--wp--preset--font-family--instrument-serif) !important;}.has-inter-font-family{font-family: var(--wp--preset--font-family--inter) !important;}.has-josefin-sans-font-family{font-family: var(--wp--preset--font-family--josefin-sans) !important;}.has-jost-font-family{font-family: var(--wp--preset--font-family--jost) !important;}.has-libre-baskerville-font-family{font-family: var(--wp--preset--font-family--libre-baskerville) !important;}.has-libre-franklin-font-family{font-family: var(--wp--preset--font-family--libre-franklin) !important;}.has-literata-font-family{font-family: var(--wp--preset--font-family--literata) !important;}.has-lora-font-family{font-family: var(--wp--preset--font-family--lora) !important;}.has-merriweather-font-family{font-family: var(--wp--preset--font-family--merriweather) !important;}.has-montserrat-font-family{font-family: var(--wp--preset--font-family--montserrat) !important;}.has-newsreader-font-family{font-family: var(--wp--preset--font-family--newsreader) !important;}.has-noto-sans-mono-font-family{font-family: var(--wp--preset--font-family--noto-sans-mono) !important;}.has-nunito-font-family{font-family: var(--wp--preset--font-family--nunito) !important;}.has-open-sans-font-family{font-family: var(--wp--preset--font-family--open-sans) !important;}.has-overpass-font-family{font-family: var(--wp--preset--font-family--overpass) !important;}.has-pt-serif-font-family{font-family: var(--wp--preset--font-family--pt-serif) !important;}.has-petrona-font-family{font-family: var(--wp--preset--font-family--petrona) !important;}.has-piazzolla-font-family{font-family: var(--wp--preset--font-family--piazzolla) !important;}.has-playfair-display-font-family{font-family: var(--wp--preset--font-family--playfair-display) !important;}.has-plus-jakarta-sans-font-family{font-family: var(--wp--preset--font-family--plus-jakarta-sans) !important;}.has-poppins-font-family{font-family: var(--wp--preset--font-family--poppins) !important;}.has-raleway-font-family{font-family: var(--wp--preset--font-family--raleway) !important;}.has-roboto-font-family{font-family: var(--wp--preset--font-family--roboto) !important;}.has-roboto-slab-font-family{font-family: var(--wp--preset--font-family--roboto-slab) !important;}.has-rubik-font-family{font-family: var(--wp--preset--font-family--rubik) !important;}.has-rufina-font-family{font-family: var(--wp--preset--font-family--rufina) !important;}.has-sora-font-family{font-family: var(--wp--preset--font-family--sora) !important;}.has-source-sans-3-font-family{font-family: var(--wp--preset--font-family--source-sans-3) !important;}.has-source-serif-4-font-family{font-family: var(--wp--preset--font-family--source-serif-4) !important;}.has-space-mono-font-family{font-family: var(--wp--preset--font-family--space-mono) !important;}.has-syne-font-family{font-family: var(--wp--preset--font-family--syne) !important;}.has-texturina-font-family{font-family: var(--wp--preset--font-family--texturina) !important;}.has-urbanist-font-family{font-family: var(--wp--preset--font-family--urbanist) !important;}.has-work-sans-font-family{font-family: var(--wp--preset--font-family--work-sans) !important;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}/style>link crossoriginanonymous relstylesheet idall-css-10-1 hrefhttps://s0.wp.com/wp-content/themes/pub/twentytwenty/style.css?m1683316193i&cssminifyyes typetext/css mediaall />style idtwentytwenty-style-inline-css>.color-accent,.color-accent-hover:hover,.color-accent-hover:focus,:root .has-accent-color,.has-drop-cap:not(:focus):first-letter,.wp-block-button.is-style-outline,a { color: #e22658; }blockquote,.border-color-accent,.border-color-accent-hover:hover,.border-color-accent-hover:focus { border-color: #e22658; }button,.button,.faux-button,.wp-block-button__link,.wp-block-file .wp-block-file__button,inputtypebutton,inputtypereset,inputtypesubmit,.bg-accent,.bg-accent-hover:hover,.bg-accent-hover:focus,:root .has-accent-background-color,.comment-reply-link { background-color: #e22658; }.fill-children-accent,.fill-children-accent * { fill: #e22658; }:root .has-background-color,button,.button,.faux-button,.wp-block-button__link,.wp-block-file__button,inputtypebutton,inputtypereset,inputtypesubmit,.wp-block-button,.comment-reply-link,.has-background.has-primary-background-color:not(.has-text-color),.has-background.has-primary-background-color *:not(.has-text-color),.has-background.has-accent-background-color:not(.has-text-color),.has-background.has-accent-background-color *:not(.has-text-color) { color: #ffffff; }:root .has-background-background-color { background-color: #ffffff; }body,.entry-title a,:root .has-primary-color { color: #000000; }:root .has-primary-background-color { background-color: #000000; }cite,figcaption,.wp-caption-text,.post-meta,.entry-content .wp-block-archives li,.entry-content .wp-block-categories li,.entry-content .wp-block-latest-posts li,.wp-block-latest-comments__comment-date,.wp-block-latest-posts__post-date,.wp-block-embed figcaption,.wp-block-image figcaption,.wp-block-pullquote cite,.comment-metadata,.comment-respond .comment-notes,.comment-respond .logged-in-as,.pagination .dots,.entry-content hr:not(.has-background),hr.styled-separator,:root .has-secondary-color { color: #6d6d6d; }:root .has-secondary-background-color { background-color: #6d6d6d; }pre,fieldset,input,textarea,table,table *,hr { border-color: #dbdbdb; }caption,code,code,kbd,samp,.wp-block-table.is-style-stripes tbody tr:nth-child(odd),:root .has-subtle-background-background-color { background-color: #dbdbdb; }.wp-block-table.is-style-stripes { border-bottom-color: #dbdbdb; }.wp-block-latest-posts.is-grid li { border-top-color: #dbdbdb; }:root .has-subtle-background-color { color: #dbdbdb; }body:not(.overlay-header) .primary-menu > li > a,body:not(.overlay-header) .primary-menu > li > .icon,.modal-menu a,.footer-menu a, .footer-widgets a,#site-footer .wp-block-button.is-style-outline,.wp-block-pullquote:before,.singular:not(.overlay-header) .entry-header a,.archive-header a,.header-footer-group .color-accent,.header-footer-group .color-accent-hover:hover { color: #0a0002; }.social-icons a,#site-footer button:not(.toggle),#site-footer .button,#site-footer .faux-button,#site-footer .wp-block-button__link,#site-footer .wp-block-file__button,#site-footer inputtypebutton,#site-footer inputtypereset,#site-footer inputtypesubmit { background-color: #0a0002; }.social-icons a,body:not(.overlay-header) .primary-menu ul,.header-footer-group button,.header-footer-group .button,.header-footer-group .faux-button,.header-footer-group .wp-block-button:not(.is-style-outline) .wp-block-button__link,.header-footer-group .wp-block-file__button,.header-footer-group inputtypebutton,.header-footer-group inputtypereset,.header-footer-group inputtypesubmit { color: #dd3333; }#site-header,.footer-nav-widgets-wrapper,#site-footer,.menu-modal,.menu-modal-inner,.search-modal-inner,.archive-header,.singular .entry-header,.singular .featured-media:before,.wp-block-pullquote:before { background-color: #dd3333; }.header-footer-group,body:not(.overlay-header) #site-header .toggle,.menu-modal .toggle { color: #000000; }body:not(.overlay-header) .primary-menu ul { background-color: #000000; }body:not(.overlay-header) .primary-menu > li > ul:after { border-bottom-color: #000000; }body:not(.overlay-header) .primary-menu ul ul:after { border-left-color: #000000; }.site-description,body:not(.overlay-header) .toggle-inner .toggle-text,.widget .post-date,.widget .rss-date,.widget_archive li,.widget_categories li,.widget cite,.widget_pages li,.widget_meta li,.widget_nav_menu li,.powered-by-wordpress,.to-the-top,.singular .entry-header .post-meta,.singular:not(.overlay-header) .entry-header .post-meta a { color: #000000; }.header-footer-group pre,.header-footer-group fieldset,.header-footer-group input,.header-footer-group textarea,.header-footer-group table,.header-footer-group table *,.footer-nav-widgets-wrapper,#site-footer,.menu-modal nav *,.footer-widgets-outer-wrapper,.footer-top { border-color: #be1c1c; }.header-footer-group table caption,body:not(.overlay-header) .header-inner .toggle-wrapper::before { background-color: #be1c1c; }/style>link crossoriginanonymous relstylesheet idprint-css-11-1 hrefhttps://s2.wp.com/wp-content/themes/pub/twentytwenty/print.css?m1635181489i&cssminifyyes typetext/css mediaprint />link crossoriginanonymous relstylesheet idall-css-12-1 hrefhttps://s1.wp.com/_static/??-eJx9jsEKwjAQRH/IuNYq4kH8ljSuMXWTDe6G0r83VQ8RwcswA/OGgSkbx0kxKcRiMhUfksCImq27fzJE5kUuhVBAbxjRKDMJOI7ZKuhU+fmtayeygmb21RfIZfjqQUgORGdCM+W688M1dzyyIXZWQ/3RBnMlGx7/0AcOxL5aD7XVxAU6x1N32Ha7Tb/vj+MTS/RlIQ&cssminifyyes typetext/css mediaall />style idjetpack-global-styles-frontend-style-inline-css>:root { --font-headings: unset; --font-base: unset; --font-headings-default: -apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,sans-serif; --font-base-default: -apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,sans-serif;}/style>link crossoriginanonymous relstylesheet idall-css-14-1 hrefhttps://s2.wp.com/wp-content/themes/h4/global.css?m1420737423i&cssminifyyes typetext/css mediaall />script idmedia-video-jwt-bridge-js-extra>var videopressAjax {ajaxUrl:https:\/\/thepacketratblog.wordpress.com\/wp-admin\/admin-ajax.php,bridgeUrl:\/wp-content\/mu-plugins\/jetpack-plugin\/moon\/jetpack_vendor\/automattic\/jetpack-videopress\/build\/lib\/token-bridge.js,post_id:38};/script>script idwpcom-actionbar-placeholder-js-extra>var actionbardata {siteID:44812389,postID:0,siteURL:https:\/\/thepacketrat.com,xhrURL:https:\/\/thepacketrat.com\/wp-admin\/admin-ajax.php,nonce:5ed352dacf,isLoggedIn:,statusMessage:,subsEmailDefault:instantly,proxyScriptUrl:https:\/\/s0.wp.com\/wp-content\/js\/wpcom-proxy-request.js?ver20211021,i18n:{followedText:New posts from this site will now appear in your a href\https:\/\/wordpress.com\/read\>Reader\/a>,foldBar:Collapse this bar,unfoldBar:Expand this bar}};/script>script idjetpack-mu-wpcom-settings-js-before>var JETPACK_MU_WPCOM_SETTINGS {assetsUrl:https:\/\/s1.wp.com\/wp-content\/mu-plugins\/jetpack-mu-wpcom-plugin\/moon\/vendor\/automattic\/jetpack-mu-wpcom\/src\/build\/};/script>script crossoriginanonymous typetext/javascript srchttps://s1.wp.com/_static/??-eJxdjl1OAzEMhC9EcKmoWh4QR0H5MSHbxI5iZ7e9PVlaKrEvtjweez5YqvFMiqQwCRR2KaPpgs3GoZlEX/w8yRP897Wspja+XLc7/caCArU70GUI11sFK4Iq62migJftWemm5h4TDQtqtf58nwcR05/2OSMFbmC7crGqyT/ccwrItaEIuJ5ygJwGAZ+RjGspRNwmuszxkblwCzaI8Xnl/MX0pcK8X5shJhNDbePFR3l/Oe5fT4e33fEw/QDvq3aK>/script>script idrlt-proxy-js-after> rltInitialize( {token:null,iframeOrigins:https:\/\/widgets.wp.com} );/script>link relEditURI typeapplication/rsd+xml titleRSD hrefhttps://thepacketratblog.wordpress.com/xmlrpc.php?rsd />meta namegenerator contentWordPress.com />link relshortlink hrefhttps://wp.me/321Kt />!-- Jetpack Open Graph Tags -->meta propertyog:type contentwebsite />meta propertyog:title contentThe Packet Rat />meta propertyog:description contentThe Packet Rat: sniffing my way through cyberspace />meta propertyog:url contenthttps://thepacketrat.com/ />meta propertyog:site_name contentThe Packet Rat />meta propertyog:image contenthttps://s0.wp.com/i/blank.jpg />meta propertyog:image:alt content />meta propertyog:locale contenten_US />!-- End Jetpack Open Graph Tags -->link relshortcut icon typeimage/x-icon hrefhttps://s1.wp.com/i/favicon.ico sizes16x16 24x24 32x32 48x48 />link relicon typeimage/x-icon hrefhttps://s1.wp.com/i/favicon.ico sizes16x16 24x24 32x32 48x48 />link relapple-touch-icon hrefhttps://s2.wp.com/i/webclip.png />link relopenid.server hrefhttps://thepacketrat.com/?openidserver1 />link relopenid.delegate hrefhttps://thepacketrat.com/ />link relsearch typeapplication/opensearchdescription+xml hrefhttps://thepacketrat.com/osd.xml titleThe Packet Rat />link relsearch typeapplication/opensearchdescription+xml hrefhttps://s1.wp.com/opensearch.xml titleWordPress.com />meta nametheme-color content#ffffff /> script>document.documentElement.className document.documentElement.className.replace( no-js, js );/script> style typetext/css> .recentcomments a { display: inline !important; padding: 0 !important; margin: 0 !important; } table.recentcommentsavatartop img.avatar, table.recentcommentsavatarend img.avatar { border: 0px; margin: 0; } table.recentcommentsavatartop a, table.recentcommentsavatarend a { border: 0px !important; background-color: transparent !important; } td.recentcommentsavatarend, td.recentcommentsavatartop { padding: 0px 0px 1px 0px; margin: 0px; } td.recentcommentstextend { border: none !important; padding: 0px 0px 2px 10px; } .rtl td.recentcommentstextend { padding: 0px 10px 2px 0px; } td.recentcommentstexttop { border: none; padding: 0px 0px 0px 10px; } .rtl td.recentcommentstexttop { padding: 0px 10px 0px 0px; } /style> meta nameapplication-name contentThe Packet Rat />meta namemsapplication-window contentwidthdevice-width;heightdevice-height />meta namemsapplication-tooltip contentThe Packet Rat: sniffing my way through cyberspace />meta namedescription contentThe Packet Rat: sniffing my way through cyberspace />style idcustom-background-css>body.custom-background { background-color: #ffffff; }/style> script>var wa_smart { network_id: 3905, site_id: 474853, page_id: 1572546, blog_id: 44812389, post_id: null, theme: pub/twentytwenty, target: wp_blog_id44812389;languageen;adflowtrue, _: { title: Advertisement, privacy_settings: Privacy Settings }, inline: { format_id: 110354, max_slots: 20, max_blaze_slots: 20, enabled: false, adflow_enabled: true } }; wa_smart.cmd ;/script> script typetext/javascript> function __ATA_CC() {var v document.cookie.match((^|;) ?personalized-ads-consent(^;*)(;|$));return v ? 1 : 0;} var __ATA_PP { pt: 0, ht: 0, tn: twentytwenty, uloggedin: 0, amp: false, consent: __ATA_CC(), gdpr_applies: false, ad: { label: { text: Advertisements }, reportAd: { text: Report this ad } }, disabled_slot_formats: , siteid: 8982, blogid: 44812389 }; var __ATA __ATA || {}; __ATA.cmd __ATA.cmd || ; __ATA.criteo __ATA.criteo || {}; __ATA.criteo.cmd __ATA.criteo.cmd || ; /script> script typetext/javascript> (function(){var gDate.now||function(){return+new Date};function h(a,b){a:{for(var ca.length,dstringtypeof a?a.split():a,e0;ec;e++)if(e in d&&b.call(void 0,de,e,a)){be;break a}b-1}return 0>b?null:stringtypeof a?a.charAt(b):ab};function k(a,b,c){cnull!c?+encodeURIComponent(String(c)):;if(b+c){ca.indexOf(#);0>c&&(ca.length);var da.indexOf(?);if(0>d||d>c){dc;var e}else ea.substring(d+1,c);aa.substr(0,d),e,a.substr(c);ca1;a1b?c?c+&+b:b:c;aa0+(a1??+a1:)+a2}return a};var l0;function m(a,b){var cdocument.createElement(script);c.srca;c.onloadfunction(){b&&b(void 0)};c.onerrorfunction(){b&&b(error)};adocument.getElementsByTagName(head);var d;a&&0!a.length?da0:ddocument.documentElement;d.appendChild(c)}function n(a){var bvoid 0b?document.cookie:b;return(bh(b.split(; ),function(c){return-1!c.indexOf(a+)}))?b.split()1:}function p(a){returnstringtypeof a&&0a.length} function r(a,b,c){bvoid 0b?:b;cvoid 0c?.:c;var d;Object.keys(a).forEach(function(e){var fae,qtypeof f;objectq&&null!f||functionq?d.push(r(f,b+e+c)):null!f&&void 0!f&&(eencodeURIComponent(b+e),d.push(e++encodeURIComponent(f)))});return d.filter(p).join(&)}function t(a,b){a||((window.__ATA||{}).configb.c,m(b.url))}var uMath.floor(1E13*Math.random()),vwindow.__ATA||{};window.__ATAv;window.__ATA.cmdv.cmd||;v.ridu;v.createdAtg();var wwindow.__ATA||{},xs.pubmine.com; w&&w.serverDomain&&(xw.serverDomain);var y//+x+/conf,zwindow.topwindow,Awindow.__ATA_PP&&window.__ATA_PP.gdpr_applies,Bbooleantypeof A?Number(A):null,Cwindow.__ATA_PP||null,Dz?document.referrer?document.referrer:null:null,Ez?window.location.href:document.referrer?document.referrer:null,F,Gn(__ATA_tuuid);FG?G:null;var Hwindow.innerWidth+x+window.innerHeight,In(usprivacy),Jr({gdpr:B,pp:C,rid:u,src:D,ref:E,tuuid:F,vp:H,us_privacy:I?I:null},,.); (function(a){var bvoid 0b?cb:b;l++;var ccallback__+g().toString(36)+_+l.toString(36);ak(a,b,c);windowcfunction(d){t(void 0,d)};m(a,function(d){d&&t(d)})})(y+?+J);}).call(this); /script> script> var sas_fallback sas_fallback || ; sas_fallback.push( { tag: <div id"atatags-26942-66d00469eb153"></div><script>__ATA.cmd.push(function() {__ATA.initDynamicSlot({id: \atatags-26942-66d00469eb153\,location: 120,formFactor: \001\,label: {text: \Advertisements\,},creative: {reportAd: {text: \Report this ad\,},privacySettings: {text: \Privacy\,}}});});</script>, type: belowpost }, { tag: <div id"atatags-26942-{{unique_id}}"></div><script>__ATA.cmd.push(function() {__ATA.initDynamicSlot({id: \atatags-26942-{{unique_id}}\,location: 310,formFactor: \001\,label: {text: \Advertisements\,},creative: {reportAd: {text: \Report this ad\,},privacySettings: {text: \Privacy\,}}});});</script>, type: inline } ); /script> script typetext/javascript> window.doNotSellCallback function() { var linkElements ahrefhttps://wordpress.com/?reffooter_blog, ahrefhttps://wordpress.com/?reffooter_website, ahrefhttps://wordpress.com/?refvertical_footer, ahref^https://wordpress.com/?reffooter_segment_, .join(,); var dnsLink document.createElement( a ); dnsLink.href https://wordpress.com/advertising-program-optout/; dnsLink.classList.add( do-not-sell-link ); dnsLink.rel nofollow; dnsLink.style.marginLeft 0.5em; dnsLink.textContent Do Not Sell or Share My Personal Information; var creditLinks document.querySelectorAll( linkElements ); if ( 0 creditLinks.length ) { return false; } Array.prototype.forEach.call( creditLinks, function( el ) { el.insertAdjacentElement( afterend, dnsLink ); }); return true; }; /script> script typetext/javascript> window.google_analytics_uacct UA-52447-2;/script>script typetext/javascript> var _gaq _gaq || ; _gaq.push(_setAccount, UA-52447-2); _gaq.push(_gat._anonymizeIp); _gaq.push(_setDomainName, none); _gaq.push(_setAllowLinker, true); _gaq.push(_initData); _gaq.push(_trackPageview); (function() { var ga document.createElement(script); ga.type text/javascript; ga.async true; ga.src (https: document.location.protocol ? https://ssl : http://www) + .google-analytics.com/ga.js; (document.getElementsByTagName(head)0 || document.getElementsByTagName(body)0).appendChild(ga); })();/script> /head> body classhome blog custom-background wp-custom-logo wp-embed-responsive customizer-styles-applied enable-search-modal has-no-pagination showing-comments show-avatars footer-top-visible jetpack-reblog-enabled> a classskip-link screen-reader-text href#site-content>Skip to the content/a> header idsite-header classheader-footer-group rolebanner> div classheader-inner section-inner> div classheader-titles-wrapper> button classtoggle search-toggle mobile-search-toggle data-toggle-target.search-modal data-toggle-body-classshowing-search-modal data-set-focus.search-modal .search-field aria-expandedfalse> span classtoggle-inner> span classtoggle-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width23 height23 viewBox0 0 23 23>path dM38.710696,48.0601792 L43,52.3494831 L41.3494831,54 L37.0601792,49.710696 C35.2632422,51.1481185 32.9839107,52.0076499 30.5038249,52.0076499 C24.7027226,52.0076499 20,47.3049272 20,41.5038249 C20,35.7027226 24.7027226,31 30.5038249,31 C36.3049272,31 41.0076499,35.7027226 41.0076499,41.5038249 C41.0076499,43.9839107 40.1481185,46.2632422 38.710696,48.0601792 Z M36.3875844,47.1716785 C37.8030221,45.7026647 38.6734666,43.7048964 38.6734666,41.5038249 C38.6734666,36.9918565 35.0157934,33.3341833 30.5038249,33.3341833 C25.9918565,33.3341833 22.3341833,36.9918565 22.3341833,41.5038249 C22.3341833,46.0157934 25.9918565,49.6734666 30.5038249,49.6734666 C32.7048964,49.6734666 34.7026647,48.8030221 36.1716785,47.3875844 C36.2023931,47.347638 36.2360451,47.3092237 36.2726343,47.2726343 C36.3092237,47.2360451 36.347638,47.2023931 36.3875844,47.1716785 Z transformtranslate(-20 -31) />/svg> /span> span classtoggle-text>Search/span> /span> /button>!-- .search-toggle --> div classheader-titles> h1 classsite-logo>a hrefhttps://thepacketrat.com/ classcustom-logo-link relhome aria-currentpage>img width75 height67 styleheight: 67px; srchttps://thepacketrat.com/wp-content/uploads/2020/03/cropped-prat-jpg.jpg classcustom-logo altThe Packet Rat decodingasync data-attachment-id16 data-permalinkhttps://thepacketrat.com/cropped-prat-jpg-jpg/ data-orig-filehttps://thepacketrat.com/wp-content/uploads/2020/03/cropped-prat-jpg.jpg data-orig-size150,134 data-comments-opened1 data-image-meta{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"0"} data-image-titlecropped-prat-jpg.jpg data-image-description<p>https://thepacketratblog.files.wordpress.com/2020/03/cropped-prat-jpg.jpg</p> data-image-caption data-medium-filehttps://thepacketrat.com/wp-content/uploads/2020/03/cropped-prat-jpg.jpg?w150 data-large-filehttps://thepacketrat.com/wp-content/uploads/2020/03/cropped-prat-jpg.jpg?w150 tabindex0 rolebutton />/a>span classscreen-reader-text>The Packet Rat/span>/h1>div classsite-description>The Packet Rat: sniffing my way through cyberspace/div>!-- .site-description --> /div>!-- .header-titles --> button classtoggle nav-toggle mobile-nav-toggle data-toggle-target.menu-modal data-toggle-body-classshowing-menu-modal aria-expandedfalse data-set-focus.close-nav-toggle> span classtoggle-inner> span classtoggle-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width26 height7 viewBox0 0 26 7>path fill-ruleevenodd dM332.5,45 C330.567003,45 329,43.4329966 329,41.5 C329,39.5670034 330.567003,38 332.5,38 C334.432997,38 336,39.5670034 336,41.5 C336,43.4329966 334.432997,45 332.5,45 Z M342,45 C340.067003,45 338.5,43.4329966 338.5,41.5 C338.5,39.5670034 340.067003,38 342,38 C343.932997,38 345.5,39.5670034 345.5,41.5 C345.5,43.4329966 343.932997,45 342,45 Z M351.5,45 C349.567003,45 348,43.4329966 348,41.5 C348,39.5670034 349.567003,38 351.5,38 C353.432997,38 355,39.5670034 355,41.5 C355,43.4329966 353.432997,45 351.5,45 Z transformtranslate(-329 -38) />/svg> /span> span classtoggle-text>Menu/span> /span> /button>!-- .nav-toggle --> /div>!-- .header-titles-wrapper --> div classheader-navigation-wrapper> nav classprimary-menu-wrapper aria-labelHorizontal rolenavigation> ul classprimary-menu reset-list-style> li classpage_item page-item-1>a hrefhttps://thepacketrat.com/about/>About/a>/li> /ul> /nav>!-- .primary-menu-wrapper --> div classheader-toggles hide-no-js> div classtoggle-wrapper search-toggle-wrapper> button classtoggle search-toggle desktop-search-toggle data-toggle-target.search-modal data-toggle-body-classshowing-search-modal data-set-focus.search-modal .search-field aria-expandedfalse> span classtoggle-inner> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width23 height23 viewBox0 0 23 23>path dM38.710696,48.0601792 L43,52.3494831 L41.3494831,54 L37.0601792,49.710696 C35.2632422,51.1481185 32.9839107,52.0076499 30.5038249,52.0076499 C24.7027226,52.0076499 20,47.3049272 20,41.5038249 C20,35.7027226 24.7027226,31 30.5038249,31 C36.3049272,31 41.0076499,35.7027226 41.0076499,41.5038249 C41.0076499,43.9839107 40.1481185,46.2632422 38.710696,48.0601792 Z M36.3875844,47.1716785 C37.8030221,45.7026647 38.6734666,43.7048964 38.6734666,41.5038249 C38.6734666,36.9918565 35.0157934,33.3341833 30.5038249,33.3341833 C25.9918565,33.3341833 22.3341833,36.9918565 22.3341833,41.5038249 C22.3341833,46.0157934 25.9918565,49.6734666 30.5038249,49.6734666 C32.7048964,49.6734666 34.7026647,48.8030221 36.1716785,47.3875844 C36.2023931,47.347638 36.2360451,47.3092237 36.2726343,47.2726343 C36.3092237,47.2360451 36.347638,47.2023931 36.3875844,47.1716785 Z transformtranslate(-20 -31) />/svg> span classtoggle-text>Search/span> /span> /button>!-- .search-toggle --> /div> /div>!-- .header-toggles --> /div>!-- .header-navigation-wrapper --> /div>!-- .header-inner --> div classsearch-modal cover-modal header-footer-group data-modal-target-string.search-modal roledialog aria-modaltrue aria-labelSearch> div classsearch-modal-inner modal-inner> div classsection-inner> form rolesearch aria-labelSearch for: methodget classsearch-form actionhttps://thepacketrat.com/> label forsearch-form-1> span classscreen-reader-text> Search for: /span> input typesearch idsearch-form-1 classsearch-field placeholderSearch … value names /> /label> input typesubmit classsearch-submit valueSearch />/form> button classtoggle search-untoggle close-search-toggle fill-children-current-color data-toggle-target.search-modal data-toggle-body-classshowing-search-modal data-set-focus.search-modal .search-field> span classscreen-reader-text> Close search /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width16 height16 viewBox0 0 16 16>polygon fill fill-ruleevenodd points6.852 7.649 .399 1.195 1.445 .149 7.899 6.602 14.352 .149 15.399 1.195 8.945 7.649 15.399 14.102 14.352 15.149 7.899 8.695 1.445 15.149 .399 14.102 />/svg> /button>!-- .search-toggle --> /div>!-- .section-inner --> /div>!-- .search-modal-inner -->/div>!-- .menu-modal --> /header>!-- #site-header --> div classmenu-modal cover-modal header-footer-group data-modal-target-string.menu-modal> div classmenu-modal-inner modal-inner> div classmenu-wrapper section-inner> div classmenu-top> button classtoggle close-nav-toggle fill-children-current-color data-toggle-target.menu-modal data-toggle-body-classshowing-menu-modal data-set-focus.menu-modal> span classtoggle-text>Close Menu/span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width16 height16 viewBox0 0 16 16>polygon fill fill-ruleevenodd points6.852 7.649 .399 1.195 1.445 .149 7.899 6.602 14.352 .149 15.399 1.195 8.945 7.649 15.399 14.102 14.352 15.149 7.899 8.695 1.445 15.149 .399 14.102 />/svg> /button>!-- .nav-toggle --> nav classmobile-menu aria-labelMobile rolenavigation> ul classmodal-menu reset-list-style> li classpage_item page-item-1>div classancestor-wrapper>a hrefhttps://thepacketrat.com/about/>About/a>/div>!-- .ancestor-wrapper -->/li> /ul> /nav> /div>!-- .menu-top --> div classmenu-bottom> /div>!-- .menu-bottom --> /div>!-- .menu-wrapper --> /div>!-- .menu-modal-inner -->/div>!-- .menu-modal -->main idsite-content rolemain> article classpost-38 post type-post status-publish format-standard hentry category-uncategorized idpost-38> header classentry-header has-text-align-center> div classentry-header-inner section-inner medium> div classentry-categories> span classscreen-reader-text> Categories /span> div classentry-categories-inner> a hrefhttps://thepacketrat.com/category/uncategorized/ relcategory tag>Uncategorized/a> /div>!-- .entry-categories-inner --> /div>!-- .entry-categories --> h2 classentry-title heading-size-1>a hrefhttps://thepacketrat.com/2020/07/15/rats-of-a-different-ilk/>Rats of a different ilk/a>/h2> div classpost-meta-wrapper post-meta-single post-meta-single-top> ul classpost-meta> li classpost-author meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post author /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height20 viewBox0 0 18 20>path fill dM18,19 C18,19.5522847 17.5522847,20 17,20 C16.4477153,20 16,19.5522847 16,19 L16,17 C16,15.3431458 14.6568542,14 13,14 L5,14 C3.34314575,14 2,15.3431458 2,17 L2,19 C2,19.5522847 1.55228475,20 1,20 C0.44771525,20 0,19.5522847 0,19 L0,17 C0,14.2385763 2.23857625,12 5,12 L13,12 C15.7614237,12 18,14.2385763 18,17 L18,19 Z M9,10 C6.23857625,10 4,7.76142375 4,5 C4,2.23857625 6.23857625,0 9,0 C11.7614237,0 14,2.23857625 14,5 C14,7.76142375 11.7614237,10 9,10 Z M9,8 C10.6568542,8 12,6.65685425 12,5 C12,3.34314575 10.6568542,2 9,2 C7.34314575,2 6,3.34314575 6,5 C6,6.65685425 7.34314575,8 9,8 Z />/svg> /span> span classmeta-text> By a hrefhttps://thepacketrat.com/author/dotcommunist/>Sean Gallagher/a> /span> /li> li classpost-date meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post date /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height19 viewBox0 0 18 19>path fill dM4.60069444,4.09375 L3.25,4.09375 C2.47334957,4.09375 1.84375,4.72334957 1.84375,5.5 L1.84375,7.26736111 L16.15625,7.26736111 L16.15625,5.5 C16.15625,4.72334957 15.5266504,4.09375 14.75,4.09375 L13.3993056,4.09375 L13.3993056,4.55555556 C13.3993056,5.02154581 13.0215458,5.39930556 12.5555556,5.39930556 C12.0895653,5.39930556 11.7118056,5.02154581 11.7118056,4.55555556 L11.7118056,4.09375 L6.28819444,4.09375 L6.28819444,4.55555556 C6.28819444,5.02154581 5.9104347,5.39930556 5.44444444,5.39930556 C4.97845419,5.39930556 4.60069444,5.02154581 4.60069444,4.55555556 L4.60069444,4.09375 Z M6.28819444,2.40625 L11.7118056,2.40625 L11.7118056,1 C11.7118056,0.534009742 12.0895653,0.15625 12.5555556,0.15625 C13.0215458,0.15625 13.3993056,0.534009742 13.3993056,1 L13.3993056,2.40625 L14.75,2.40625 C16.4586309,2.40625 17.84375,3.79136906 17.84375,5.5 L17.84375,15.875 C17.84375,17.5836309 16.4586309,18.96875 14.75,18.96875 L3.25,18.96875 C1.54136906,18.96875 0.15625,17.5836309 0.15625,15.875 L0.15625,5.5 C0.15625,3.79136906 1.54136906,2.40625 3.25,2.40625 L4.60069444,2.40625 L4.60069444,1 C4.60069444,0.534009742 4.97845419,0.15625 5.44444444,0.15625 C5.9104347,0.15625 6.28819444,0.534009742 6.28819444,1 L6.28819444,2.40625 Z M1.84375,8.95486111 L1.84375,15.875 C1.84375,16.6516504 2.47334957,17.28125 3.25,17.28125 L14.75,17.28125 C15.5266504,17.28125 16.15625,16.6516504 16.15625,15.875 L16.15625,8.95486111 L1.84375,8.95486111 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/07/15/rats-of-a-different-ilk/>July 15, 2020/a> /span> /li> li classpost-comment-link meta-wrapper> span classmeta-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width19 height19 viewBox0 0 19 19>path dM9.43016863,13.2235931 C9.58624731,13.094699 9.7823475,13.0241935 9.98476849,13.0241935 L15.0564516,13.0241935 C15.8581553,13.0241935 16.5080645,12.3742843 16.5080645,11.5725806 L16.5080645,3.44354839 C16.5080645,2.64184472 15.8581553,1.99193548 15.0564516,1.99193548 L3.44354839,1.99193548 C2.64184472,1.99193548 1.99193548,2.64184472 1.99193548,3.44354839 L1.99193548,11.5725806 C1.99193548,12.3742843 2.64184472,13.0241935 3.44354839,13.0241935 L5.76612903,13.0241935 C6.24715123,13.0241935 6.63709677,13.4141391 6.63709677,13.8951613 L6.63709677,15.5301903 L9.43016863,13.2235931 Z M3.44354839,14.766129 C1.67980032,14.766129 0.25,13.3363287 0.25,11.5725806 L0.25,3.44354839 C0.25,1.67980032 1.67980032,0.25 3.44354839,0.25 L15.0564516,0.25 C16.8201997,0.25 18.25,1.67980032 18.25,3.44354839 L18.25,11.5725806 C18.25,13.3363287 16.8201997,14.766129 15.0564516,14.766129 L10.2979143,14.766129 L6.32072889,18.0506004 C5.75274472,18.5196577 4.89516129,18.1156602 4.89516129,17.3790323 L4.89516129,14.766129 L3.44354839,14.766129 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/07/15/rats-of-a-different-ilk/#respond>No Commentsspan classscreen-reader-text> on Rats of a different ilk/span>/a> /span> /li> /ul>!-- .post-meta --> /div>!-- .post-meta-wrapper --> /div>!-- .entry-header-inner -->/header>!-- .entry-header --> div classpost-inner thin > div classentry-content> p>Yesterday, I a hrefhttps://news.sophos.com/en-us/2020/07/14/raticate-rats-as-service-with-commercial-crypter/?cmp30728>pushed the publish button/a> on some additional research I assisted Markel Picado with on RATicate, an actor that had been sending tailored malicious emails to victims loaded with malware installers. They appear to be a Malware as a Service operation./p>p>The interesting thing is that they appear to have been using the same commercial crypting/packing tool as the actors behind GuLoader malware tracked by CheckPoint–this thing called a hrefhttps://www.securitycode.eu/>CloudEyE Protector/a>, the successor to DarkEyE Protector. The operators of that crypter-as-a-service shut it all down when people came asking about their malware distribution, and swore they would ban the bad actors./p>p>Welp, they’re back in business, and they’re following some very rigorous (lol) vetting of customers. Sebastiano and Ivano pinky promise to very closely monitor usage and look out for shenanigans. The problem with grey tools like this–which have a legitimate use as an obfuscator and license protection scheme–are always going to have abusers. The only way to tell the bad from the good is behavior-based detection./p>p>Ironically, one of the features they instituted to lock down their tools was a “hardware ID grabber” app they built with their own tool. And Windows Defender (and 16 others, including Sophos) detect it as malware./p> div idatatags-26942-66d00469eea33>/div> script> __ATA.cmd.push(function() { __ATA.initDynamicSlot({ id: atatags-26942-66d00469eea33, location: 120, formFactor: 001, label: { text: Advertisements, }, creative: { reportAd: { text: Report this ad, }, privacySettings: { text: Privacy, } } }); }); /script> /div>!-- .entry-content --> /div>!-- .post-inner --> div classsection-inner> /div>!-- .section-inner --> /article>!-- .post -->hr classpost-separator styled-separator is-style-wide section-inner aria-hiddentrue />article classpost-31 post type-post status-publish format-standard hentry category-random-ranting idpost-31> header classentry-header has-text-align-center> div classentry-header-inner section-inner medium> div classentry-categories> span classscreen-reader-text> Categories /span> div classentry-categories-inner> a hrefhttps://thepacketrat.com/category/random-ranting/ relcategory tag>Random Ranting/a> /div>!-- .entry-categories-inner --> /div>!-- .entry-categories --> h2 classentry-title heading-size-1>a hrefhttps://thepacketrat.com/2020/07/15/obligatory-rant-post/>Obligatory rant post/a>/h2> div classpost-meta-wrapper post-meta-single post-meta-single-top> ul classpost-meta> li classpost-author meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post author /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height20 viewBox0 0 18 20>path fill dM18,19 C18,19.5522847 17.5522847,20 17,20 C16.4477153,20 16,19.5522847 16,19 L16,17 C16,15.3431458 14.6568542,14 13,14 L5,14 C3.34314575,14 2,15.3431458 2,17 L2,19 C2,19.5522847 1.55228475,20 1,20 C0.44771525,20 0,19.5522847 0,19 L0,17 C0,14.2385763 2.23857625,12 5,12 L13,12 C15.7614237,12 18,14.2385763 18,17 L18,19 Z M9,10 C6.23857625,10 4,7.76142375 4,5 C4,2.23857625 6.23857625,0 9,0 C11.7614237,0 14,2.23857625 14,5 C14,7.76142375 11.7614237,10 9,10 Z M9,8 C10.6568542,8 12,6.65685425 12,5 C12,3.34314575 10.6568542,2 9,2 C7.34314575,2 6,3.34314575 6,5 C6,6.65685425 7.34314575,8 9,8 Z />/svg> /span> span classmeta-text> By a hrefhttps://thepacketrat.com/author/dotcommunist/>Sean Gallagher/a> /span> /li> li classpost-date meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post date /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height19 viewBox0 0 18 19>path fill dM4.60069444,4.09375 L3.25,4.09375 C2.47334957,4.09375 1.84375,4.72334957 1.84375,5.5 L1.84375,7.26736111 L16.15625,7.26736111 L16.15625,5.5 C16.15625,4.72334957 15.5266504,4.09375 14.75,4.09375 L13.3993056,4.09375 L13.3993056,4.55555556 C13.3993056,5.02154581 13.0215458,5.39930556 12.5555556,5.39930556 C12.0895653,5.39930556 11.7118056,5.02154581 11.7118056,4.55555556 L11.7118056,4.09375 L6.28819444,4.09375 L6.28819444,4.55555556 C6.28819444,5.02154581 5.9104347,5.39930556 5.44444444,5.39930556 C4.97845419,5.39930556 4.60069444,5.02154581 4.60069444,4.55555556 L4.60069444,4.09375 Z M6.28819444,2.40625 L11.7118056,2.40625 L11.7118056,1 C11.7118056,0.534009742 12.0895653,0.15625 12.5555556,0.15625 C13.0215458,0.15625 13.3993056,0.534009742 13.3993056,1 L13.3993056,2.40625 L14.75,2.40625 C16.4586309,2.40625 17.84375,3.79136906 17.84375,5.5 L17.84375,15.875 C17.84375,17.5836309 16.4586309,18.96875 14.75,18.96875 L3.25,18.96875 C1.54136906,18.96875 0.15625,17.5836309 0.15625,15.875 L0.15625,5.5 C0.15625,3.79136906 1.54136906,2.40625 3.25,2.40625 L4.60069444,2.40625 L4.60069444,1 C4.60069444,0.534009742 4.97845419,0.15625 5.44444444,0.15625 C5.9104347,0.15625 6.28819444,0.534009742 6.28819444,1 L6.28819444,2.40625 Z M1.84375,8.95486111 L1.84375,15.875 C1.84375,16.6516504 2.47334957,17.28125 3.25,17.28125 L14.75,17.28125 C15.5266504,17.28125 16.15625,16.6516504 16.15625,15.875 L16.15625,8.95486111 L1.84375,8.95486111 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/07/15/obligatory-rant-post/>July 15, 2020/a> /span> /li> li classpost-comment-link meta-wrapper> span classmeta-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width19 height19 viewBox0 0 19 19>path dM9.43016863,13.2235931 C9.58624731,13.094699 9.7823475,13.0241935 9.98476849,13.0241935 L15.0564516,13.0241935 C15.8581553,13.0241935 16.5080645,12.3742843 16.5080645,11.5725806 L16.5080645,3.44354839 C16.5080645,2.64184472 15.8581553,1.99193548 15.0564516,1.99193548 L3.44354839,1.99193548 C2.64184472,1.99193548 1.99193548,2.64184472 1.99193548,3.44354839 L1.99193548,11.5725806 C1.99193548,12.3742843 2.64184472,13.0241935 3.44354839,13.0241935 L5.76612903,13.0241935 C6.24715123,13.0241935 6.63709677,13.4141391 6.63709677,13.8951613 L6.63709677,15.5301903 L9.43016863,13.2235931 Z M3.44354839,14.766129 C1.67980032,14.766129 0.25,13.3363287 0.25,11.5725806 L0.25,3.44354839 C0.25,1.67980032 1.67980032,0.25 3.44354839,0.25 L15.0564516,0.25 C16.8201997,0.25 18.25,1.67980032 18.25,3.44354839 L18.25,11.5725806 C18.25,13.3363287 16.8201997,14.766129 15.0564516,14.766129 L10.2979143,14.766129 L6.32072889,18.0506004 C5.75274472,18.5196577 4.89516129,18.1156602 4.89516129,17.3790323 L4.89516129,14.766129 L3.44354839,14.766129 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/07/15/obligatory-rant-post/#respond>No Commentsspan classscreen-reader-text> on Obligatory rant post/span>/a> /span> /li> /ul>!-- .post-meta --> /div>!-- .post-meta-wrapper --> /div>!-- .entry-header-inner -->/header>!-- .entry-header --> div classpost-inner thin > div classentry-content> p>I think there are a significant number of us who predicted that this year, like the last three, would be a continued slide into the apocalypse. And it looks like we were all too optimistic at this point, weren’t we? We’re all trapped on the bus in Speed, except that the Donald is both the driver and the bomber and Keanu Reeves is definitely not coming to help./p>p>The reason that we all drastically underestimated the damage that Orange Julius Caesar could do is because our assumptions were made pre-pandemic. And even if we had known about the pandemic, we would not have been able to forsee the germophobe-in-chief pulling the counter-programming move he’s pulled unless we believed he deliberately wanted to kill hundreds of thousands of people off–which he apparently does–or that no one in a position to do anything to convince him to act decisively would succeed (or even try, until it was too late)./p>p>I say this from a position of entitlement–I have a job that allows me to work from home. But my wife and kids all have jobs that touch the public, and the premature push to be “open for business” has now endangered them (and me as a result). My eldest works for Apple retail; his store re-opened under strict guidelines, and is now closed again because of COVID-19 cases among the staff. Apple had testing in place; other employers don’t. Our governor flew to South Korea to get more tests, and yet testing lags here like it does for most of the country./p>p>People would probably have died in the thousands no matter who was in the White House. But this asshole has gone big on buffoonery and will kill another hundred thousand easily before this is done. The stress on families weighing between the benefits of earning an paycheck and the risks posed to their health (and lives, even) by working are real, and Ivanka is posing with cans of Goya black beans./p>p>We have at least until next January with this asshole, barring some sort of miracle. It’s enough to make even atheists pray./p>div idatatags-370373-66d00469ef763> script typetext/javascript> __ATA.cmd.push(function() { __ATA.initVideoSlot(atatags-370373-66d00469ef763, { sectionId: 370373, format: inread }); }); /script> /div> /div>!-- .entry-content --> /div>!-- .post-inner --> div classsection-inner> /div>!-- .section-inner --> /article>!-- .post -->hr classpost-separator styled-separator is-style-wide section-inner aria-hiddentrue />article classpost-20 post type-post status-publish format-standard hentry category-uncategorized idpost-20> header classentry-header has-text-align-center> div classentry-header-inner section-inner medium> div classentry-categories> span classscreen-reader-text> Categories /span> div classentry-categories-inner> a hrefhttps://thepacketrat.com/category/uncategorized/ relcategory tag>Uncategorized/a> /div>!-- .entry-categories-inner --> /div>!-- .entry-categories --> h2 classentry-title heading-size-1>a hrefhttps://thepacketrat.com/2020/04/24/sextortion-still-happens-apparently/>Sextortion still happens, apparently/a>/h2> div classpost-meta-wrapper post-meta-single post-meta-single-top> ul classpost-meta> li classpost-author meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post author /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height20 viewBox0 0 18 20>path fill dM18,19 C18,19.5522847 17.5522847,20 17,20 C16.4477153,20 16,19.5522847 16,19 L16,17 C16,15.3431458 14.6568542,14 13,14 L5,14 C3.34314575,14 2,15.3431458 2,17 L2,19 C2,19.5522847 1.55228475,20 1,20 C0.44771525,20 0,19.5522847 0,19 L0,17 C0,14.2385763 2.23857625,12 5,12 L13,12 C15.7614237,12 18,14.2385763 18,17 L18,19 Z M9,10 C6.23857625,10 4,7.76142375 4,5 C4,2.23857625 6.23857625,0 9,0 C11.7614237,0 14,2.23857625 14,5 C14,7.76142375 11.7614237,10 9,10 Z M9,8 C10.6568542,8 12,6.65685425 12,5 C12,3.34314575 10.6568542,2 9,2 C7.34314575,2 6,3.34314575 6,5 C6,6.65685425 7.34314575,8 9,8 Z />/svg> /span> span classmeta-text> By a hrefhttps://thepacketrat.com/author/dotcommunist/>Sean Gallagher/a> /span> /li> li classpost-date meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post date /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height19 viewBox0 0 18 19>path fill dM4.60069444,4.09375 L3.25,4.09375 C2.47334957,4.09375 1.84375,4.72334957 1.84375,5.5 L1.84375,7.26736111 L16.15625,7.26736111 L16.15625,5.5 C16.15625,4.72334957 15.5266504,4.09375 14.75,4.09375 L13.3993056,4.09375 L13.3993056,4.55555556 C13.3993056,5.02154581 13.0215458,5.39930556 12.5555556,5.39930556 C12.0895653,5.39930556 11.7118056,5.02154581 11.7118056,4.55555556 L11.7118056,4.09375 L6.28819444,4.09375 L6.28819444,4.55555556 C6.28819444,5.02154581 5.9104347,5.39930556 5.44444444,5.39930556 C4.97845419,5.39930556 4.60069444,5.02154581 4.60069444,4.55555556 L4.60069444,4.09375 Z M6.28819444,2.40625 L11.7118056,2.40625 L11.7118056,1 C11.7118056,0.534009742 12.0895653,0.15625 12.5555556,0.15625 C13.0215458,0.15625 13.3993056,0.534009742 13.3993056,1 L13.3993056,2.40625 L14.75,2.40625 C16.4586309,2.40625 17.84375,3.79136906 17.84375,5.5 L17.84375,15.875 C17.84375,17.5836309 16.4586309,18.96875 14.75,18.96875 L3.25,18.96875 C1.54136906,18.96875 0.15625,17.5836309 0.15625,15.875 L0.15625,5.5 C0.15625,3.79136906 1.54136906,2.40625 3.25,2.40625 L4.60069444,2.40625 L4.60069444,1 C4.60069444,0.534009742 4.97845419,0.15625 5.44444444,0.15625 C5.9104347,0.15625 6.28819444,0.534009742 6.28819444,1 L6.28819444,2.40625 Z M1.84375,8.95486111 L1.84375,15.875 C1.84375,16.6516504 2.47334957,17.28125 3.25,17.28125 L14.75,17.28125 C15.5266504,17.28125 16.15625,16.6516504 16.15625,15.875 L16.15625,8.95486111 L1.84375,8.95486111 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/04/24/sextortion-still-happens-apparently/>April 24, 2020/a> /span> /li> li classpost-comment-link meta-wrapper> span classmeta-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width19 height19 viewBox0 0 19 19>path dM9.43016863,13.2235931 C9.58624731,13.094699 9.7823475,13.0241935 9.98476849,13.0241935 L15.0564516,13.0241935 C15.8581553,13.0241935 16.5080645,12.3742843 16.5080645,11.5725806 L16.5080645,3.44354839 C16.5080645,2.64184472 15.8581553,1.99193548 15.0564516,1.99193548 L3.44354839,1.99193548 C2.64184472,1.99193548 1.99193548,2.64184472 1.99193548,3.44354839 L1.99193548,11.5725806 C1.99193548,12.3742843 2.64184472,13.0241935 3.44354839,13.0241935 L5.76612903,13.0241935 C6.24715123,13.0241935 6.63709677,13.4141391 6.63709677,13.8951613 L6.63709677,15.5301903 L9.43016863,13.2235931 Z M3.44354839,14.766129 C1.67980032,14.766129 0.25,13.3363287 0.25,11.5725806 L0.25,3.44354839 C0.25,1.67980032 1.67980032,0.25 3.44354839,0.25 L15.0564516,0.25 C16.8201997,0.25 18.25,1.67980032 18.25,3.44354839 L18.25,11.5725806 C18.25,13.3363287 16.8201997,14.766129 15.0564516,14.766129 L10.2979143,14.766129 L6.32072889,18.0506004 C5.75274472,18.5196577 4.89516129,18.1156602 4.89516129,17.3790323 L4.89516129,14.766129 L3.44354839,14.766129 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/04/24/sextortion-still-happens-apparently/#respond>No Commentsspan classscreen-reader-text> on Sextortion still happens, apparently/span>/a> /span> /li> /ul>!-- .post-meta --> /div>!-- .post-meta-wrapper --> /div>!-- .entry-header-inner -->/header>!-- .entry-header --> div classpost-inner thin > div classentry-content> p>I collaborated with Tamas Kocsir and the folks at CipherTrace on a report on the a hrefhttps://news.sophos.com/en-us/2020/04/22/following-the-sextortion-money/>economics of sextortion spam/a>./p>p> /p> /div>!-- .entry-content --> /div>!-- .post-inner --> div classsection-inner> /div>!-- .section-inner --> /article>!-- .post -->hr classpost-separator styled-separator is-style-wide section-inner aria-hiddentrue />article classpost-18 post type-post status-publish format-standard hentry category-malware category-phishing idpost-18> header classentry-header has-text-align-center> div classentry-header-inner section-inner medium> div classentry-categories> span classscreen-reader-text> Categories /span> div classentry-categories-inner> a hrefhttps://thepacketrat.com/category/malware/ relcategory tag>Malware/a> a hrefhttps://thepacketrat.com/category/phishing/ relcategory tag>Phishing/a> /div>!-- .entry-categories-inner --> /div>!-- .entry-categories --> h2 classentry-title heading-size-1>a hrefhttps://thepacketrat.com/2020/03/04/who-wants-coronavirus-with-the-trickbot/>Who wants Coronavirus with the Trickbot?/a>/h2> div classpost-meta-wrapper post-meta-single post-meta-single-top> ul classpost-meta> li classpost-author meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post author /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height20 viewBox0 0 18 20>path fill dM18,19 C18,19.5522847 17.5522847,20 17,20 C16.4477153,20 16,19.5522847 16,19 L16,17 C16,15.3431458 14.6568542,14 13,14 L5,14 C3.34314575,14 2,15.3431458 2,17 L2,19 C2,19.5522847 1.55228475,20 1,20 C0.44771525,20 0,19.5522847 0,19 L0,17 C0,14.2385763 2.23857625,12 5,12 L13,12 C15.7614237,12 18,14.2385763 18,17 L18,19 Z M9,10 C6.23857625,10 4,7.76142375 4,5 C4,2.23857625 6.23857625,0 9,0 C11.7614237,0 14,2.23857625 14,5 C14,7.76142375 11.7614237,10 9,10 Z M9,8 C10.6568542,8 12,6.65685425 12,5 C12,3.34314575 10.6568542,2 9,2 C7.34314575,2 6,3.34314575 6,5 C6,6.65685425 7.34314575,8 9,8 Z />/svg> /span> span classmeta-text> By a hrefhttps://thepacketrat.com/author/dotcommunist/>Sean Gallagher/a> /span> /li> li classpost-date meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post date /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height19 viewBox0 0 18 19>path fill dM4.60069444,4.09375 L3.25,4.09375 C2.47334957,4.09375 1.84375,4.72334957 1.84375,5.5 L1.84375,7.26736111 L16.15625,7.26736111 L16.15625,5.5 C16.15625,4.72334957 15.5266504,4.09375 14.75,4.09375 L13.3993056,4.09375 L13.3993056,4.55555556 C13.3993056,5.02154581 13.0215458,5.39930556 12.5555556,5.39930556 C12.0895653,5.39930556 11.7118056,5.02154581 11.7118056,4.55555556 L11.7118056,4.09375 L6.28819444,4.09375 L6.28819444,4.55555556 C6.28819444,5.02154581 5.9104347,5.39930556 5.44444444,5.39930556 C4.97845419,5.39930556 4.60069444,5.02154581 4.60069444,4.55555556 L4.60069444,4.09375 Z M6.28819444,2.40625 L11.7118056,2.40625 L11.7118056,1 C11.7118056,0.534009742 12.0895653,0.15625 12.5555556,0.15625 C13.0215458,0.15625 13.3993056,0.534009742 13.3993056,1 L13.3993056,2.40625 L14.75,2.40625 C16.4586309,2.40625 17.84375,3.79136906 17.84375,5.5 L17.84375,15.875 C17.84375,17.5836309 16.4586309,18.96875 14.75,18.96875 L3.25,18.96875 C1.54136906,18.96875 0.15625,17.5836309 0.15625,15.875 L0.15625,5.5 C0.15625,3.79136906 1.54136906,2.40625 3.25,2.40625 L4.60069444,2.40625 L4.60069444,1 C4.60069444,0.534009742 4.97845419,0.15625 5.44444444,0.15625 C5.9104347,0.15625 6.28819444,0.534009742 6.28819444,1 L6.28819444,2.40625 Z M1.84375,8.95486111 L1.84375,15.875 C1.84375,16.6516504 2.47334957,17.28125 3.25,17.28125 L14.75,17.28125 C15.5266504,17.28125 16.15625,16.6516504 16.15625,15.875 L16.15625,8.95486111 L1.84375,8.95486111 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/03/04/who-wants-coronavirus-with-the-trickbot/>March 4, 2020/a> /span> /li> li classpost-comment-link meta-wrapper> span classmeta-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width19 height19 viewBox0 0 19 19>path dM9.43016863,13.2235931 C9.58624731,13.094699 9.7823475,13.0241935 9.98476849,13.0241935 L15.0564516,13.0241935 C15.8581553,13.0241935 16.5080645,12.3742843 16.5080645,11.5725806 L16.5080645,3.44354839 C16.5080645,2.64184472 15.8581553,1.99193548 15.0564516,1.99193548 L3.44354839,1.99193548 C2.64184472,1.99193548 1.99193548,2.64184472 1.99193548,3.44354839 L1.99193548,11.5725806 C1.99193548,12.3742843 2.64184472,13.0241935 3.44354839,13.0241935 L5.76612903,13.0241935 C6.24715123,13.0241935 6.63709677,13.4141391 6.63709677,13.8951613 L6.63709677,15.5301903 L9.43016863,13.2235931 Z M3.44354839,14.766129 C1.67980032,14.766129 0.25,13.3363287 0.25,11.5725806 L0.25,3.44354839 C0.25,1.67980032 1.67980032,0.25 3.44354839,0.25 L15.0564516,0.25 C16.8201997,0.25 18.25,1.67980032 18.25,3.44354839 L18.25,11.5725806 C18.25,13.3363287 16.8201997,14.766129 15.0564516,14.766129 L10.2979143,14.766129 L6.32072889,18.0506004 C5.75274472,18.5196577 4.89516129,18.1156602 4.89516129,17.3790323 L4.89516129,14.766129 L3.44354839,14.766129 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/03/04/who-wants-coronavirus-with-the-trickbot/#respond>No Commentsspan classscreen-reader-text> on Who wants Coronavirus with the Trickbot?/span>/a> /span> /li> /ul>!-- .post-meta --> /div>!-- .post-meta-wrapper --> /div>!-- .entry-header-inner -->/header>!-- .entry-header --> div classpost-inner thin > div classentry-content> p>My first official threat report is a hrefhttps://news.sophos.com/en-us/2020/03/04/trickbot-campaign-targets-coronavirus-fears-in-italy/>now posted/a>./p> /div>!-- .entry-content --> /div>!-- .post-inner --> div classsection-inner> /div>!-- .section-inner --> /article>!-- .post -->hr classpost-separator styled-separator is-style-wide section-inner aria-hiddentrue />article classpost-11 post type-post status-publish format-standard hentry category-uncategorized idpost-11> header classentry-header has-text-align-center> div classentry-header-inner section-inner medium> div classentry-categories> span classscreen-reader-text> Categories /span> div classentry-categories-inner> a hrefhttps://thepacketrat.com/category/uncategorized/ relcategory tag>Uncategorized/a> /div>!-- .entry-categories-inner --> /div>!-- .entry-categories --> h2 classentry-title heading-size-1>a hrefhttps://thepacketrat.com/2020/03/03/rebooting/>Rebooting./a>/h2> div classpost-meta-wrapper post-meta-single post-meta-single-top> ul classpost-meta> li classpost-author meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post author /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height20 viewBox0 0 18 20>path fill dM18,19 C18,19.5522847 17.5522847,20 17,20 C16.4477153,20 16,19.5522847 16,19 L16,17 C16,15.3431458 14.6568542,14 13,14 L5,14 C3.34314575,14 2,15.3431458 2,17 L2,19 C2,19.5522847 1.55228475,20 1,20 C0.44771525,20 0,19.5522847 0,19 L0,17 C0,14.2385763 2.23857625,12 5,12 L13,12 C15.7614237,12 18,14.2385763 18,17 L18,19 Z M9,10 C6.23857625,10 4,7.76142375 4,5 C4,2.23857625 6.23857625,0 9,0 C11.7614237,0 14,2.23857625 14,5 C14,7.76142375 11.7614237,10 9,10 Z M9,8 C10.6568542,8 12,6.65685425 12,5 C12,3.34314575 10.6568542,2 9,2 C7.34314575,2 6,3.34314575 6,5 C6,6.65685425 7.34314575,8 9,8 Z />/svg> /span> span classmeta-text> By a hrefhttps://thepacketrat.com/author/dotcommunist/>Sean Gallagher/a> /span> /li> li classpost-date meta-wrapper> span classmeta-icon> span classscreen-reader-text> Post date /span> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width18 height19 viewBox0 0 18 19>path fill dM4.60069444,4.09375 L3.25,4.09375 C2.47334957,4.09375 1.84375,4.72334957 1.84375,5.5 L1.84375,7.26736111 L16.15625,7.26736111 L16.15625,5.5 C16.15625,4.72334957 15.5266504,4.09375 14.75,4.09375 L13.3993056,4.09375 L13.3993056,4.55555556 C13.3993056,5.02154581 13.0215458,5.39930556 12.5555556,5.39930556 C12.0895653,5.39930556 11.7118056,5.02154581 11.7118056,4.55555556 L11.7118056,4.09375 L6.28819444,4.09375 L6.28819444,4.55555556 C6.28819444,5.02154581 5.9104347,5.39930556 5.44444444,5.39930556 C4.97845419,5.39930556 4.60069444,5.02154581 4.60069444,4.55555556 L4.60069444,4.09375 Z M6.28819444,2.40625 L11.7118056,2.40625 L11.7118056,1 C11.7118056,0.534009742 12.0895653,0.15625 12.5555556,0.15625 C13.0215458,0.15625 13.3993056,0.534009742 13.3993056,1 L13.3993056,2.40625 L14.75,2.40625 C16.4586309,2.40625 17.84375,3.79136906 17.84375,5.5 L17.84375,15.875 C17.84375,17.5836309 16.4586309,18.96875 14.75,18.96875 L3.25,18.96875 C1.54136906,18.96875 0.15625,17.5836309 0.15625,15.875 L0.15625,5.5 C0.15625,3.79136906 1.54136906,2.40625 3.25,2.40625 L4.60069444,2.40625 L4.60069444,1 C4.60069444,0.534009742 4.97845419,0.15625 5.44444444,0.15625 C5.9104347,0.15625 6.28819444,0.534009742 6.28819444,1 L6.28819444,2.40625 Z M1.84375,8.95486111 L1.84375,15.875 C1.84375,16.6516504 2.47334957,17.28125 3.25,17.28125 L14.75,17.28125 C15.5266504,17.28125 16.15625,16.6516504 16.15625,15.875 L16.15625,8.95486111 L1.84375,8.95486111 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/03/03/rebooting/>March 3, 2020/a> /span> /li> li classpost-comment-link meta-wrapper> span classmeta-icon> svg classsvg-icon aria-hiddentrue roleimg focusablefalse xmlnshttp://www.w3.org/2000/svg width19 height19 viewBox0 0 19 19>path dM9.43016863,13.2235931 C9.58624731,13.094699 9.7823475,13.0241935 9.98476849,13.0241935 L15.0564516,13.0241935 C15.8581553,13.0241935 16.5080645,12.3742843 16.5080645,11.5725806 L16.5080645,3.44354839 C16.5080645,2.64184472 15.8581553,1.99193548 15.0564516,1.99193548 L3.44354839,1.99193548 C2.64184472,1.99193548 1.99193548,2.64184472 1.99193548,3.44354839 L1.99193548,11.5725806 C1.99193548,12.3742843 2.64184472,13.0241935 3.44354839,13.0241935 L5.76612903,13.0241935 C6.24715123,13.0241935 6.63709677,13.4141391 6.63709677,13.8951613 L6.63709677,15.5301903 L9.43016863,13.2235931 Z M3.44354839,14.766129 C1.67980032,14.766129 0.25,13.3363287 0.25,11.5725806 L0.25,3.44354839 C0.25,1.67980032 1.67980032,0.25 3.44354839,0.25 L15.0564516,0.25 C16.8201997,0.25 18.25,1.67980032 18.25,3.44354839 L18.25,11.5725806 C18.25,13.3363287 16.8201997,14.766129 15.0564516,14.766129 L10.2979143,14.766129 L6.32072889,18.0506004 C5.75274472,18.5196577 4.89516129,18.1156602 4.89516129,17.3790323 L4.89516129,14.766129 L3.44354839,14.766129 Z />/svg> /span> span classmeta-text> a hrefhttps://thepacketrat.com/2020/03/03/rebooting/#respond>No Commentsspan classscreen-reader-text> on Rebooting./span>/a> /span> /li> /ul>!-- .post-meta --> /div>!-- .post-meta-wrapper --> /div>!-- .entry-header-inner -->/header>!-- .entry-header --> div classpost-inner thin > div classentry-content> p>A lot of things have happened since I first took up the nom de plume “The Packet Rat” in 1994. For 15 years, I wrote a rumors/thinly-veiled-autobiography/surrealist tech column under the byline “R. Fink” for Government Computer News, before a redesign (and some significant corporate consolidation at 1105 Media) ended that run. In the meantime, my actual packet hunting (and other information security) exploits had continued in research and lab ops at InformationWeek, Ziff Davis, a fever-dream of a year at Tech Target, and various other exploits before landing at 1105 to run Defense Systems (and having to give up the freelance check for The Rat)./p>p>Since then, I’ve been doing cyber shit at Ars Technica. But now I’m fully down the infosec rabbit hole in a threat research role, and embarking on a book about deep packet inspection with Dave Porcello, late of Pwnie Express and other ventures./p> /div>!-- .entry-content --> /div>!-- .post-inner --> div classsection-inner> /div>!-- .section-inner --> /article>!-- .post --> /main>!-- #site-content --> div classfooter-nav-widgets-wrapper header-footer-group> div classfooter-inner section-inner> aside classfooter-widgets-outer-wrapper rolecomplementary> div classfooter-widgets-wrapper> div classfooter-widgets column-one grid-item> div classwidget widget_recent_entries>div classwidget-content> h2 classwidget-title subheading heading-size-3>Recent Posts/h2>nav aria-labelRecent Posts> ul> li> a hrefhttps://thepacketrat.com/2020/07/15/rats-of-a-different-ilk/>Rats of a different ilk/a> /li> li> a hrefhttps://thepacketrat.com/2020/07/15/obligatory-rant-post/>Obligatory rant post/a> /li> li> a hrefhttps://thepacketrat.com/2020/04/24/sextortion-still-happens-apparently/>Sextortion still happens, apparently/a> /li> li> a hrefhttps://thepacketrat.com/2020/03/04/who-wants-coronavirus-with-the-trickbot/>Who wants Coronavirus with the Trickbot?/a> /li> li> a hrefhttps://thepacketrat.com/2020/03/03/rebooting/>Rebooting./a> /li> /ul> /nav>/div>/div>div classwidget widget_archive>div classwidget-content>h2 classwidget-title subheading heading-size-3>Archives/h2>nav aria-labelArchives> ul> li>a hrefhttps://thepacketrat.com/2020/07/>July 2020/a>/li> li>a hrefhttps://thepacketrat.com/2020/04/>April 2020/a>/li> li>a hrefhttps://thepacketrat.com/2020/03/>March 2020/a>/li> /ul> /nav>/div>/div>div classwidget widget_categories>div classwidget-content>h2 classwidget-title subheading heading-size-3>Categories/h2>nav aria-labelCategories> ul> li classcat-item cat-item-15593>a hrefhttps://thepacketrat.com/category/malware/>Malware/a>/li> li classcat-item cat-item-21013>a hrefhttps://thepacketrat.com/category/phishing/>Phishing/a>/li> li classcat-item cat-item-48242>a hrefhttps://thepacketrat.com/category/random-ranting/>Random Ranting/a>/li> li classcat-item cat-item-1>a hrefhttps://thepacketrat.com/category/uncategorized/>Uncategorized/a>/li> /ul> /nav>/div>/div>div classwidget widget_meta>div classwidget-content>h2 classwidget-title subheading heading-size-3>Meta/h2>nav aria-labelMeta> ul> li>a hrefhttps://wordpress.com/start?refwplogin>Register/a>/li> li>a hrefhttps://thepacketratblog.wordpress.com/wp-login.php>Log in/a>/li> li>a hrefhttps://thepacketrat.com/feed/>Entries feed/a>/li> li>a hrefhttps://thepacketrat.com/comments/feed/>Comments feed/a>/li> li>a hrefhttps://wordpress.com/ titlePowered by WordPress, state-of-the-art semantic personal publishing platform.>WordPress.com/a>/li> /ul> /nav>/div>/div> /div> /div>!-- .footer-widgets-wrapper --> /aside>!-- .footer-widgets-outer-wrapper --> /div>!-- .footer-inner --> /div>!-- .footer-nav-widgets-wrapper --> footer idsite-footer rolecontentinfo classheader-footer-group> div classsection-inner> div classfooter-credits> p classfooter-copyright>© 2024 a hrefhttps://thepacketrat.com/>The Packet Rat/a> /p>!-- .footer-copyright --> p classpowered-by-wordpress> a hrefhttps://wordpress.com/?reffooter_website relnofollow>Create a free website or blog at WordPress.com./a> /p>!-- .powered-by-wordpress --> /div>!-- .footer-credits --> a classto-the-top href#site-header> span classto-the-top-long> To the top span classarrow aria-hiddentrue>↑/span> /span>!-- .to-the-top-long --> span classto-the-top-short> Up span classarrow aria-hiddentrue>↑/span> /span>!-- .to-the-top-short --> /a>!-- .to-the-top --> /div>!-- .section-inner --> /footer>!-- #site-footer --> !-- -->script src//0.gravatar.com/js/hovercards/hovercards.min.js?ver202435b46853b388ab997de6bfa04c1e397b91783aa2d3e125eb7f62b2f41b95dd5e57 idgrofiles-cards-js>/script>script idwpgroho-js-extra>var WPGroHo {my_hash:};/script>script crossoriginanonymous typetext/javascript srchttps://s2.wp.com/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m1610363240i>/script> script> // Initialize and attach hovercards to all gravatars ( function() { function init() { if ( typeof Gravatar undefined ) { return; } if ( typeof Gravatar.init ! function ) { return; } Gravatar.profile_cb function ( hash, id ) { WPGroHo.syncProfileData( hash, id ); }; Gravatar.my_hash WPGroHo.my_hash; Gravatar.init( body, #wp-admin-bar-my-account, { i18n: { Edit your profile: Edit your profile, View profile: View profile, Sorry, we are unable to load this Gravatar profile.: Sorry, we are unable to load this Gravatar profile., Too Many Requests.: Too Many Requests., Internal Server Error.: Internal Server Error., }, } ); } if ( document.readyState ! loading ) { init(); } else { document.addEventListener( DOMContentLoaded, init ); } } )(); /script> div styledisplay:none> /div> script typetext/javascript> ( function() { function init() { document.body.addEventListener( is.post-load, function() { if ( typeof __ATA.insertInlineAds function ) { __ATA.insertInlineAds(); } } ); } if ( document.readyState ! loading ) { init(); } else { document.addEventListener( DOMContentLoaded, init ); } } )(); /script> !-- CCPA start --> script typetext/javascript> ( function () { var setupPrivacy function() { // Minimal Mozilla Cookie library // https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie/Simple_document.cookie_framework var cookieLib window.cookieLib {getItem:function(e){return e&&decodeURIComponent(document.cookie.replace(new RegExp((?:(?:^|.*;)\\s*+encodeURIComponent(e).replace(/\-\.\+\*/g,\\$&)+\\s*\\\\s*(^;*).*$)|^.*$),$1))||null},setItem:function(e,o,n,t,r,i){if(!e||/^(?:expires|max\-age|path|domain|secure)$/i.test(e))return!1;var c;if(n)switch(n.constructor){case Number:cn1/0?; expiresFri, 31 Dec 9999 23:59:59 GMT:; max-age+n;break;case String:c; expires+n;break;case Date:c; expires+n.toUTCString()}returnrootDomain!r&&.rootDomain!r||(r(.rootDomainr?.:)+document.location.hostname.split(.).slice(-2).join(.)),document.cookieencodeURIComponent(e)++encodeURIComponent(o)+c+(r?; domain+r:)+(t?; path+t:)+(i?; secure:),!0}}; // Implement IAB USP API. window.__uspapi function( command, version, callback ) { // Validate callback. if ( typeof callback ! function ) { return; } // Validate the given command. if ( command ! getUSPData || version ! 1 ) { callback( null, false ); return; } // Check for GPC. If set, override any stored cookie. if ( navigator.globalPrivacyControl ) { callback( { version: 1, uspString: 1YYN }, true ); return; } // Check for cookie. var consent cookieLib.getItem( usprivacy ); // Invalid cookie. if ( null consent ) { callback( null, false ); return; } // Everything checks out. Fire the provided callback with the consent data. callback( { version: 1, uspString: consent }, true ); }; // Initialization. document.addEventListener( DOMContentLoaded, function() { // Internal functions. var setDefaultOptInCookie function() { var value 1YNN; var domain .wordpress.com location.hostname.slice( -14 ) ? .rootDomain : location.hostname; cookieLib.setItem( usprivacy, value, 365 * 24 * 60 * 60, /, domain ); }; var setDefaultOptOutCookie function() { var value 1YYN; var domain .wordpress.com location.hostname.slice( -14 ) ? .rootDomain : location.hostname; cookieLib.setItem( usprivacy, value, 24 * 60 * 60, /, domain ); }; var setDefaultNotApplicableCookie function() { var value 1---; var domain .wordpress.com location.hostname.slice( -14 ) ? .rootDomain : location.hostname; cookieLib.setItem( usprivacy, value, 24 * 60 * 60, /, domain ); }; var setCcpaAppliesCookie function( applies ) { var domain .wordpress.com location.hostname.slice( -14 ) ? .rootDomain : location.hostname; cookieLib.setItem( ccpa_applies, applies, 24 * 60 * 60, /, domain ); } var maybeCallDoNotSellCallback function() { if ( function typeof window.doNotSellCallback ) { return window.doNotSellCallback(); } return false; } // Look for usprivacy cookie first. var usprivacyCookie cookieLib.getItem( usprivacy ); // Found a usprivacy cookie. if ( null ! usprivacyCookie ) { // If the cookie indicates that CCPA does not apply, then bail. if ( 1--- usprivacyCookie ) { return; } // CCPA applies, so call our callback to add Do Not Sell link to the page. maybeCallDoNotSellCallback(); // Were all done, no more processing needed. return; } // We dont have a usprivacy cookie, so check to see if we have a CCPA applies cookie. var ccpaCookie cookieLib.getItem( ccpa_applies ); // No CCPA applies cookie found, so well need to geolocate if this visitor is from California. // This needs to happen client side because we do not have region geo data in our $SERVER headers, // only country data -- therefore we cant vary cache on the region. if ( null ccpaCookie ) { var request new XMLHttpRequest(); request.open( GET, https://public-api.wordpress.com/geo/, true ); request.onreadystatechange function () { if ( 4 this.readyState ) { if ( 200 this.status ) { // Got a geo response. Parse out the region data. var data JSON.parse( this.response ); var region data.region ? data.region.toLowerCase() : ; var ccpa_applies california, colorado, connecticut, delaware, indiana, iowa, montana, new jersey, oregon, tennessee, texas, utah, virginia.indexOf( region ) > -1; // Set CCPA applies cookie. This keeps us from having to make a geo request too frequently. setCcpaAppliesCookie( ccpa_applies ); // Check if CCPA applies to set the proper usprivacy cookie. if ( ccpa_applies ) { if ( maybeCallDoNotSellCallback() ) { // Do Not Sell link added, so set default opt-in. setDefaultOptInCookie(); } else { // Failed showing Do Not Sell link as required, so default to opt-OUT just to be safe. setDefaultOptOutCookie(); } } else { // CCPA does not apply. setDefaultNotApplicableCookie(); } } else { // Could not geo, so lets assume for now that CCPA applies to be safe. setCcpaAppliesCookie( true ); if ( maybeCallDoNotSellCallback() ) { // Do Not Sell link added, so set default opt-in. setDefaultOptInCookie(); } else { // Failed showing Do Not Sell link as required, so default to opt-OUT just to be safe. setDefaultOptOutCookie(); } } } }; // Send the geo request. request.send(); } else { // We found a CCPA applies cookie. if ( ccpaCookie true ) { if ( maybeCallDoNotSellCallback() ) { // Do Not Sell link added, so set default opt-in. setDefaultOptInCookie(); } else { // Failed showing Do Not Sell link as required, so default to opt-OUT just to be safe. setDefaultOptOutCookie(); } } else { // CCPA does not apply. setDefaultNotApplicableCookie(); } } } ); }; // Kickoff initialization. if ( window.defQueue && defQueue.isLOHP && defQueue.isLOHP 2020 ) { defQueue.items.push( setupPrivacy ); } else { setupPrivacy(); } } )(); /script> !-- CCPA end --> div classwidget widget_eu_cookie_law_widget>div classhide-on-button ads-active data-hide-timeout30 data-consent-expiration180 ideu-cookie-law styledisplay: none> form methodpost> input typesubmit valueClose and accept classaccept /> Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use. br />To find out more, including how to control cookies, see here: a hrefhttps://automattic.com/cookies/ relnofollow> Cookie Policy /a> /form>/div>/div> div idactionbar styledisplay: none; classactnbr-pub-twentytwenty actnbr-has-follow> ul> li classactnbr-btn actnbr-hidden> a classactnbr-action actnbr-actn-follow href> svg classgridicon height20 width20 xmlnshttp://www.w3.org/2000/svg viewBox0 0 20 20>path clip-ruleevenodd dm4 4.5h12v6.5h1.5v-6.5-1.5h-1.5-12-1.5v1.5 10.5c0 1.1046.89543 2 2 2h7v-1.5h-7c-.27614 0-.5-.2239-.5-.5zm10.5 2h-9v1.5h9zm-5 3h-4v1.5h4zm3.5 1.5h-1v1h1zm-1-1.5h-1.5v1.5 1 1.5h1.5 1 1.5v-1.5-1-1.5h-1.5zm-2.5 2.5h-4v1.5h4zm6.5 1.25h1.5v2.25h2.25v1.5h-2.25v2.25h-1.5v-2.25h-2.25v-1.5h2.25z fill-ruleevenodd>/path>/svg> span>Subscribe/span> /a> a classactnbr-action actnbr-actn-following no-display href> svg classgridicon height20 width20 xmlnshttp://www.w3.org/2000/svg viewBox0 0 20 20>path fill-ruleevenodd clip-ruleevenodd dM16 4.5H4V15C4 15.2761 4.22386 15.5 4.5 15.5H11.5V17H4.5C3.39543 17 2.5 16.1046 2.5 15V4.5V3H4H16H17.5V4.5V12.5H16V4.5ZM5.5 6.5H14.5V8H5.5V6.5ZM5.5 9.5H9.5V11H5.5V9.5ZM12 11H13V12H12V11ZM10.5 9.5H12H13H14.5V11V12V13.5H13H12H10.5V12V11V9.5ZM5.5 12H9.5V13.5H5.5V12Z fill#008A20>/path>path classfollowing-icon-tick dM13.5 16L15.5 18L19 14.5 stroke#008A20 stroke-width1.5>/path>/svg> span>Subscribed/span> /a> div classactnbr-popover tip tip-top-left actnbr-notice idfollow-bubble> div classtip-arrow>/div> div classtip-inner actnbr-follow-bubble> ul> li classactnbr-sitename> a hrefhttps://thepacketrat.com> img alt srchttps://s2.wp.com/i/logo/wpcom-gray-white.png srcsethttps://s2.wp.com/i/logo/wpcom-gray-white.png 1x classavatar avatar-50 height50 width50 /> The Packet Rat /a> /li> div classactnbr-message no-display>/div> form methodpost actionhttps://subscribe.wordpress.com accept-charsetutf-8 styledisplay: none;> div> input typeemail nameemail placeholderEnter your email address classactnbr-email-field aria-labelEnter your email address /> /div> input typehidden nameaction valuesubscribe /> input typehidden nameblog_id value44812389 /> input typehidden namesource valuehttps://thepacketrat.com/ /> input typehidden namesub-type valueactionbar-follow /> input typehidden id_wpnonce name_wpnonce valuefe80380b73 /> div classactnbr-button-wrap> button typesubmit valueSign me up> Sign me up /button> /div> /form> li classactnbr-login-nudge> div> Already have a WordPress.com account? a hrefhttps://wordpress.com/log-in?redirect_tohttps%3A%2F%2Fr-login.wordpress.com%2Fremote-login.php%3Faction%3Dlink%26back%3Dhttps%253A%252F%252Fthepacketrat.com%252F2020%252F07%252F15%252Frats-of-a-different-ilk%252F>Log in now./a> /div> /li> /ul> /div> /div> /li> li classactnbr-ellipsis actnbr-hidden> svg classgridicon gridicons-ellipsis height24 width24 xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24>g>path dM7 12c0 1.104-.896 2-2 2s-2-.896-2-2 .896-2 2-2 2 .896 2 2zm12-2c-1.104 0-2 .896-2 2s.896 2 2 2 2-.896 2-2-.896-2-2-2zm-7 0c-1.104 0-2 .896-2 2s.896 2 2 2 2-.896 2-2-.896-2-2-2z/>/g>/svg> div classactnbr-popover tip tip-top-left actnbr-more> div classtip-arrow>/div> div classtip-inner> ul> li classactnbr-sitename> a hrefhttps://thepacketrat.com> img alt srchttps://s2.wp.com/i/logo/wpcom-gray-white.png srcsethttps://s2.wp.com/i/logo/wpcom-gray-white.png 1x classavatar avatar-50 height50 width50 /> The Packet Rat /a> /li> li classactnbr-folded-customize> a hrefhttps://thepacketratblog.wordpress.com/wp-admin/customize.php?urlhttps%3A%2F%2Fthepacketratblog.wordpress.com%2F> svg classgridicon gridicons-customize height20 width20 xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24>g>path dM2 6c0-1.505.78-3.08 2-4 0 .845.69 2 2 2 1.657 0 3 1.343 3 3 0 .386-.08.752-.212 1.09.74.594 1.476 1.19 2.19 1.81L8.9 11.98c-.62-.716-1.214-1.454-1.807-2.192C6.753 9.92 6.387 10 6 10c-2.21 0-4-1.79-4-4zm12.152 6.848l1.34-1.34c.607.304 1.283.492 2.008.492 2.485 0 4.5-2.015 4.5-4.5 0-.725-.188-1.4-.493-2.007L18 9l-2-2 3.507-3.507C18.9 3.188 18.225 3 17.5 3 15.015 3 13 5.015 13 7.5c0 .725.188 1.4.493 2.007L3 20l2 2 6.848-6.848c1.885 1.928 3.874 3.753 5.977 5.45l1.425 1.148 1.5-1.5-1.15-1.425c-1.695-2.103-3.52-4.092-5.448-5.977z/>/g>/svg> span>Customize/span> /a> /li> li classactnbr-folded-follow> a classactnbr-action actnbr-actn-follow href> svg classgridicon height20 width20 xmlnshttp://www.w3.org/2000/svg viewBox0 0 20 20>path clip-ruleevenodd dm4 4.5h12v6.5h1.5v-6.5-1.5h-1.5-12-1.5v1.5 10.5c0 1.1046.89543 2 2 2h7v-1.5h-7c-.27614 0-.5-.2239-.5-.5zm10.5 2h-9v1.5h9zm-5 3h-4v1.5h4zm3.5 1.5h-1v1h1zm-1-1.5h-1.5v1.5 1 1.5h1.5 1 1.5v-1.5-1-1.5h-1.5zm-2.5 2.5h-4v1.5h4zm6.5 1.25h1.5v2.25h2.25v1.5h-2.25v2.25h-1.5v-2.25h-2.25v-1.5h2.25z fill-ruleevenodd>/path>/svg> span>Subscribe/span> /a> a classactnbr-action actnbr-actn-following no-display href> svg classgridicon height20 width20 xmlnshttp://www.w3.org/2000/svg viewBox0 0 20 20>path fill-ruleevenodd clip-ruleevenodd dM16 4.5H4V15C4 15.2761 4.22386 15.5 4.5 15.5H11.5V17H4.5C3.39543 17 2.5 16.1046 2.5 15V4.5V3H4H16H17.5V4.5V12.5H16V4.5ZM5.5 6.5H14.5V8H5.5V6.5ZM5.5 9.5H9.5V11H5.5V9.5ZM12 11H13V12H12V11ZM10.5 9.5H12H13H14.5V11V12V13.5H13H12H10.5V12V11V9.5ZM5.5 12H9.5V13.5H5.5V12Z fill#008A20>/path>path classfollowing-icon-tick dM13.5 16L15.5 18L19 14.5 stroke#008A20 stroke-width1.5>/path>/svg> span>Subscribed/span> /a> /li> li classactnbr-signup>a hrefhttps://wordpress.com/start/>Sign up/a>/li> li classactnbr-login>a hrefhttps://wordpress.com/log-in?redirect_tohttps%3A%2F%2Fr-login.wordpress.com%2Fremote-login.php%3Faction%3Dlink%26back%3Dhttps%253A%252F%252Fthepacketrat.com%252F2020%252F07%252F15%252Frats-of-a-different-ilk%252F>Log in/a>/li> li classflb-report> a hrefhttps://wordpress.com/abuse/?report_urlhttps://thepacketrat.com target_blank relnoopener noreferrer> Report this content /a> /li> li classactnbr-reader> a hrefhttps://wordpress.com/read/blogs/44812389> View site in Reader /a> /li> li classactnbr-subs> a hrefhttps://subscribe.wordpress.com/>Manage subscriptions/a> /li> li classactnbr-fold>a href>Collapse this bar/a>/li> /ul> /div> /div> /li> /ul> /div> script>window.addEventListener( load, function( event ) { var link document.createElement( link ); link.href https://s0.wp.com/wp-content/mu-plugins/actionbar/actionbar.css?v20240822; link.type text/css; link.rel stylesheet; document.head.appendChild( link ); var script document.createElement( script ); script.src https://s0.wp.com/wp-content/mu-plugins/actionbar/actionbar.js?v20231122; script.defer true; document.body.appendChild( script );} );/script> script crossoriginanonymous typetext/javascript srchttps://s1.wp.com/_static/??/wp-content/blog-plugins/wordads-classes/js/watl.js,/wp-content/mu-plugins/widgets/eu-cookie-law/templates/eu-cookie-law.js?m1715723159j>/script> script> /(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.addEventListener&&window.addEventListener(hashchange,function(){var t,elocation.hash.substring(1);/^A-z0-9_-+$/.test(e)&&(tdocument.getElementById(e))&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex-1),t.focus())},!1); /script> script typetext/javascript> (function () { var wpcom_reblog { source: toolbar, toggle_reblog_box_flair: function (obj_id, post_id) { // Go to site selector. This will redirect to their blog if they only have one. const postEndpoint `https://wordpress.com/post`; // Ideally we would use the permalink here, but fortunately this will be replaced with the // post permalink in the editor. const originalURL `${ document.location.href }?page_id${ post_id }`; const url postEndpoint + ?url + encodeURIComponent( originalURL ) + &is_post_sharetrue + &v5; const redirect function () { if ( ! window.open( url, _blank ) ) { location.href url; } }; if ( /Firefox/.test( navigator.userAgent ) ) { setTimeout( redirect, 0 ); } else { redirect(); } }, }; window.wpcom_reblog wpcom_reblog; })(); /script>script typetext/javascript>// !CDATA(function() {try{ if ( window.external &&msIsSiteMode in window.external) { if (window.external.msIsSiteMode()) { var jl document.createElement(script); jl.typetext/javascript; jl.asynctrue; jl.src/wp-content/plugins/ie-sitemode/custom-jumplist.php; var s document.getElementsByTagName(script)0; s.parentNode.insertBefore(jl, s); } }}catch(e){}})();// >/script>script src//stats.wp.com/w.js?67 defer>/script> script typetext/javascript>_tkq window._tkq || ;_stq window._stq || ;_tkq.push(storeContext, {blog_id:44812389,blog_tz:-4,user_lang:en,blog_lang:en,user_id:0});_stq.push(view, {blog:44812389,v:wpcom,tz:-4,user_id:0,subd:thepacketratblog});_stq.push(extra, {crypt:UE5XaGUuOTlwaD85flAmcm1mcmZsaDhkV11YdWtpP0NsWnVkPS9sL0ViLndld3BuVT01Uj14Ti1yYTBnR1N+UVJ+VkxET2R3Rzh1fCxhSGx8YWFMaGpQZXQxZjQ0M3luMnRzWmlhbj16WDNxYUV1JU1fT1VQb25CZ0lQWWMwZk9bSnkwOSVrbWNuX3B5NTBtckpwT1ZCcVIuZEhaK0d0Y0JDQVtxSXcsWXBLX1BvQisyPXVFaHRIZldQW3w4Nmk0TjdEZ2JuQTlrXzFlQS03PTY4JlhhZ1FfZH4vd3hIYXFddkRbTVRvWEVtb211c0h0QTZyXzV3TzZwWU9pT01KbGJUNG5MQjVWcXUuSVFzViVPblB0aHE});_stq.push( clickTrackerInit, 44812389, 0 );/script>noscript>img srchttps://pixel.wp.com/b.gif?vnoscript styleheight:1px;width:1px;overflow:hidden;position:absolute;bottom:1px; alt />/noscript>script>if ( object typeof wpcom_mobile_user_agent_info ) { wpcom_mobile_user_agent_info.init(); var mobileStatsQueryString ; if( false ! wpcom_mobile_user_agent_info.matchedPlatformName ) mobileStatsQueryString + &x_ + mobile_platforms + + wpcom_mobile_user_agent_info.matchedPlatformName; if( false ! wpcom_mobile_user_agent_info.matchedUserAgentName ) mobileStatsQueryString + &x_ + mobile_devices + + wpcom_mobile_user_agent_info.matchedUserAgentName; if( wpcom_mobile_user_agent_info.isIPad() ) mobileStatsQueryString + &x_ + ipad_views + + views; if( ! mobileStatsQueryString ) { new Image().src document.location.protocol + //pixel.wp.com/g.gif?vwpcom-no-pv + mobileStatsQueryString + &baba + Math.random(); } }/script> /body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]