Create Interactive Tour

Windows Analysis Report
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/

Overview

General Information

Sample URL:	https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/
Analysis ID:	1487698
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish44

HTML page contains obfuscated javascript

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2012,i,12718076547793080173,1048795072024831122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6256 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_186	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTTP traffic detected: POST /report/v4?s=Ct5%2FWwUB0qNHj9kw9lq8LablugZrx7H17fI2MZCOKtNoO6gyPi7frcyHvJGAfx7BWndpK7f0kVXpg3lUWcsMQzITvdRCjQw%2B4O4PNNiamwLY1VBcFXJZoYqjIEAoSw%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 474Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 04 Aug 2024 22:30:24 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=1800CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ct5%2FWwUB0qNHj9kw9lq8LablugZrx7H17fI2MZCOKtNoO6gyPi7frcyHvJGAfx7BWndpK7f0kVXpg3lUWcsMQzITvdRCjQw%2B4O4PNNiamwLY1VBcFXJZoYqjIEAoSw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ae1fddfb81842d5-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9917
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/9446
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_202.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_121.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_196.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_147.2.dr, chromecache_153.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_196.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=120&cm=6fa2af96a81df49455196145126f31d2
Source: chromecache_142.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/5/c=3825/tp=DTSC/tpid=
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_196.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:6fa2af96a81df49455196145126f31d2
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://cdn.tynt.com/afwu.js
Source: chromecache_196.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1M
Source: chromecache_196.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1MT
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_196.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/6fa2af96a81df49455196145126f31d2/ur
Source: chromecache_196.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_196.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=6fa2af96a81df49455196145126f31d2&gdpr=0&redir=https%3A
Source: chromecache_102.2.dr, chromecache_202.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_196.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=6fa2af96a81df49455196145126f31d2
Source: chromecache_196.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=6fa2af96a81df49455196145126f31d2
Source: chromecache_196.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_196.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_196.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=6fa2af96a81df49455196145126f31d2&gdpr=0
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_164.2.dr, chromecache_143.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_164.2.dr, chromecache_143.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_196.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_196.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=6fa2af96a81df494551961
Source: chromecache_196.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=6fa2af96a81df49455196145126f31d2&gdpr=0
Source: chromecache_196.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_196.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=lotame&cspid=20&cb=$
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.sharethis.com/lotame?uid=6fa2af96a81df49455196145126f31d2&gdpr=0
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_196.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_142.2.dr, chromecache_121.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_164.2.dr, chromecache_143.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_138.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_121.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_196.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=7&puid=6fa2af96a81df49455196145126f31d2&gdpr=0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 58799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 58764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 58753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 58788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 58775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 58752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 58821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 58730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 58809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 58866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 58763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 58705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58781
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 58823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 58739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58788
Source: unknown	Network traffic detected: HTTP traffic on port 58834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58795
Source: unknown	Network traffic detected: HTTP traffic on port 58855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58793
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58798
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 58867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 58706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 58717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 58709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 58785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 58733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58806
Source: unknown	Network traffic detected: HTTP traffic on port 58758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58809
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58802
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58800
Source: unknown	Network traffic detected: HTTP traffic on port 58769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58732
Source: unknown	Network traffic detected: HTTP traffic on port 58853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58735
Source: unknown	Network traffic detected: HTTP traffic on port 58830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58856
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58741
Source: unknown	Network traffic detected: HTTP traffic on port 58750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58862
Source: unknown	Network traffic detected: HTTP traffic on port 58773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58748
Source: unknown	Network traffic detected: HTTP traffic on port 58704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58864
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58867
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58753
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58752
Source: unknown	Network traffic detected: HTTP traffic on port 58791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58758
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58762
Source: unknown	Network traffic detected: HTTP traffic on port 58806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58764
Source: unknown	Network traffic detected: HTTP traffic on port 58829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58760
Source: unknown	Network traffic detected: HTTP traffic on port 58749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58769
Source: unknown	Network traffic detected: HTTP traffic on port 58727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58767
Source: unknown	Network traffic detected: HTTP traffic on port 58772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58774
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58770
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 58843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58814
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58810
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58811
Source: unknown	Network traffic detected: HTTP traffic on port 58792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 58863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 58714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58709
Source: unknown	Network traffic detected: HTTP traffic on port 58781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58821
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58822
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58830
Source: unknown	Network traffic detected: HTTP traffic on port 58725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 58759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58839
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58835

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49752 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@22/233@280/94

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2012,i,12718076547793080173,1048795072024831122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2012,i,12718076547793080173,1048795072024831122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	100%	Avira URL Cloud	malware
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	13%	Virustotal		Browse
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Link
d1hmmdgobu85y9.cloudfront.net	0%	Virustotal	Browse
global.px.quantserve.com	0%	Virustotal	Browse
um.simpli.fi	0%	Virustotal	Browse
2p.com.tr	0%	Virustotal	Browse
api.intentiq.com	0%	Virustotal	Browse
live.rezync.com	0%	Virustotal	Browse
d-ams1.turn.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
cdn.w55c.net	0%	Virustotal	Browse
files.site-fusion.co.uk	0%	Virustotal	Browse
sync.intentiq.com	0%	Virustotal	Browse
httplogserver-lb.global.unified-prod.sharethis.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
sync.crwdcntrl.net	0%	Virustotal	Browse
s4.histats.com	0%	Virustotal	Browse
idaas-ext.cph.liveintent.com	0%	Virustotal	Browse
idaas6.cph.liveintent.com	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
pixel.onaudience.com	0%	Virustotal	Browse
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
us-u.openx.net	0%	Virustotal	Browse
sea.k8s.garenanow.com	0%	Virustotal	Browse
match.prod.bidr.io	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
pixel-sync.sitescout.com	0%	Virustotal	Browse
googlehosted.l.googleusercontent.com	0%	Virustotal	Browse
t.dtscout.com	1%	Virustotal	Browse
ml314.com	0%	Virustotal	Browse
a.dtssrv.com	0%	Virustotal	Browse
bcp.crwdcntrl.net	0%	Virustotal	Browse
pixel-origin.mathtag.com	0%	Virustotal	Browse
ps.eyeota.net	0%	Virustotal	Browse
ff-rewards-redeem-codes-org.github.io	11%	Virustotal	Browse
dmp.truoptik.com	0%	Virustotal	Browse
user-data-eu.bidswitch.net	0%	Virustotal	Browse
de.tynt.com	0%	Virustotal	Browse
idsync.rlcdn.com	0%	Virustotal	Browse
pugm-amsfpairbc.pubmnet.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://api.jqueryui.com/jQuery.widget/	0%	URL Reputation	safe
http://api.jqueryui.com/category/ui-core/	0%	URL Reputation	safe
https://pixel.onaudience.com/?partner=137085098&mapped=104017228106277D17B02632FCA7DD3E	0%	Avira URL Cloud	safe
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	0%	Avira URL Cloud	safe
http://api.jqueryui.com/slide-effect/	0%	Avira URL Cloud	safe
https://pippio.com/api/sync?it=1&pid=500040&_=1722810674.1967204&iv=438c819a-037b-4b26-a303-98f905a6d199:1722810674.194733	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/a53bf2276aa814a0053de1eb24d48b1b.png	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=6fa2af96a81df49455196145126f31d2&gdpr=0&redir=https%3A	0%	Avira URL Cloud	safe
https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NjA2MzI5ODY4MzA3NjYyMxAAGg0IioLAtQYSBQjoBxAAQgBKAA	0%	Avira URL Cloud	safe
https://cms.quantserve.com/pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=liveintent&gdpr=&gdpr_consent=	0%	Avira URL Cloud	safe
https://sync.sharethis.com/eyeota?uid=2X3yn0gbAbFfbr_GjtvlOSM6TJu1RrGjkeHI39nJnBl8&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1722810641988&_li_chk=true&previous_uuid=1eec453d51a34faf82d870e9c7443769	0%	Avira URL Cloud	safe
https://loadm.exelator.com/load/?p=204&g=1133&j=0	0%	Avira URL Cloud	safe
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531162996026&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D438c819a-037b-4b26-a303-98f905a6d199%253A1722810674.194733%26pid%3D500040%26it%3D1%26iv%3D438c819a-037b-4b26-a303-98f905a6d199%253A1722810674.194733%26_%3D1722810674.1967204	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/vendorsmain.js	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=1f3fd65b-3c48-4af3-a379-2a84b564dbf2/gdpr=0/gdpr_consent=	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&dc_rc=3&dc_mr=5&dc_orig=51mdg9u&	0%	Avira URL Cloud	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery-color	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/css/57fd6fc58a09519be8012650efd9881d.jpg	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AAUOq07NYAIAABQoavKU5A&gdpr=0	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/js-track/track.js	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/akplCmyGhcKXySj_c-ODskbnlzLDwbcnT0wAJVl3Fm2WAK0wL5WYUT1-rw-I6IaDYOg	0%	Avira URL Cloud	safe
https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=6fa2af96a81df49455196145126f31d2	0%	Avira URL Cloud	safe
http://api.jqueryui.com/button/	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/css/twitter.css	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0&_bee_ppp=1	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=cd682a99-d220-aa04-ca5d-cb17ef4e2bf3&iiqpciddate=1722810644513&tsrnd=317_1722810644515&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.134%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.134%5C%22%22%7D&gdpr=0	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/9917	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=1f3fd65b-3c48-4af3-a379-2a84b564dbf2&ttd_puid=1553d419-e913-455a-8a01-9e2735cda6bd%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D1553d419-e913-455a-8a01-9e2735cda6bd%2C%257B%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2520Chrome%2522%252C%2522version%2522%253A%2522117.0.5938.134%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%255Cu003dBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.134%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D	0%	Avira URL Cloud	safe
http://api.jqueryui.com/size-effect/	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=1553d419-e913-455a-8a01-9e2735cda6bd%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D1553d419-e913-455a-8a01-9e2735cda6bd%252C%25257B%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252520Chrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.134%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25255Cu003dBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.134%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sync.smartadserver.com/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1MTI2ZjMxZDI&gdpr=0	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js	0%	Avira URL Cloud	safe
https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=6fa2af96a81df49455196145126f31d2&_li_chk=true&previous_uuid=54c3a50331274a0288909bda48a5577f	0%	Avira URL Cloud	safe
https://idsync.rlcdn.com/386076.gif?partner_uid=ZGUABmawAQUAAAAIR74iAw%3D%3D&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=6fa2af96a81df49455196145126f31d2&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	0%	Avira URL Cloud	safe
https://pd.sharethis.com/pd/dtscout	0%	Avira URL Cloud	safe
https://d.agkn.com/pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D219573204964004230591	0%	Avira URL Cloud	safe
https://i6.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=08dd1f2a-693a-4a67-902e-5b838eb99565	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/css/b3c9dc5b5bba47430a7da8301c09d45b.png	0%	Avira URL Cloud	safe
https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	0%	Avira URL Cloud	safe
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	0%	Avira URL Cloud	safe
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/c34038edcf4185b3e75a6b85f1cd3d4f.jpg	0%	Avira URL Cloud	safe
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	0%	Avira URL Cloud	safe
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=RbTjAmawAQWElRLxLEtnfg%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fff-rewards-redeem-codes-org.github.io%2FFree-Fire-%2F&us_privacy=&cache_buster=1722810672861.6	0%	Avira URL Cloud	safe
https://2p.com.tr/wp-content/uploads/2018/07/google_PNG19635.png	0%	Avira URL Cloud	safe
https://sync.ipredictive.com/d/sync/cookie/generic?partner=lotame&cspid=20&cb=${ADELPHIC_CACHE_BUSTER}&redirect=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D16622%26tp%3DALDX%26tpid%3D%24{ADELPHIC_CUID}%26gdpr%3D0	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/fad350ab1b376d6e63f4e20880b7714d.png	0%	Avira URL Cloud	safe
https://um.simpli.fi/lj_match?r=1722810681195	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/e328a85faf3ec595e525860c98e34098.png	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=7ri0rgu&uid=530E26AC-D59C-4BE1-A712-916E72C05C0B	0%	Avira URL Cloud	safe
http://api.jqueryui.com/transfer-effect/	0%	Avira URL Cloud	safe
https://de.tynt.com/deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.134%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.134&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fff-rewards-redeem-codes-org.github.io%2FFree-Fire-%2F	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm=&google_sc=&google_hm=S21XWk84Z2E5OVkrWWdPWg%3D%3D&google_tc=	0%	Avira URL Cloud	safe
https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=6fa2af96a81df49455196145126f31d2	0%	Avira URL Cloud	safe
http://www.robertpenner.com/easing)	0%	Avira URL Cloud	safe
https://idsync.rlcdn.com/395886.gif?partner_uid=3646063298683076623	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID&rdf=1	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=6fa2af96a81df49455196145126f31d2&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	0%	Avira URL Cloud	safe
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=1811/tp=TBMG/tpid=ZrABFAAAAp0rBABb/gdpr=0&_test=ZrABFAAAAp0rBABb	0%	Avira URL Cloud	safe
http://api.jqueryui.com/drop-effect/	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/images/d72825e76a981573e800cb3983bff287.png	0%	Avira URL Cloud	safe
https://ml314.com/utsync.ashx?eid=50052&et=0&fp=297ep6rcWu1g9AfaFxsyT0MKGoQJz9SIoYRoKnDnhWt8&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0	0%	Avira URL Cloud	safe
https://lex.33across.com/ps/v1/pubtoken/?pid=128&us_privacy=&rnd=1722810629845.1&ru=https%3A%2F%2Flive.rezync.com%2Fsync%3Fc%3D4656c20ee35215f78e9273796625d90b%26p%3Dcab5a4722e64fa65aba8e60b6da5d556%26pcat%3D%26pdev%3D%26pctry%3DUS%26referrer%3Dhttps%253A%252F%252Fff-rewards-redeem-codes-org.github.io%252FFree-Fire-%252F%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cache_buster%3D%24%7BRANDOM%7D%26custom1%3D%24%7BPUBTOK%7D	0%	Avira URL Cloud	safe
https://ml314.com/csync.ashx?fp=0a060ae9d0c734c19393e0d82b1d50887110b69f1bbe82a1aadf67c08094aef2f4cb09cee1a4f8eb&person_id=3646063298683076623&eid=50082	0%	Avira URL Cloud	safe
https://thrtle.com/sync?vxii_pid=5015&vxii_pdid=1f3fd65b-3c48-4af3-a379-2a84b564dbf2	0%	Avira URL Cloud	safe
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1722810672861.3&ref=	0%	Avira URL Cloud	safe
http://api.jqueryui.com/menu/	0%	Avira URL Cloud	safe
https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0	0%	Avira URL Cloud	safe
https://d.agkn.com/pixel/10751/?che=1722810644304&ip=8.46.123.33&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D219573204964004230591	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZrABEyzCHudxHyxOOM24jGSS	0%	Avira URL Cloud	safe
https://loadm.exelator.com/load/?p=204&g=1133&j=0&xl8blockcheck=1	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=51mdg9u&uid=6fa2af96a81df49455196145126f31d2&gdpr=0	0%	Avira URL Cloud	safe
http://api.jqueryui.com/category/effects-core/	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/8235	0%	Avira URL Cloud	safe
https://track2.securedvisit.com/sync/1540_03681?id=na	0%	Avira URL Cloud	safe
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=JG3mAQZHSe_I1ZgsRRGCYfXq&rnd=1722810681207	0%	Avira URL Cloud	safe
https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0	0%	Avira URL Cloud	safe
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1722810672861.4	0%	Avira URL Cloud	safe
http://api.jqueryui.com/dialog/	0%	Avira URL Cloud	safe
http://api.jqueryui.com/shake-effect/	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1M	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=9sn4omv&uid=uD63quuO1SAJKv5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	0%	Avira URL Cloud	safe
https://ml314.com/utsync.ashx?eid=50131&et=13&cid=lr&fp=ZGUABmawAQUAAAAIR74iAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D	0%	Avira URL Cloud	safe
https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D281%252Ftp%253DANXS%252Ftpid%253D%2524UID%252Fgdpr%253D0%252Frand%3D192251483	0%	Avira URL Cloud	safe
https://raviral.com/host_style/style/new_ff_v2/css/main.css	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID	0%	Avira URL Cloud	safe
https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d1hmmdgobu85y9.cloudfront.net	18.172.153.44	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	35.204.158.49	true	false	0%, Virustotal, Browse	unknown
2p.com.tr	13.87.80.50	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.166	true	false	0%, Virustotal, Browse	unknown
d-ams1.turn.com	46.228.164.13	true	false	0%, Virustotal, Browse	unknown
live.rezync.com	52.84.174.30	true	false	0%, Virustotal, Browse	unknown
cdn.w55c.net	52.57.107.183	true	false	0%, Virustotal, Browse	unknown
httplogserver-lb.global.unified-prod.sharethis.net	3.65.17.209	true	false	0%, Virustotal, Browse	unknown
api.intentiq.com	13.226.175.74	true	false	0%, Virustotal, Browse	unknown
sync.crwdcntrl.net	34.254.23.94	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
s4.histats.com	149.56.240.131	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.181.226	true	false	0%, Virustotal, Browse	unknown
idaas-ext.cph.liveintent.com	52.44.233.84	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
files.site-fusion.co.uk	94.136.40.180	true	false	0%, Virustotal, Browse	unknown
sync.intentiq.com	13.249.9.80	true	false	0%, Virustotal, Browse	unknown
idaas6.cph.liveintent.com	52.204.163.76	true	false	0%, Virustotal, Browse	unknown
bcp.crwdcntrl.net	54.171.9.108	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	52.223.40.198	true	false	0%, Virustotal, Browse	unknown
match.prod.bidr.io	34.240.89.10	true	false	0%, Virustotal, Browse	unknown
us-u.openx.net	35.244.159.8	true	false	0%, Virustotal, Browse	unknown
t.dtscout.com	141.101.120.11	true	false	1%, Virustotal, Browse	unknown
pixel.onaudience.com	54.38.113.7	true	false	0%, Virustotal, Browse	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.17.191.168	true	false	0%, Virustotal, Browse	unknown
sea.k8s.garenanow.com	202.81.96.1	true	false	0%, Virustotal, Browse	unknown
ml314.com	34.117.77.79	true	false	0%, Virustotal, Browse	unknown
googlehosted.l.googleusercontent.com	142.250.185.129	true	false	0%, Virustotal, Browse	unknown
a.dtssrv.com	172.67.163.146	true	false	0%, Virustotal, Browse	unknown
pixel-origin.mathtag.com	216.200.232.249	true	false	0%, Virustotal, Browse	unknown
de.tynt.com	67.202.105.32	true	false	0%, Virustotal, Browse	unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	0%, Virustotal, Browse	unknown
ff-rewards-redeem-codes-org.github.io	185.199.110.153	true	true	11%, Virustotal, Browse	unknown
user-data-eu.bidswitch.net	35.214.149.91	true	false	0%, Virustotal, Browse	unknown
ps.eyeota.net	18.184.216.10	true	false	0%, Virustotal, Browse	unknown
idsync.rlcdn.com	35.244.174.68	true	false	0%, Virustotal, Browse	unknown
dmp.truoptik.com	104.17.111.254	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.2.137	true	false		unknown
pixel.33across.com	67.202.105.23	true	false		unknown
i.simpli.fi	35.234.162.151	true	false		unknown
m.ib-ibi.com	69.169.86.39	true	false		unknown
sync.srv.stackadapt.com	54.164.216.236	true	false		unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	18.200.32.5	true	false		unknown
thrtle.com	52.44.197.74	true	false		unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	52.50.204.243	true	false		unknown
pixel.tapad.com	34.111.113.62	true	false		unknown
rtb-csync-euw2.smartadserver.com	149.202.238.105	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
pippio.com	107.178.254.65	true	false		unknown
sync.ipredictive.com	54.147.125.191	true	false		unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.68.22.185	true	false		unknown
raviral.com	188.114.97.3	true	false		unknown
track2.securedvisit.com	107.20.227.246	true	false		unknown
global.ib-ibi.com	69.169.85.6	true	false		unknown
tags.crwdcntrl.net	18.239.18.12	true	false		unknown
1605158521.rsc.cdn77.org	138.199.37.35	true	false		unknown
thirdparty-logserver-lb.global.unified-prod.sharethis.net	3.66.122.212	true	false		unknown
t.dtscdn.com	104.26.13.60	true	false		unknown
e.dtscout.com	141.101.120.11	true	false		unknown
ic.tynt.com	67.202.105.34	true	false		unknown
ib.anycast.adnxs.com	185.89.210.90	true	false		unknown
load-euw1.exelator.com	54.78.254.47	true	false		unknown
aorta.clickagy.com	54.221.216.118	true	false		unknown
pm.w55c.net	unknown	unknown	false		unknown
idpix.media6degrees.com	unknown	unknown	false		unknown
secure.adnxs.com	unknown	unknown	false		unknown
ib.mookie1.com	unknown	unknown	false		unknown
token.rubiconproject.com	unknown	unknown	false		unknown
sync.smartadserver.com	unknown	unknown	false		unknown
i6.liadm.com	unknown	unknown	false		unknown
ce.lijit.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
d.turn.com	unknown	unknown	false		unknown
stags.bluekai.com	unknown	unknown	false		unknown
sync.mathtag.com	unknown	unknown	false		unknown
c.cintnetworks.com	unknown	unknown	false		unknown
i.w55c.net	unknown	unknown	false		unknown
sync-tm.everesttech.net	unknown	unknown	false		unknown
p.rfihub.com	unknown	unknown	false		unknown
sync.sharethis.com	unknown	unknown	false		unknown
t.sharethis.com	unknown	unknown	false		unknown
image6.pubmatic.com	unknown	unknown	false		unknown
lh3.googleusercontent.com	unknown	unknown	false		unknown
d.agkn.com	unknown	unknown	false		unknown
cdn-tc.33across.com	unknown	unknown	false		unknown
loadus.exelator.com	unknown	unknown	false		unknown
aqfer.lijit.com	unknown	unknown	false		unknown
cdn.tynt.com	unknown	unknown	false		unknown
agent.intentiq.com	unknown	unknown	false		unknown
idsync.reson8.com	unknown	unknown	false		unknown
e.dlx.addthis.com	unknown	unknown	false		unknown
s10.histats.com	unknown	unknown	false		unknown
aa.agkn.com	unknown	unknown	false		unknown
dpm.demdex.net	unknown	unknown	false		unknown
x.bidswitch.net	unknown	unknown	false		unknown
i.liadm.com	unknown	unknown	false		unknown
x.dlx.addthis.com	unknown	unknown	false		unknown
tags.bluekai.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pixel.onaudience.com/?partner=137085098&mapped=104017228106277D17B02632FCA7DD3E	false	Avira URL Cloud: safe	unknown
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	false	Avira URL Cloud: safe	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1722810674.1967204&iv=438c819a-037b-4b26-a303-98f905a6d199:1722810674.194733	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/a53bf2276aa814a0053de1eb24d48b1b.png	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NjA2MzI5ODY4MzA3NjYyMxAAGg0IioLAtQYSBQjoBxAAQgBKAA	false	Avira URL Cloud: safe	unknown
https://cms.quantserve.com/pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=liveintent&gdpr=&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://sync.sharethis.com/eyeota?uid=2X3yn0gbAbFfbr_GjtvlOSM6TJu1RrGjkeHI39nJnBl8&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1722810641988&_li_chk=true&previous_uuid=1eec453d51a34faf82d870e9c7443769	false	Avira URL Cloud: safe	unknown
https://loadm.exelator.com/load/?p=204&g=1133&j=0	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5144588531162996026&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D438c819a-037b-4b26-a303-98f905a6d199%253A1722810674.194733%26pid%3D500040%26it%3D1%26iv%3D438c819a-037b-4b26-a303-98f905a6d199%253A1722810674.194733%26_%3D1722810674.1967204	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/vendorsmain.js	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=1f3fd65b-3c48-4af3-a379-2a84b564dbf2/gdpr=0/gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&dc_rc=3&dc_mr=5&dc_orig=51mdg9u&	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AAUOq07NYAIAABQoavKU5A&gdpr=0	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/css/57fd6fc58a09519be8012650efd9881d.jpg	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/js-track/track.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/akplCmyGhcKXySj_c-ODskbnlzLDwbcnT0wAJVl3Fm2WAK0wL5WYUT1-rw-I6IaDYOg	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=6fa2af96a81df49455196145126f31d2	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/css/twitter.css	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0	false	Avira URL Cloud: safe	unknown
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0&_bee_ppp=1	false	Avira URL Cloud: safe	unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=cd682a99-d220-aa04-ca5d-cb17ef4e2bf3&iiqpciddate=1722810644513&tsrnd=317_1722810644515&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.134%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.134%5C%22%22%7D&gdpr=0	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=1f3fd65b-3c48-4af3-a379-2a84b564dbf2&ttd_puid=1553d419-e913-455a-8a01-9e2735cda6bd%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D1553d419-e913-455a-8a01-9e2735cda6bd%2C%257B%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2520Chrome%2522%252C%2522version%2522%253A%2522117.0.5938.134%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%255Cu003dBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.134%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=1553d419-e913-455a-8a01-9e2735cda6bd%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D1553d419-e913-455a-8a01-9e2735cda6bd%252C%25257B%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252520Chrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.134%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25255Cu003dBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.134%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1MTI2ZjMxZDI&gdpr=0	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=6fa2af96a81df49455196145126f31d2&_li_chk=true&previous_uuid=54c3a50331274a0288909bda48a5577f	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/386076.gif?partner_uid=ZGUABmawAQUAAAAIR74iAw%3D%3D&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://pd.sharethis.com/pd/dtscout	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=6fa2af96a81df49455196145126f31d2&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false	Avira URL Cloud: safe	unknown
https://d.agkn.com/pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D219573204964004230591	false	Avira URL Cloud: safe	unknown
https://i6.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=08dd1f2a-693a-4a67-902e-5b838eb99565	false	Avira URL Cloud: safe	unknown
https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync	false		unknown
https://raviral.com/host_style/style/new_ff_v2/css/b3c9dc5b5bba47430a7da8301c09d45b.png	false	Avira URL Cloud: safe	unknown
https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/c34038edcf4185b3e75a6b85f1cd3d4f.jpg	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=RbTjAmawAQWElRLxLEtnfg%3D%3D&pcat=&pdev=&pctry=US&referrer=https%3A%2F%2Fff-rewards-redeem-codes-org.github.io%2FFree-Fire-%2F&us_privacy=&cache_buster=1722810672861.6	false	Avira URL Cloud: safe	unknown
https://2p.com.tr/wp-content/uploads/2018/07/google_PNG19635.png	false	Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?partner=lotame&cspid=20&cb=${ADELPHIC_CACHE_BUSTER}&redirect=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D16622%26tp%3DALDX%26tpid%3D%24{ADELPHIC_CUID}%26gdpr%3D0	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/fad350ab1b376d6e63f4e20880b7714d.png	false	Avira URL Cloud: safe	unknown
https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=	false		unknown
https://um.simpli.fi/lj_match?r=1722810681195	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/e328a85faf3ec595e525860c98e34098.png	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=7ri0rgu&uid=530E26AC-D59C-4BE1-A712-916E72C05C0B	false	Avira URL Cloud: safe	unknown
https://de.tynt.com/deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.134%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.134&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fff-rewards-redeem-codes-org.github.io%2FFree-Fire-%2F	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm=&google_sc=&google_hm=S21XWk84Z2E5OVkrWWdPWg%3D%3D&google_tc=	false	Avira URL Cloud: safe	unknown
https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=6fa2af96a81df49455196145126f31d2	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/395886.gif?partner_uid=3646063298683076623	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID&rdf=1	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=6fa2af96a81df49455196145126f31d2&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=1811/tp=TBMG/tpid=ZrABFAAAAp0rBABb/gdpr=0&_test=ZrABFAAAAp0rBABb	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/images/d72825e76a981573e800cb3983bff287.png	false	Avira URL Cloud: safe	unknown
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	true		unknown
https://ml314.com/utsync.ashx?eid=50052&et=0&fp=297ep6rcWu1g9AfaFxsyT0MKGoQJz9SIoYRoKnDnhWt8&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	false	Avira URL Cloud: safe	unknown
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0	false	Avira URL Cloud: safe	unknown
https://lex.33across.com/ps/v1/pubtoken/?pid=128&us_privacy=&rnd=1722810629845.1&ru=https%3A%2F%2Flive.rezync.com%2Fsync%3Fc%3D4656c20ee35215f78e9273796625d90b%26p%3Dcab5a4722e64fa65aba8e60b6da5d556%26pcat%3D%26pdev%3D%26pctry%3DUS%26referrer%3Dhttps%253A%252F%252Fff-rewards-redeem-codes-org.github.io%252FFree-Fire-%252F%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cache_buster%3D%24%7BRANDOM%7D%26custom1%3D%24%7BPUBTOK%7D	false	Avira URL Cloud: safe	unknown
https://ml314.com/csync.ashx?fp=0a060ae9d0c734c19393e0d82b1d50887110b69f1bbe82a1aadf67c08094aef2f4cb09cee1a4f8eb&person_id=3646063298683076623&eid=50082	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=5015&vxii_pdid=1f3fd65b-3c48-4af3-a379-2a84b564dbf2	false	Avira URL Cloud: safe	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1722810672861.3&ref=	false	Avira URL Cloud: safe	unknown
https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0	false	Avira URL Cloud: safe	unknown
https://d.agkn.com/pixel/10751/?che=1722810644304&ip=8.46.123.33&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D219573204964004230591	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZrABEyzCHudxHyxOOM24jGSS	false	Avira URL Cloud: safe	unknown
https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825	false		unknown
https://loadm.exelator.com/load/?p=204&g=1133&j=0&xl8blockcheck=1	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=51mdg9u&uid=6fa2af96a81df49455196145126f31d2&gdpr=0	false	Avira URL Cloud: safe	unknown
https://track2.securedvisit.com/sync/1540_03681?id=na	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=JG3mAQZHSe_I1ZgsRRGCYfXq&rnd=1722810681207	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1722810672861.4	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=9sn4omv&uid=uD63quuO1SAJKv5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	false	Avira URL Cloud: safe	unknown
https://ml314.com/utsync.ashx?eid=50131&et=13&cid=lr&fp=ZGUABmawAQUAAAAIR74iAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D	false	Avira URL Cloud: safe	unknown
https://cdn-tc.33across.com/lotame-sync.html	false		unknown
https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D281%252Ftp%253DANXS%252Ftpid%253D%2524UID%252Fgdpr%253D0%252Frand%3D192251483	false	Avira URL Cloud: safe	unknown
https://raviral.com/host_style/style/new_ff_v2/css/main.css	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://api.jqueryui.com/slide-effect/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=6fa2af96a81df49455196145126f31d2&gdpr=0&redir=https%3A	chromecache_196.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery-color	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/jQuery.widget/	chromecache_102.2.dr, chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/button/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/9917	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/category/ui-core/	chromecache_102.2.dr, chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	chromecache_164.2.dr, chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://www.robertpenner.com/easing)	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%	chromecache_196.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/drop-effect/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/menu/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/category/effects-core/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/8235	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/dialog/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NmZhMmFmOTZhODFkZjQ5NDU1MTk2MTQ1M	chromecache_196.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/shake-effect/	chromecache_102.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	unknown
https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=	chromecache_164.2.dr, chromecache_143.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.228.74.166	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
3.68.22.185	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.172.153.44	d1hmmdgobu85y9.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
69.169.86.39	m.ib-ibi.com	United States	29838	AMCUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
3.66.122.212	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
54.221.216.118	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
185.199.110.153	ff-rewards-redeem-codes-org.github.io	Netherlands	54113	FASTLYUS	true
34.254.143.3	unknown	United States	16509	AMAZON-02US	false
34.206.225.95	unknown	United States	14618	AMAZON-AESUS	false
104.17.111.254	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
13.249.9.80	sync.intentiq.com	United States	16509	AMAZON-02US	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.17.191.168	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
69.169.85.6	global.ib-ibi.com	United States	29838	AMCUS	false
13.226.175.74	api.intentiq.com	United States	16509	AMAZON-02US	false
52.214.219.236	unknown	United States	16509	AMAZON-02US	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
216.200.232.253	unknown	United States	30419	MEDIAMATH-INCUS	false
172.67.163.146	a.dtssrv.com	United States	13335	CLOUDFLARENETUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
104.26.13.60	t.dtscdn.com	United States	13335	CLOUDFLARENETUS	false
94.136.40.180	files.site-fusion.co.uk	United Kingdom	20738	GD-EMEA-DC-LD5GB	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
164.132.25.185	unknown	France	16276	OVHFR	false
34.240.201.67	unknown	United States	16509	AMAZON-02US	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
54.204.126.99	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
18.239.69.49	unknown	United States	16509	AMAZON-02US	false
149.202.238.105	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
149.56.240.131	s4.histats.com	Canada	16276	OVHFR	false
149.56.240.132	unknown	Canada	16276	OVHFR	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
52.208.182.178	unknown	United States	16509	AMAZON-02US	false
3.69.134.134	unknown	United States	16509	AMAZON-02US	false
107.20.227.246	track2.securedvisit.com	United States	14618	AMAZON-AESUS	false
35.234.162.151	i.simpli.fi	United States	15169	GOOGLEUS	false
18.184.216.10	ps.eyeota.net	United States	16509	AMAZON-02US	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
13.32.110.114	unknown	United States	16509	AMAZON-02US	false
172.67.74.186	unknown	United States	13335	CLOUDFLARENETUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
34.254.23.94	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
44.199.122.18	unknown	United States	14618	AMAZON-AESUS	false
52.204.163.76	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
52.44.233.84	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
108.128.116.23	unknown	United States	16509	AMAZON-02US	false
52.50.204.243	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.120.214.218	unknown	United States	16509	AMAZON-02US	false
188.114.97.3	raviral.com	European Union	13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
54.147.125.191	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
52.57.150.20	unknown	United States	16509	AMAZON-02US	false
52.44.197.74	thrtle.com	United States	14618	AMAZON-AESUS	false
143.204.98.65	unknown	United States	16509	AMAZON-02US	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
141.101.120.11	t.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
141.101.120.10	unknown	European Union	13335	CLOUDFLARENETUS	false
52.57.107.183	cdn.w55c.net	United States	16509	AMAZON-02US	false
67.202.105.23	pixel.33across.com	United States	32748	STEADFASTUS	false
54.164.216.236	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
35.214.149.91	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
54.38.113.7	pixel.onaudience.com	France	16276	OVHFR	false
52.28.68.83	unknown	United States	16509	AMAZON-02US	false
67.202.105.33	unknown	United States	32748	STEADFASTUS	false
18.200.32.5	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
67.202.105.32	de.tynt.com	United States	32748	STEADFASTUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
34.240.89.10	match.prod.bidr.io	United States	16509	AMAZON-02US	false
54.171.9.108	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
35.204.89.238	unknown	United States	15169	GOOGLEUS	false
67.202.105.34	ic.tynt.com	United States	32748	STEADFASTUS	false
99.80.89.220	unknown	United States	16509	AMAZON-02US	false
18.239.18.12	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
52.84.174.30	live.rezync.com	United States	16509	AMAZON-02US	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
3.65.17.209	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
138.199.37.35	1605158521.rsc.cdn77.org	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
13.87.80.50	2p.com.tr	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487698
Start date and time:	2024-08-05 00:29:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@22/233@280/94
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 66.102.1.84, 142.250.186.78, 172.217.18.3, 142.250.186.74, 34.104.35.123, 142.250.185.227, 104.20.18.71, 104.20.19.71, 142.250.185.202, 142.250.185.234, 172.217.16.138, 142.250.184.202, 172.217.18.10, 216.58.212.170, 142.250.186.42, 142.250.185.106, 216.58.206.74, 142.250.185.138, 142.250.185.170, 142.250.186.138, 142.250.184.234, 142.250.74.202, 142.250.181.234, 95.101.111.167, 95.101.111.145, 104.18.34.83, 172.64.153.173, 95.101.111.156, 95.101.111.153, 2.23.197.190, 104.18.35.167, 172.64.152.89, 2.19.126.132, 2.19.126.156, 52.165.165.26, 199.232.214.172, 69.173.144.138, 69.173.144.139, 69.173.144.165, 51.144.7.192, 20.166.126.56, 104.18.9.149, 104.18.8.149, 13.107.42.14, 151.101.194.49, 151.101.66.49, 151.101.130.49, 151.101.2.49, 20.3.187.198, 104.18.19.248, 104.18.18.248, 52.165.164.15, 131.107.255.255, 193.0.160.131
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, cdn-tc.33across.com.cdn.cloudflare.net, e213908.b.akamaiedge.net, cdn.tynt.com.cdn.cloudflare.net, dns.msftncsi.com, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, a24365-c026.edgekey.net, cert1.a1.atm.aqfer.net.edgekey.net, e167121.b.akamaiedge.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, a.rfihub.com.akadns.net, update.googleapis.com, s10.histats.com.cdn.cloudflare.net, dlx.addthis.com.edgekey.net, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, collector-main.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, waws-prod-am2-241.westeurope.cloudapp.azure.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.m
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	Avira URL Cloud: detection malicious, Label: malware
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	LLM: Score: 8 Reasons: The domain 'ff-rewards-redeem-codes-org.github.io' is unusual and does not match the brand name 'Free Fire'. The presence of multiple logos and professional design elements may be intended to give the site a legitimate appearance, but the unusual domain name and lack of direct correlation to the brand name are strong indicators of a phishing attempt. DOM: 0.8.pages.csv
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	LLM: Score: 8 Reasons: The URL's domain appears to be associated with 'github.io', which is commonly used for hosting open-source projects. However, the presence of a login prompt and logos for various platforms, such as Google, Facebook, and Apple, raises suspicions. The brand name 'FREE FIRE' is displayed on the webpage, which is a common tactic used by phishing sites to trick users into providing sensitive information. Additionally, the domain extension '.io' is commonly associated with internet-based services, but it is not a typical extension used by 'FREE FIRE'. Overall, while the domain appears to be associated with a legitimate open-source project, the presence of suspicious elements and the brand name's display on the webpage suggests a high likelihood of phishing. DOM: 0.0.pages.csv

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	Matcher: Template: apple matched
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	Matcher: Template: apple matched
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	Matcher: Template: apple matched
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	Matcher: Template: apple matched

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Form action: https://raviral.com/k_fac.php github raviral

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017228106277D17B02632FCA7DD3E
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C#cid=c010&cls=C&rnd=0.678893284223234&stid=ZGUABmawAQUAAAAIR74iAw%253D%253D&tt=t.dhj&dhjLcy=1722810629686&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1497.23400&ell=d&cck=__stid&dmn=ff-rewards-redeem-codes-org.github.io&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017228106277D17B02632FCA7DD3E
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C#cid=c010&cls=C&rnd=0.678893284223234&stid=ZGUABmawAQUAAAAIR74iAw%253D%253D&tt=t.dhj&dhjLcy=1722810629686&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1497.23400&ell=d&cck=__stid&dmn=ff-rewards-redeem-codes-org.github.io&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017228106277D17B02632FCA7DD3E
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C#cid=c010&cls=C&rnd=0.678893284223234&stid=ZGUABmawAQUAAAAIR74iAw%253D%253D&tt=t.dhj&dhjLcy=1722810629686&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1497.23400&ell=d&cck=__stid&dmn=ff-rewards-redeem-codes-org.github.io&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C#cid=c010&cls=C&rnd=0.5832942204776386&stid=ZGUABmawAQUAAAAIR74iAw%253D%253D&tt=t.dhj&dhjLcy=1722810673083&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1497.23400&ell=d&cck=__stid&dmn=ff-rewards-redeem-codes-org.github.io&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=

Source: https://t.dtscout.com/idg/?su=104017228106277D17B02632FCA7DD3E	HTTP Parser: No favicon
Source: https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync#cls=sync&dmn=ff-rewards-redeem-codes-org.github.io&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1497.794&ell=d&cck=ljt_reader&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=	HTTP Parser: No favicon
Source: https://cdn-tc.33across.com/lotame-sync.html	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C#cid=c010&cls=C&rnd=0.678893284223234&stid=ZGUABmawAQUAAAAIR74iAw%253D%253D&tt=t.dhj&dhjLcy=1722810629686&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1497.23400&ell=d&cck=__stid&dmn=ff-rewards-redeem-codes-org.github.io&pn=%2FFree-Fire-%2F&qs=na&rdn=ff-rewards-redeem-codes-org.github.io&rpn=%2FFree-Fire-%2F&rqs=na&cc=US&cont=NA&ipaddr=	HTTP Parser: No favicon
Source: https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync	HTTP Parser: No favicon
Source: https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync	HTTP Parser: No favicon
Source: https://pxdrop.lijit.com/a/t_.htm?ver=1.1497.794&cid=c026&cls=sync	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1497.23400&cid=c010&cls=C	HTTP Parser: No favicon
Source: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825	HTTP Parser: No favicon
Source: https://bcp.crwdcntrl.net/pixels?src=LTJS&s=31%2C92%2C54%2C2%2C7%2C81%2C33%2C79%2C78%2C122%2C121%2C26%2C22%2C116%2C61%2C154%2C106%2C104%2C8%2C148%2C3%2C49%2C94&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	HTTP Parser: No favicon
Source: https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1722810641935	HTTP Parser: No favicon
Source: https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1722810681196	HTTP Parser: No favicon

Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: No <meta name="copyright".. found
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: No <meta name="copyright".. found
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: No <meta name="copyright".. found
Source: https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.7:58698 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:54505 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: ff-rewards-redeem-codes-org.github.io
Source: global traffic	DNS traffic detected: DNS query: prod-api.reward.ff.garena.com
Source: global traffic	DNS traffic detected: DNS query: raviral.com
Source: global traffic	DNS traffic detected: DNS query: files.site-fusion.co.uk
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: 2p.com.tr
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: s10.histats.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: s4.histats.com
Source: global traffic	DNS traffic detected: DNS query: e.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: lex.33across.com
Source: global traffic	DNS traffic detected: DNS query: e.dlx.addthis.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: x.dlx.addthis.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: freefiremobile-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: dmp.truoptik.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: idsync.reson8.com
Source: global traffic	DNS traffic detected: DNS query: pixel.33across.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: load77.exelator.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: sync.mathtag.com

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 5, 2024 00:30:23.397622108 CEST	192.168.2.7	1.1.1.1	c22a	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:24.311364889 CEST	192.168.2.7	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:25.913891077 CEST	192.168.2.7	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:29.172862053 CEST	192.168.2.7	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:31.948717117 CEST	192.168.2.7	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:34.691387892 CEST	192.168.2.7	1.1.1.1	c26e	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:36.707313061 CEST	192.168.2.7	1.1.1.1	c286	(Port unreachable)	Destination Unreachable
Aug 5, 2024 00:30:44.812201023 CEST	192.168.2.7	1.1.1.1	c263	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	691	OUT	GET /Free-Fire-/ HTTP/1.1 Host: ff-rewards-redeem-codes-org.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	736	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27845 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Wed, 27 Mar 2024 09:52:59 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6603ec7b-6cc5" expires: Sun, 04 Aug 2024 22:40:23 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2146:16163F:195C450:1EB5EAC:66B000FA Accept-Ranges: bytes Age: 0 Date: Sun, 04 Aug 2024 22:30:23 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890086-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1722810623.176781,VS0,VE20 Vary: Accept-Encoding X-Fastly-Request-ID: a1968b70e168cf412a31e45b83b299302d535012
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 20 20 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 20 0a 0a 76 61 72 20 65 6e 6b 72 69 70 73 69 3d 22 27 32 43 27 32 43 27 31 41 27 30 33 46 4d 41 56 5b 52 47 27 30 32 6a 76 6f 6e 27 31 47 27 32 43 27 31 41 6a 76 6f 6e 27 30 32 66 63 76 63 2f 60 77 6b 6e 66 2f 76 6b 6f 67 71 76 63 6f 72 2f 77 76 61 27 31 46 27 30 30 30 32 30 33 2f 32 36 2f 32 34 56 32 3a 27 31 43 30 37 27 31 43 31 33 2c 30 37 3a 58 27 30 30 27 30 32 6e 63 6c 65 27 31 46 27 30 30 67 6c 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 31 41 6a 67 63 66 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 6f 67 76 63 27 30 32 6a 76 76 72 2f 67 73 77 6b 74 27 31 46 27 30 30 61 6d 6c 76 67 6c 76 2f 76 7b 72 Data Ascii: <script language="javascript"> var enkripsi="'2C'2C'1A'03FMAV[RG'02jvon'1G'2C'1Ajvon'02fcvc/`wknf/vkogqvcor/wva'1F'000203/26/24V2:'1C07'1C13,07:X'00'02ncle'1F'00gl'00'1G'2C'02'02'02'1Ajgcf'1G'2C'02'02'02'02'02'02'1Aogvc'02jvvr/gswkt'1F'00amlvglv/v{r
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 32 27 31 41 6f 67 76 63 27 30 32 6c 63 6f 67 27 31 46 27 30 30 76 6b 76 6e 67 27 30 30 27 30 32 61 6d 6c 76 67 6c 76 27 31 46 27 30 30 44 70 67 67 44 6b 70 67 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 6f 67 76 63 27 30 32 6c 63 6f 67 27 31 46 27 30 30 66 67 71 61 70 6b 72 76 6b 6d 6c 27 30 30 27 30 32 61 6d 6c 76 67 6c 76 27 31 46 27 30 30 44 70 67 67 44 6b 70 67 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 6f 67 76 63 27 30 32 72 70 6d 72 67 70 76 7b 27 31 46 27 30 30 6d 65 27 31 43 76 6b 76 6e 67 27 30 30 27 30 32 61 6d 6c 76 67 6c 76 27 31 46 27 30 30 44 70 67 67 44 6b 70 67 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 Data Ascii: 2'1Aogvc'02lcog'1F'00vkvng'00'02amlvglv'1F'00DpggDkpg'00'1G'2C'02'02'02'02'02'02'1Aogvc'02lcog'1F'00fgqapkrvkml'00'02amlvglv'1F'00DpggDkpg'00'1G'2C'02'02'02'02'02'02'1Aogvc'02rpmrgpv{'1F'00me'1Cvkvng'00'02amlvglv'1F'00DpggDkpg'00'1G'2C'02'02'02'02'02'02'1
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 66 6b 74 27 30 32 66 63 76 63 2f 74 2f 66 37 36 3a 61 61 67 67 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6a 6d 6f 67 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 66 6b 74 27 30 32 66 63 76 63 2f 74 2f 36 35 60 63 33 30 32 64 27 31 46 27 30 30 27 30 30 27 30 32 66 63 76 63 2f 74 2f 66 37 36 3a 61 61 67 67 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 Data Ascii: 1G'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1Afkt'02fcvc/t/f76:aagg'1F'00'00'02ancqq'1F'00jmog'00'1G'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1Afkt'02fcvc/t/65`c302d'1F'00'00'02fcvc/t/f76:aagg'1F'00'00'02ancqq'1F'0
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 71 72 63 6c 27 30 32 66 63 76 63 2f 74 2f 34 61 37 66 3b 30 3b 35 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6f 63 6b 6c 5d 5d 66 67 71 61 70 6b 72 76 6b 6d 6c 27 30 30 27 31 47 52 6e 67 63 71 67 27 30 32 6e 6d 65 27 30 32 6b 6c 2c 27 31 41 2d 71 72 63 6c 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 Data Ascii: 02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1Aqrcl'02fcvc/t/4a7f;0;5'1F'00'00'02ancqq'1F'00ockl]]fgqapkrvkml'00'1GRngcqg'02nme'02kl,'1A-qrcl'1G'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 66 6b 74 27 30 32 6b 66 27 31 46 27 30 30 64 60 4e 6d 65 6b 6c 27 30 30 27 30 32 66 63 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 66 63 76 63 2f 74 2f 35 63 30 66 31 66 3b 3a 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 27 30 32 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 2f 2f 6a 6d 74 67 70 27 30 30 27 31 47 27 30 32 27 31 41 6b 6f 65 27 30 32 66 63 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 71 70 61 27 31 46 27 30 30 6a 76 76 72 71 27 31 43 2d 2d 70 63 74 6b 70 63 6e 2c 61 6d 6f 2d 6a 6d 71 76 5d 71 76 7b 6e 67 2d 71 76 7b 6e 67 2d 6c 67 75 5d 64 64 5d 74 30 2d 6b 6f 63 65 Data Ascii: 2'02'02'02'02'1Afkt'02kf'1F'00d`Nmekl'00'02fcvc/t/:17:443g'1F'00'00'02fcvc/t/5c0f1f;:'1F'00'00'02ancqq'1F'00koceg/amlvcklgp'02koceg/amlvcklgp//jmtgp'00'1G'02'1Akoe'02fcvc/t/:17:443g'1F'00'00'02qpa'1F'00jvvrq'1C--pctkpcn,amo-jmqv]qv{ng-qv{ng-lgu]dd]t0-koce
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 66 63 76 63 2f 74 2f 35 63 30 66 31 66 3b 3a 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 27 30 32 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 2f 2f 6a 6d 74 67 70 27 30 30 27 31 47 27 30 32 27 31 41 6b 6f 65 27 30 32 66 63 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 71 70 61 27 31 46 27 30 30 6a 76 76 72 71 27 31 43 2d 2d 70 63 74 6b 70 63 6e 2c 61 6d 6f 2d 6a 6d 71 76 5d 71 76 7b 6e 67 2d 71 76 7b 6e 67 2d 6c 67 75 5d 64 64 5d 74 30 2d 6b 6f 63 65 67 71 2d 31 64 60 37 33 3a 60 35 61 37 3a 3a 33 63 66 34 63 67 60 34 61 34 64 66 63 3a 35 34 30 35 67 3b 2c 72 6c 65 27 30 30 27 30 32 Data Ascii: vc/t/:17:443g'1F'00'00'02fcvc/t/5c0f1f;:'1F'00'00'02ancqq'1F'00koceg/amlvcklgp'02koceg/amlvcklgp//jmtgp'00'1G'02'1Akoe'02fcvc/t/:17:443g'1F'00'00'02qpa'1F'00jvvrq'1C--pctkpcn,amo-jmqv]qv{ng-qv{ng-lgu]dd]t0-kocegq-1d`73:`5a7::3cf4cg`4a4dfc:5405g;,rle'00'02
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 66 6b 74 27 30 32 6b 66 27 31 46 27 30 30 76 75 6b 76 4e 6d 65 6b 6c 27 30 30 27 30 32 66 63 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 66 63 76 63 2f 74 2f 35 63 30 66 31 66 3b 3a 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 27 30 32 6b 6f 63 65 67 2f 61 6d 6c 76 63 6b 6c 67 70 2f 2f 6a 6d 74 67 70 27 30 30 27 31 47 27 30 32 27 31 41 6b 6f 65 27 30 32 66 63 76 63 2f 74 2f 3a 31 37 3a 34 34 33 67 27 31 46 27 30 30 27 30 30 27 30 32 71 70 61 27 31 46 27 30 30 6a 76 76 72 71 27 31 43 2d 2d 70 63 74 6b 70 63 6e Data Ascii: 02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1Afkt'02kf'1F'00vukvNmekl'00'02fcvc/t/:17:443g'1F'00'00'02fcvc/t/5c0f1f;:'1F'00'00'02ancqq'1F'00koceg/amlvcklgp'02koceg/amlvcklgp//jmtgp'00'1G'02'1Akoe'02fcvc/t/:17:443g'1F'00'00'02qpa'1F'00jvvrq'1C--pctkpcn
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 71 71 27 31 46 27 30 30 6a 6b 65 6a 6e 6b 65 6a 76 27 30 30 27 31 47 33 30 27 31 41 2d 71 72 63 6c 27 31 47 27 30 32 61 6a 63 70 63 61 76 67 70 71 27 30 41 27 30 32 61 6d 6c 71 6b 71 76 6b 6c 65 27 30 32 6d 64 27 30 32 61 63 72 6b 76 63 6e 27 30 32 6e 67 76 76 67 70 71 27 30 32 63 6c 66 27 30 32 6c 77 6f 60 67 70 71 2c 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 2d 6e 6b 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 Data Ascii: qq'1F'00jkejnkejv'00'1G30'1A-qrcl'1G'02ajcpcavgpq'0A'02amlqkqvkle'02md'02acrkvcn'02ngvvgpq'02clf'02lwo`gpq,'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1A-nk'1G'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 67 27 30 32 63 60 6e 67 27 30 32 76 6d 27 30 32 70 67 66 67 67 6f 27 30 32 7b 6d 77 70 27 30 32 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 70 67 75 63 70 66 71 27 30 32 75 6b 76 6a 27 30 32 65 77 67 71 76 27 30 32 63 61 61 6d 77 6c 76 71 2c 27 30 32 5b 6d 77 27 30 32 6f 63 7b 27 30 32 60 6b 6c 66 27 30 32 7b 6d 77 70 27 30 32 63 61 61 6d 77 6c 76 27 30 32 76 6d 27 30 32 44 63 61 67 60 6d 6d 69 27 30 32 6d 70 27 30 32 54 49 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 Data Ascii: g'02c`ng'02vm'02pgfggo'02{mwp'02'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02pgucpfq'02ukvj'02ewgqv'02caamwlvq,'02[mw'02oc{'02`klf'02{mwp'02caamwlv'02vm'02Dcag`mmi'02mp'02TI'2C'02'02'02'02'02'02'02'
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 74 2f 30 61 67 67 61 66 33 67 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6a 6d 6f 67 2f 72 63 6c 67 6e 5d 5d 76 6b 76 6e 67 27 30 30 27 31 47 4b 6f 72 6d 70 76 63 6c 76 27 30 32 4c 6d 76 6b 61 67 27 31 43 27 31 41 2d 6a 36 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 31 41 6d 6e 27 30 32 66 63 76 63 2f 74 2f 30 61 67 67 61 66 33 67 27 31 46 27 30 30 27 30 30 27 30 32 61 6e 63 71 71 27 31 46 27 30 30 6e 6b 71 76 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 Data Ascii: t/0aggaf3g'1F'00'00'02ancqq'1F'00jmog/rclgn]]vkvng'00'1GKormpvclv'02Lmvkag'1C'1A-j6'1G'2C'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'02'1Amn'02fcvc/t/0aggaf3g'1F'00'00'02ancqq'1F'00nkqv'00'1G'2C'02'02'02'02'02'02'02'02'02'02'02'0

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	694	OUT	GET /ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	962	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-50b" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1497557 Expires: Fri, 25 Jul 2025 22:30:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2db%2B%2FEXvghm4JFC6gFBB%2B04aGmxK8Nf5s5ppF3diLqUlRE4DTLwLoVkRmuwTVIPtqzFcDb315BvPH2AQrWWnsRY%2BS9Yw6oh5oYiFkz7ixpN5MkWAooymk0vjEZfhOs%2ByOVi2OkQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ae1fddf7f1832e4-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:23 UTC	407	IN	Data Raw: 35 30 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 e2 80 93 32 30 31 34 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 69 66 28 21 28 61 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 Data Ascii: 50b/! jQuery UI Touch Punch 0.2.3 * * Copyright 20112014, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */!function(a){function f(a,b){if(!(a.originalEvent
2024-08-04 22:30:23 UTC	891	IN	Data Raw: 2e 73 63 72 65 65 6e 58 2c 63 2e 73 63 72 65 65 6e 59 2c 63 2e 63 6c 69 65 6e 74 58 2c 63 2e 63 6c 69 65 6e 74 59 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 30 2c 6e 75 6c 6c 29 2c 61 2e 74 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 64 29 7d 7d 69 66 28 61 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 3d 22 6f 6e 74 6f 75 63 68 65 6e 64 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2c 61 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 29 7b 76 61 72 20 65 2c 62 3d 61 2e 75 69 2e 6d 6f 75 73 65 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 62 2e 5f 6d 6f 75 73 65 49 6e 69 74 2c 64 3d 62 2e 5f 6d 6f 75 73 65 44 65 73 74 72 6f 79 3b 62 2e 5f 74 6f 75 63 68 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 21 65 26 26 62 2e 5f 6d 6f 75 Data Ascii: .screenX,c.screenY,c.clientX,c.clientY,!1,!1,!1,!1,0,null),a.target.dispatchEvent(d)}}if(a.support.touch="ontouchend"in document,a.support.touch){var e,b=a.ui.mouse.prototype,c=b._mouseInit,d=b._mouseDestroy;b._touchStart=function(a){var b=this;!e&&b._mou
2024-08-04 22:30:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	646	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	606	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 646912 Date: Sun, 04 Aug 2024 22:30:23 GMT X-Served-By: cache-lga21958-LGA, cache-ewr18149-EWR X-Cache: HIT, HIT X-Cache-Hits: 3326, 0 X-Timer: S1722810624.901977,VS0,VE1 Vary: Accept-Encoding
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-08-04 22:30:23 UTC	680	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 68 74 74 70 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 38 32 33 35 0a 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 7d 0a 09 09 7d 0a 09 09 6f 72 69 67 28 20 65 6c 65 6d 73 20 29 3b 0a 09 7d 3b 0a 7d 29 28 20 24 2e 63 6c 65 61 6e 44 61 74 61 20 29 3b 0a 0a 24 2e 77 69 64 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 61 6d 65 2c 20 62 61 73 65 2c 20 70 72 6f 74 6f 74 79 70 65 20 29 20 7b 0a 09 76 61 72 20 66 75 6c 6c 4e 61 6d 65 2c 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 62 61 73 65 50 72 6f 74 6f 74 79 70 65 2c 0a 09 09 2f 2f 20 70 72 6f 78 69 65 64 50 72 6f 74 6f 74 79 70 65 20 61 6c 6c 6f 77 73 20 74 68 Data Ascii: }// http://bugs.jquery.com/ticket/8235} catch ( e ) {}}orig( elems );};})( $.cleanData );$.widget = function( name, base, prototype ) {var fullName, existingConstructor, constructor, basePrototype,// proxiedPrototype allows th
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 6f 20 63 72 65 61 74 65 20 74 68 65 20 70 72 6f 74 6f 74 79 70 65 20 69 6e 20 63 61 73 65 20 77 65 20 6e 65 65 64 20 74 6f 0a 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 77 69 64 67 65 74 20 6c 61 74 65 72 0a 09 09 5f 70 72 6f 74 6f 3a 20 24 2e 65 78 74 65 6e 64 28 20 7b 7d 2c 20 70 72 6f 74 6f 74 79 70 65 20 29 2c 0a 09 09 2f 2f 20 74 72 61 63 6b 20 77 69 64 67 65 74 73 20 74 68 61 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 69 73 20 77 69 64 67 65 74 20 69 6e 20 63 61 73 65 20 74 68 69 73 20 77 69 64 67 65 74 20 69 73 0a 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 64 20 61 66 74 65 72 20 61 20 77 69 64 67 65 74 20 69 6e 68 65 72 69 74 73 20 66 72 6f 6d 20 69 74 0a 09 09 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3a 20 5b 5d 0a 09 Data Ascii: o create the prototype in case we need to// redefine the widget later_proto: $.extend( {}, prototype ),// track widgets that inherit from this widget in case this widget is// redefined after a widget inherits from it_childConstructors: []
2024-08-04 22:30:23 UTC	1378	IN	Data Raw: 20 74 68 65 20 70 72 65 66 69 78 2c 20 65 2e 67 2e 2c 20 64 72 61 67 67 61 62 6c 65 3a 73 74 61 72 74 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 70 72 65 66 69 78 20 66 6f 72 20 77 69 64 67 65 74 73 20 74 68 61 74 20 61 72 65 6e 27 74 20 44 4f 4d 2d 62 61 73 65 64 0a 09 09 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 20 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3f 20 28 62 61 73 65 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 20 7c 7c 20 6e 61 6d 65 29 20 3a 20 6e 61 6d 65 0a 09 7d 2c 20 70 72 6f 78 69 65 64 50 72 6f 74 6f 74 79 70 65 2c 20 7b 0a 09 09 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 0a 09 09 6e 61 6d 65 73 70 61 63 65 3a 20 6e 61 6d 65 73 70 61 63 65 2c 0a Data Ascii: the prefix, e.g., draggable:start// don't prefix for widgets that aren't DOM-basedwidgetEventPrefix: existingConstructor ? (basePrototype.widgetEventPrefix \|\| name) : name}, proxiedPrototype, {constructor: constructor,namespace: namespace,

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	585	OUT	GET /host_style/style/new_ff_v2/css/main.css HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	704	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: text/css Content-Length: 32850 Connection: close Cf-Bgj: minify Cf-Polished: origSize=38429 Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4136 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l77hq6rRwdBOiZhU2vbVFwsLh1T%2BuLyBmygrAGEu%2F6Zl39gY2BZfCFMJRrc6u9ri5pExGSu6caw7da0izYVYjwlLJGMJTWFpuo%2FPsVPwDLBQGc%2F4xp06UPvd%2Bu3ZqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfaba51971-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:23 UTC	665	IN	Data Raw: 2e 6c 6f 61 64 69 6e 67 5b 64 61 74 61 2d 76 2d 32 33 37 61 31 36 31 37 5d 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 37 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 6c 6f 61 64 69 6e 67 5f 5f 6d 61 73 6b 5b 64 61 74 61 2d 76 2d 32 33 37 61 31 36 31 37 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 6c 6f 61 64 69 6e 67 20 2e 6c 6f 61 64 65 72 5b 64 61 74 61 2d 76 2d 32 33 37 61 31 36 31 37 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a Data Ascii: .loading[data-v-237a1617]{position:fixed;top:0;left:0;z-index:7;width:100%;height:100%}.loading__mask[data-v-237a1617]{position:absolute;top:0;left:0;width:100%;height:100%;background:rgba(0,0,0,.8)}.loading .loader[data-v-237a1617]{position:absolute;top:
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 37 32 30 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 62 75 74 74 6f 6e 2d 2d 73 6d 5b 64 61 74 61 2d 76 2d 37 64 36 37 64 65 65 33 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 38 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 7b 2e 62 75 74 74 6f 6e 2d 2d 73 6d 5b 64 61 74 61 2d 76 2d 37 64 36 37 64 65 65 33 5d 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 39 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 36 37 70 78 29 7b 2e 62 75 74 74 6f 6e 2d 2d 73 6d 5b 64 61 74 61 2d 76 2d 37 Data Ascii: 7200;cursor:pointer}.button--sm[data-v-7d67dee3]{font-size:14px;padding:5px 8px}@media(min-device-width:480px)and (orientation:landscape){.button--sm[data-v-7d67dee3]{padding:4px 9px;font-size:14px}}@media screen and (min-width:667px){.button--sm[data-v-7
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 73 69 62 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 61 38 36 61 64 63 31 32 65 34 66 64 66 66 33 66 36 35 63 36 37 64 33 39 36 61 62 35 32 64 32 39 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 2f 63 6f 6e 74 61 69 6e 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 36 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 37 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 34 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 36 37 70 78 29 7b 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 5b 64 61 Data Ascii: sible;-webkit-transition:all .3s ease-in-out;transition:all .3s ease-in-out;background:url(a86adc12e4fdff3f65c67d396ab52d29.png) no-repeat 50%/contain;max-width:286px;max-height:175px;padding:10px 14px}@media screen and (min-width:667px){.modal-content[da
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 61 2d 76 2d 37 30 31 34 38 32 31 32 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 7d 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 5f 5f 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 37 30 31 34 38 32 31 32 5d 7b 77 69 64 74 68 3a 37 33 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 36 37 70 78 29 7b 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 5f 5f 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 37 30 31 34 38 32 31 32 5d 7b 77 69 64 74 68 3a 31 31 30 70 78 7d 7d 2e 66 61 64 65 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 5b 64 61 74 61 2d 76 2d 37 30 31 34 38 32 31 32 5d 2c 2e 66 61 64 65 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 5b 64 61 74 61 2d 76 2d 37 30 31 34 38 32 31 32 5d 7b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: a-v-70148212]{padding-right:20px}}.modal-content__button[data-v-70148212]{width:73px}@media screen and (min-width:667px){.modal-content__button[data-v-70148212]{width:110px}}.fade-enter-active[data-v-70148212],.fade-leave-active[data-v-70148212]{-webkit-t
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 69 64 74 68 3a 31 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 62 33 63 39 64 63 35 62 35 62 62 61 34 37 34 33 30 61 37 64 61 38 33 30 31 63 30 39 64 34 35 62 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 2f 63 6f 6e 74 61 69 6e 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 7b 2e 68 65 61 64 65 72 5f 5f 6c 6f 67 6f 5b 64 61 74 61 2d 76 2d 34 37 62 61 31 32 30 66 5d 7b 77 69 64 74 68 3a 31 32 35 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 30 32 37 39 36 33 63 66 38 64 33 65 33 65 35 31 34 39 38 36 36 37 33 Data Ascii: idth:170px;background:url(b3c9dc5b5bba47430a7da8301c09d45b.png) no-repeat 50%/contain;height:50px}@media(min-device-width:480px)and (orientation:landscape){.header__logo[data-v-47ba120f]{width:125px;height:32px;background-image:url(027963cf8d3e3e514986673
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 70 75 74 5b 64 61 74 61 2d 76 2d 37 32 30 34 64 63 65 61 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 63 64 31 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 Data Ascii: 0%;overflow:hidden;position:relative}.input[data-v-7204dcea]{position:relative;width:100%;border:2px solid #ffcd1e;border-radius:5px;font-size:18px;font-weight:500;text-align:center;padding:5px 10px}@media(min-device-width:480px)and (orientation:landscape
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 34 37 38 65 61 31 33 38 5d 7b 6d 61 78 2d 77 69 64 74 68 3a 31 35 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 33 36 36 70 78 29 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 31 2e 35 29 7b 2e 66 6f 72 6d 2d 69 6e 70 75 74 5b 64 61 74 61 2d 76 2d 34 37 38 65 61 31 33 38 5d 7b 6d 61 78 2d 77 69 64 74 68 3a 32 30 30 70 78 7d 7d 2e 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 5b 64 61 74 61 2d 76 2d 34 37 38 65 61 31 33 38 5d 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d Data Ascii: 478ea138]{max-width:150px}@media only screen and (min-width:1024px)and (max-height:1366px)and (-webkit-min-device-pixel-ratio:1.5){.form-input[data-v-478ea138]{max-width:200px}}.form-buttons[data-v-478ea138]{margin:10px auto;display:-webkit-box;display:-m
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 33 36 36 70 78 29 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 31 2e 35 29 7b 2e 6d 61 69 6e 5b 64 61 74 61 2d 76 2d 36 63 35 64 39 32 39 37 5d 7b 70 61 64 64 69 6e 67 3a 30 20 31 76 77 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 76 68 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 7d 2e 6d 61 69 6e 2d 68 65 61 64 65 72 5b 64 61 74 61 2d 76 2d 36 63 35 64 39 32 39 37 5d 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 Data Ascii: nd (min-width:1024px)and (max-height:1366px)and (-webkit-min-device-pixel-ratio:1.5){.main[data-v-6c5d9297]{padding:0 1vw;margin-top:7vh;color:#000}}.main-header[data-v-6c5d9297]{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 6c 61 6e 64 73 63 61 70 65 29 7b 2e 6d 61 69 6e 5f 5f 64 65 73 63 72 69 70 74 69 6f 6e 5b 64 61 74 61 2d 76 2d 36 63 35 64 39 32 39 37 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 36 37 70 78 29 7b 2e 6d 61 69 6e 5f 5f 64 65 73 63 72 69 70 74 69 6f 6e 5b 64 61 74 61 2d 76 2d 36 63 35 64 39 32 39 37 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 33 36 36 70 78 Data Ascii: (min-device-width:480px)and (orientation:landscape){.main__description[data-v-6c5d9297]{font-size:18px}}@media screen and (min-width:667px){.main__description[data-v-6c5d9297]{font-size:24px}}@media only screen and (min-width:1024px)and (max-height:1366px
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 2d 70 61 6e 65 6c 5b 64 61 74 61 2d 76 2d 32 63 65 65 63 64 31 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 33 36 36 70 78 29 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 31 2e 35 29 7b 2e 68 6f 6d 65 2d 70 61 6e 65 6c 5b 64 61 74 61 2d 76 2d 32 63 65 65 63 64 31 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 78 2d 68 65 Data Ascii: -panel[data-v-2ceecd1e]{background-color:transparent;margin-top:80px;max-width:700px}}@media only screen and (min-width:1024px)and (max-height:1366px)and (-webkit-min-device-pixel-ratio:1.5){.home-panel[data-v-2ceecd1e]{background-color:transparent;max-he

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	586	OUT	GET /host_style/style/new_ff_v2/css/style.css HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	710	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: text/css Content-Length: 1112 Connection: close Cf-Bgj: minify Cf-Polished: origSize=1573 Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4136 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aX%2BeVsuSLMQoe0g%2BR8LRMqnH0TTYUfTKGoeF9m9POc1%2FQOMCX2H8%2B%2F7r%2BLIbd5TWR3%2BnK%2BJ4QBZYDyMumN3RKylvj4M4aRZidgUD5MOI0orugDJ9ftYYxhH%2FW3gJnA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfba691831-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	659	IN	Data Raw: 2e 70 6f 70 75 70 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 2e 70 6f 70 75 70 2d 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 69 6d 67 2f 73 34 5f 74 61 62 5f 62 67 2e 70 6e 67 29 3b 6f 70 61 63 69 74 79 3a 2e 36 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 25 3b 77 69 64 74 68 3a 33 35 34 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 63 Data Ascii: .popup{width:100%;height:100%;position:fixed;top:0;left:0;z-index:9999;background-color:rgba(0,0,0,.4)}.popup-box{background-image:url(img/s4_tab_bg.png);opacity:.6;position:relative;margin:0 auto;margin-top:30%;margin-bottom:10%;width:354px;height:auto;c
2024-08-04 22:30:24 UTC	453	IN	Data Raw: 77 69 64 74 68 3a 33 33 30 70 78 3b 68 65 69 67 68 74 3a 33 35 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 35 30 70 78 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 74 65 6b 6f 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 63 6c 6f 73 65 2d 66 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 Data Ascii: width:330px;height:350px;position:relative;margin:50px auto;margin-top:10%;text-align:center;font-family:teko;color:#000;border-radius:10px}.close-fb{background:#000;width:20px;height:20px;color:#fff;text-align:center;text-decoration:none;border-radius:50

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	589	OUT	GET /host_style/style/new_ff_v2/css/facebook.css HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	698	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: text/css Content-Length: 2362 Connection: close Cf-Bgj: minify Cf-Polished: origSize=3240 Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4136 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KoKiGWcboNyAfq92nuSDyQ5lVYeW4fTcv2m7bo1l4UCIPRpUthxwd8%2Fo7hI8TIMllcKhQCNmZ3rM5XFzhOCSe4pTQPZT1dOit%2Fnm8gzLld%2BHFBbGd5U9Bqaj1oTeZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfaabc4261-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:23 UTC	671	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 66 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 62 35 39 39 38 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 6e 61 76 62 61 72 2d 66 62 20 69 6d 67 7b 77 69 64 74 68 3a 31 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6f 6e 74 65 6e 74 2d 62 6f 78 2d 66 62 7b 77 69 64 74 68 3a 39 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 Data Ascii: .navbar-fb{background:#3b5998;width:100%;height:auto;padding:8px;border-top-left-radius:10px;border-top-right-radius:10px}.navbar-fb img{width:115px;margin-left:auto;margin-right:auto;display:block}.content-box-fb{width:90%;height:auto;margin-left:auto;ma
2024-08-04 22:30:23 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6c 61 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 64 62 65 62 66 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 23 65 30 65 30 65 30 20 69 6e 73 65 74 2c 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 33 29 Data Ascii: font-weight:400;font-family:lato,sans-serif;border:1px solid #bdbebf;cursor:pointer;outline:none}.login-form input[type=text]{margin:0;padding-bottom:13px;border-bottom:none;border-radius:4px 4px 0 0;box-shadow:0 -1px 0 #e0e0e0 inset,0 0 0 rgba(0,0,0,.23)
2024-08-04 22:30:23 UTC	322	IN	Data Raw: 6e 65 2d 62 6c 6f 63 6b 7d 2e 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 20 69 7b 77 69 64 74 68 3a 32 33 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 63 6f 6c 6f 72 3a 23 39 30 39 34 39 63 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 62 35 39 39 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 2d 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 39 30 39 34 39 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 63 6f 70 79 72 69 67 68 74 7b 77 69 64 74 68 3a 34 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 63 6f 6c 6f 72 3a 23 39 30 39 34 39 63 Data Ascii: ne-block}.language-name i{width:23px;padding:4px;color:#90949c;border:1px solid #3b5998;border-radius:3px}.language-name-active{color:#90949c;font-weight:700}.copyright{width:40%;height:auto;margin-top:10px;margin-left:auto;margin-right:auto;color:#90949c

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	588	OUT	GET /host_style/style/new_ff_v2/css/twitter.css HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	696	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: text/css Content-Length: 1350 Connection: close Cf-Bgj: minify Cf-Polished: origSize=1858 Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4136 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8DrijCDJtL1WM9i2zCJFHwRXrSBjEd6pNpoBSUCFr8m4i6biZIGWXCduKtXWPQdJzrIwDsTcm%2BHrcuyQibynw7ZexzFYOz2r5uXHFI5y8h10FOld66pd3qILYMp%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfbc637c99-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	673	IN	Data Raw: 2e 68 65 61 64 65 72 2d 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 68 65 61 64 65 72 2d 74 77 69 74 74 65 72 20 69 6d 67 7b 77 69 64 74 68 3a 35 35 70 78 7d 2e 62 6f 78 2d 74 77 69 74 74 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 76 65 72 66 6c 6f 77 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 Data Ascii: .header-twitter{background:#fff;width:100%;font-size:25px;font-weight:700;text-align:left;position:relative;border-radius:10px}.header-twitter img{width:55px}.box-twitter{width:100%;height:420px;position:absolute;overflow:none;font-size:15px;font-family:s
2024-08-04 22:30:24 UTC	677	IN	Data Raw: 6e 64 65 78 3a 32 7d 2e 69 6e 70 75 74 2d 62 6f 78 2d 74 77 69 74 74 65 72 20 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 35 37 37 38 36 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 69 6e 70 75 74 2d 62 6f 78 2d 74 77 69 74 74 65 72 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 Data Ascii: ndex:2}.input-box-twitter label{color:#657786;text-align:left}.input-box-twitter input{background:0 0;width:100%;height:auto;padding:7px;padding-top:3px;padding-left:0;color:#000;font-size:18px;font-family:arial,sans-serif;text-align:left;position:relativ

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	668	OUT	GET /host_style/style/new_ff_v2/images/vendorsmain.js HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	611	IN	HTTP/1.1 404 Not Found Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=1800 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ct5%2FWwUB0qNHj9kw9lq8LablugZrx7H17fI2MZCOKtNoO6gyPi7frcyHvJGAfx7BWndpK7f0kVXpg3lUWcsMQzITvdRCjQw%2B4O4PNNiamwLY1VBcFXJZoYqjIEAoSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfb81842d5-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-08-04 22:30:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:23 UTC	654	OUT	GET /host_style/style/js-track/track.js HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:23 UTC	714	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:23 GMT Content-Type: application/javascript Content-Length: 398 Connection: close Cf-Bgj: minify Cf-Polished: origSize=426 Last-Modified: Sun, 25 Sep 2022 10:15:16 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOj6cFgamjyxM%2FN6ZpkQoLUjhrz0zPjnkNuJr5Jx%2BhG%2FpFObx2Vqdw8Y%2Brg3QeZfgCPIO7cxJ4dXtyqGymSsRwnQl8VzUAvmlCaAhVhd2PrDqn40BRNokNVDZINn%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fddfa8286a4f-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:23 UTC	398	IN	Data Raw: 76 61 72 20 5f 48 61 73 79 6e 63 3d 5f 48 61 73 79 6e 63 7c 7c 5b 5d 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 73 74 61 72 74 27 2c 27 31 2c 34 35 38 33 32 37 32 2c 34 2c 30 2c 30 2c 30 2c 30 30 30 31 30 30 30 30 27 5d 29 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 66 61 73 69 27 2c 27 31 27 5d 29 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 74 72 61 63 6b 5f 68 69 74 73 27 2c 27 27 5d 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 68 73 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 68 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 68 73 2e Data Ascii: var _Hasync=_Hasync\|\|[];_Hasync.push(['Histats.start','1,4583272,4,0,0,0,00010000']);_Hasync.push(['Histats.fasi','1']);_Hasync.push(['Histats.track_hits','']);(function(){var hs=document.createElement('script');hs.type='text/javascript';hs.async=true;hs.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
https://ff-rewards-redeem-codes-org.github.io/Free-Fire-/

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	758	OUT	GET /akplCmyGhcKXySj_c-ODskbnlzLDwbcnT0wAJVl3Fm2WAK0wL5WYUT1-rw-I6IaDYOg HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 458179 X-XSS-Protection: 0 Date: Sun, 04 Aug 2024 19:54:43 GMT Expires: Mon, 05 Aug 2024 19:54:43 GMT Cache-Control: public, max-age=86400, no-transform Age: 9341 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-04 22:30:24 UTC	857	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 02 00 00 00 7b 1a 43 ad 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 71 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR{CtEXtSoftwareAdobe ImageReadyqe<qiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 61 62 33 31 36 38 32 37 2d 31 34 64 64 2d 36 35 34 39 2d 38 30 31 39 2d 65 64 33 36 32 38 36 30 35 63 31 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e e2 37 cc 1b 00 06 f9 e8 49 44 41 54 78 da 4c bd 69 ac 6d 5b 56 1e 36 bb d5 ec e6 ec d3 dd f6 dd d7 d7 7b ae a2 2f 28 30 45 01 71 82 b1 8c b1 25 3b b1 1c a3 24 96 08 e4 7f 7e 24 52 7e 24 8a 82 ac e4 07 f2 0f 30 26 71 94 1f 89 85 88 09 21 76 82 62 03 b1 29 93 60 62 05 5c 34 55 40 55 41 35 af 5e 7b bb d3 ed 66 75 b3 cb f8 c6 98 eb bc ba 75 eb be 73 f6 5e 7b ed b5 e6 9a f3 1b df f8 46 33 dd 5f fb 2f be e0 cc b2 d2 51 a7 6c b4 d1 d9 fa 5a 1b 95 aa a4 94 56 5a Data Ascii: ab316827-14dd-6549-8019-ed3628605c13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7IDATxLim[V6{/(0Eq%;$~$R~$0&q!vb)`b\4U@UA5^{fuus^{F3_/QlZVZ
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 39 5b 32 3e 80 cf 4c 23 1b e8 c8 90 2d 9e 0e 5e b0 6c a3 c8 0c 4c 55 5e 54 da d5 9a 07 2f d3 33 c6 dd b1 39 48 c0 62 4d 6b 62 e9 33 a0 4a 13 ea d1 ea ce 95 a3 e9 a0 87 9c 6b 3a 96 ee 22 c1 4c 93 bd a1 8f d4 74 09 0e 23 05 bc 4b 34 1e 38 2d d0 2d a8 c9 03 bf 60 de 08 65 3c 9e cc e4 54 cf e0 45 83 4d 17 66 8c 3c c0 0f 6d 27 56 65 c2 fd 8a f9 cc b8 00 3c 33 5c 18 66 12 0f 2c 8d bd 18 00 a3 3c 3f 16 a7 64 99 02 9a 1d ff 90 05 dd f8 75 31 d9 9a 0d 80 e1 e3 97 56 bd be 50 7f e6 44 35 0d 08 cb f5 88 c3 ee 24 f5 70 52 07 ba e0 88 cb fe ca a4 be 38 10 da 01 67 e9 be 52 2e a7 a5 9f 69 a2 5a be 59 3c 91 32 aa 7c fd 8c bc 95 2a b6 27 26 b6 e5 fc 94 e9 d7 89 8f 81 1d 62 83 a1 f9 e7 cc 70 6c e4 09 56 ea 04 08 a4 2e 3c 70 79 63 d5 c2 e2 7a 30 2b c0 41 b0 58 32 9f 90 6e Data Ascii: 9[2>L#-^lLU^T/39HbMkb3Jk:"Lt#K48--`e<TEMf<m'Ve<3\f,<?du1VPD5$pR8gR.iZY<2\|*'&bplV.<pycz0+AX2n
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 2f f2 0f 17 0d 01 40 43 ee 02 51 f7 5d 97 77 53 5c 35 96 9c 17 a2 84 e4 00 c0 93 99 54 e5 c2 62 d9 9c 9e 1c 75 5d 5f d7 55 45 68 9d 20 8f 90 a7 93 ea 6a bf ef e9 d2 d7 ab 56 69 f2 18 aa 10 c8 22 4e d7 a3 af db ea ec 64 f3 fc ba 23 b2 4a ec 3e d2 1f 6d c8 9c 12 49 2b b2 03 d9 36 72 d8 17 e4 23 c6 25 99 b2 94 bb 7e 08 81 09 b3 65 f8 0a 70 13 5c 55 91 55 8e 31 54 ce d5 ae 85 89 4e 01 92 07 0c 13 d1 44 b2 97 81 6e 8d 2e 48 31 7b 27 3c 4b d1 31 1e 83 fb 33 f3 8e 3c 90 ec 32 03 e0 12 f3 70 1e 4e d8 b1 24 10 0c b6 87 99 96 18 4e 0c fb 04 5a b0 5c 09 05 15 71 88 8e 84 7f a2 79 4d 69 b6 11 2c f6 24 36 39 1a a0 c0 ff 11 ff 1f 4b 53 a5 2c ca 8d ac 47 51 9c 08 73 61 60 8a 31 a0 b3 98 e2 7c e4 2c 98 ae 70 1d 16 e4 4d 24 08 7c 3f 96 2b 94 27 43 b4 a4 0c 62 66 fa 0e 16 Data Ascii: /@CQ]wS\5Tbu]_UEh jVi"Nd#J>mI+6r#%~ep\UU1TNDn.H1{'<K13<2pN$NZ\qyMi,$69KS,GQsa`1\|,pM$\|?+'Cbf
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 22 a7 68 91 6c 24 fa 0c 73 b8 42 f0 4b 5d 04 75 cd 5f 41 77 44 8e ce 81 d1 a8 11 bf 41 4c e3 7c 66 1a cc 1d 73 08 72 da 68 66 d3 4d 91 15 b9 63 e0 57 7d 8d 65 fd b3 15 84 d6 5f fb bd 67 df f3 c6 cb 8f 8e dd b3 5d 71 23 f2 ec 1b 49 cc 40 02 06 10 63 33 9c b6 c5 7d f5 42 52 4f 7e f9 7f f9 8d 9f ff a9 2f 7f f5 8f 1f bc f1 9d ff e1 8f 6c ea 65 13 09 ab 68 7e 64 07 d7 d8 2c eb c5 29 31 50 05 4d 7e 54 64 00 fc 3e c5 03 51 56 18 03 88 c2 c4 1a 0f f4 2c 0d 87 da 6c 55 d1 80 3f 7f 3a 12 f0 ac ef 34 61 7f 08 c3 98 1a bb 5c 2f e0 36 24 3a 96 bc 29 33 02 f9 23 46 2f 78 22 b9 fd 18 c6 61 22 90 1d c6 71 f2 61 8f 0b 20 a4 5c a9 89 ec c0 61 51 b9 63 d5 dc 59 ac eb d3 97 ab 47 df da bf f2 7d f9 63 3f 84 85 33 6c 63 ff 14 4e 4e 55 d9 ea d8 b6 84 6a f0 19 70 8f 16 f6 39 79 Data Ascii: "hl$sBK]u_AwDAL\|fsrhfMcW}e_g]q#I@c3}BRO~/leh~d,)1PM~Td>QV,lU?:4a\/6$:)3#F/x"a"qa \aQcYG}c?3lcNNUjp9y
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: c3 ca 1f ce ce f4 0e b3 44 33 07 63 1b 64 72 2c 91 bd 9a dc 56 ac c8 cc 31 40 cd 36 03 86 cd 88 23 c2 67 04 f4 33 30 65 11 ad 19 26 22 9b b4 cc 21 07 7a 60 35 5b 1e 4c 41 27 c1 15 76 44 39 41 27 73 7c 2a 32 a8 d1 91 0d 2f 5d 1a e8 c1 b1 1e ed 41 5d 89 fb 2c 06 7d 7a a4 dd 12 c1 1d 72 2b 87 42 2f 60 30 9a 5c d2 60 90 7c 32 a8 a9 86 b1 19 c9 48 1c 04 3e 38 2d 8b 89 39 7d 45 05 7e a4 d9 17 81 0d bb 0e fa b2 57 f4 2e 11 fc 89 f1 8c 70 73 08 e0 f5 c2 9a 13 0b 56 64 00 c8 59 41 b0 d4 33 49 a7 bf 6c 08 c7 88 38 2a 1d 3f b1 c1 a0 57 2a 8e d5 92 79 22 3c 6d 4c 49 01 da 19 5c 18 7d cb 54 a9 45 62 81 3b e0 96 c1 b2 23 dc 8e cc 38 4e 0e 47 ed e1 ee 44 5d 48 b4 f0 62 09 69 7a 26 00 b5 30 6b 76 a4 24 2e 0d 46 af 8a 07 b6 ae d4 dd 16 9f 25 0b a4 21 33 01 7c e9 05 72 02 Data Ascii: D3cdr,V1@6#g30e&"!z`5[LA'vD9A's\|2/]A],}zr+B/`0\`\|2H>8-9}E~W.psVdYA3Il8?W*y"<mLI\}TEb;#8NGD]Hbiz&0kv$.F%!3\|r
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 14 51 71 4a 11 d8 4f b6 34 0a 3a 4d a2 66 70 7a 0f 87 e0 0d 27 46 63 9a 98 6c 99 a0 81 f3 3a c9 1e d1 2c eb 65 37 5d d7 fe 49 24 24 36 c9 d5 76 1c fc 62 d9 8c 74 6b bb 8e dc 86 45 37 a4 50 f1 93 0c 22 ad 40 e6 0a cd 9d f3 93 7e 18 bf f8 e5 f7 68 06 39 57 0d d3 00 64 cd 9a ac e1 00 69 5e 93 1b 00 eb 30 ad d6 ab 86 0c a8 47 9a a0 de 1c 2f 69 01 a7 40 06 e2 80 04 55 1a 0a 7a 7d a4 f5 04 d3 61 f9 e4 1e 19 a2 74 22 3a 0b d2 5e c9 68 56 64 c8 2b db 0f dd 34 0e e4 46 90 df 92 c8 0e 45 40 ac 65 cd bb b2 8e 19 20 e6 87 63 45 85 b5 1b 9b 6d 09 6b b2 0a a4 4b 72 4f 71 c0 25 39 86 d9 1a 4b 30 20 b5 f0 8a 70 1b a0 62 06 99 92 1c 65 e7 a0 aa 46 c6 28 86 90 d3 4e 10 04 8a 92 72 ab c1 70 35 db 1b 06 52 20 33 1e 28 27 79 cc 61 2b cd a9 62 f4 29 9b 98 71 b3 28 52 32 fd f9 Data Ascii: QqJO4:Mfpz'Fcl:,e7]I$$6vbtkE7P"@~h9Wdi^0G/i@Uz}at":^hVd+4FE@e cEmkKrOq%9K0 pbeF(Nrp5R 3('ya+b)q(R2
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 54 52 8f c2 5c 83 16 b4 c8 9b e5 78 81 e3 74 5b 28 39 d7 67 e9 5c 6a d0 d4 6c 2d 6e b3 fb 45 23 72 cc e8 1d 08 a4 ba 0a 4c ed f9 d6 7a ab 5e 3a 53 bf f2 af 9f 5c f6 d5 8f 7c ea 51 e8 d8 f9 13 dd 29 15 97 85 ac 88 15 c6 c6 ae c3 f2 18 1a d7 17 7e e1 97 7e f5 1f fc e4 de e7 f5 f1 19 67 bb 85 21 fa ef fd 37 3e 79 7c e7 ac bf 7c 12 47 b2 fb 06 49 2a 59 d4 e2 10 86 03 21 7e 0c 3b df 3d 4e e3 08 f7 9e c8 ae ae c6 a9 f3 87 e7 e9 6a bb ef c6 fe fc d1 f9 d9 59 1d 07 35 7a 48 13 1d 52 94 59 3b 42 18 b1 db 1f 50 d4 c5 bc 7b 3b 46 3a e1 be 9f ba a8 bb 40 27 4e 87 6e 47 bf 6d 1e 7d e2 b5 7f f3 c7 4e bf f1 07 e3 10 fb ed 65 32 b6 aa 8e 98 75 22 20 c0 d0 c2 a1 5d 86 78 c8 31 26 d7 0c 19 1c bd 64 0d 99 73 3b 20 1f 54 bc ca 4b e1 aa c5 8b 91 59 1b c1 5b 04 bd 1c 50 77 84 Data Ascii: TR\xt[(9g\jl-nE#rLz^:S\\|Q)~~g!7>y\|\|GI*Y!~;=NjY5zHRY;BP{;F:@'NnGm}Ne2u" ]x1&ds; TKY[Pw
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 18 08 6c e4 cc 44 ba c5 c9 21 25 c1 70 c6 64 cd b2 b8 04 f4 20 71 f0 7d 6b a6 96 38 26 c0 ae 10 04 5b 49 6c 67 be 12 1d c4 74 7a 65 35 21 a3 a6 40 24 ee 02 35 2b b7 29 28 35 7b 36 42 00 a5 e6 08 2d 25 3c b8 f6 85 d2 ab ac d7 6d 91 f5 7b ad ae 92 da 8f f8 eb 25 e7 27 30 88 c7 f2 58 10 74 35 05 bc 02 97 11 95 a4 1d 49 8f 51 cc fd f9 e9 54 0c 73 f4 a5 35 73 8d c0 6a 4f 48 45 89 5e b0 d2 35 b1 cc c2 15 15 dc 22 02 46 88 cf e3 38 f5 3e 48 4a 16 10 f3 60 51 23 bd 19 f5 92 ad a3 61 25 47 71 9a 0d a2 02 b7 ed 16 54 b1 7f 9a ef ba 68 df a6 44 86 03 4f ae 95 83 a6 34 70 09 77 1f 0b d4 36 ae cc 4f cb 20 be 32 78 1c e4 9d 2c 2a 64 d6 8e 1e 06 a9 0f 78 4c 8e a5 45 ce 12 2e 4f e1 36 a7 5e 40 df 70 b8 42 e4 47 41 7c a7 ca 02 90 8c d5 52 0d 60 3e ac 15 d0 a9 c8 fd b2 8c Data Ascii: lD!%pd q}k8&[Ilgtze5!@$5+)(5{6B-%<m{%'0Xt5IQTs5sjOHE^5"F8>HJ`Q#a%GqThDO4pw6O 2x,*dxLE.O6^@pBGA\|R`>
2024-08-04 22:30:24 UTC	1390	IN	Data Raw: 48 75 e4 7c 00 32 03 83 8f 96 13 94 be fa ce e3 fb 77 4f ee 9e ac df ff e0 66 07 f7 3d 11 bb 7f 74 ef ec ed 0f 9e 91 fb 55 19 62 50 61 e8 fa ba aa 69 ec 2f bc 5f ad 16 29 5f c5 e0 ef 9c 9f b0 e2 14 24 d1 e9 64 b3 ba ba d9 93 2b 11 11 fd 85 8b 83 2a 24 55 52 2a 39 c2 8a c5 69 35 eb af a8 ed 0d b2 24 92 cc 47 8d c4 7f cf 6e 3e 74 ed 32 43 6b b2 6d 4e a4 19 74 75 28 e1 d6 c8 9d 26 90 e8 28 da 3e e6 a5 61 d1 32 95 7c 76 1c cb aa b8 28 97 0c 78 dc 02 c2 14 36 27 c5 b8 b3 0e 54 6c ba f4 cf 62 11 57 12 5f e4 39 26 e9 b9 26 dd 1c 2c c2 be 96 bb bd 49 27 99 c4 c5 0d 12 43 55 46 a8 9e 41 27 03 4e 2d d5 95 2a 39 db c9 88 26 83 be 75 52 bd 17 99 a7 f9 52 53 cc 75 0b ec 5e 98 d2 c1 47 b2 3a e0 61 72 bf 34 5d 5a 5b 48 44 4f 32 5f 99 55 28 8e 28 80 57 5a dd a4 10 25 d4 Data Ascii: Hu\|2wOf=tUbPai/_)_$d+$UR9i5$Gn>t2CkmNtu(&(>a2\|v(x6'TlbW_9&&,I'CUFA'N-*9&uRRSu^G:ar4]Z[HDO2_U((WZ%

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	651	OUT	GET /webfusion10421/image/20100831_facebook-logo.png HTTP/1.1 Host: files.site-fusion.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:35 UTC	105	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 503 Service UnavailableCache-Control: no-cacheConnection: closeContent-Type: text/html
2024-08-04 22:30:35 UTC	107	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 4e 6f 20 73 65 72 76 65 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>503 Service Unavailable</h1>No server is available to handle this request.</body></html>

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	636	OUT	GET /wp-content/uploads/2018/07/google_PNG19635.png HTTP/1.1 Host: 2p.com.tr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	251	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Tue, 18 Jan 2022 14:54:41 GMT ETag: "f612-5d5dc72e9ce40" Accept-Ranges: bytes Content-Length: 62994 Connection: close Content-Type: image/png
2024-08-04 22:30:24 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 65 00 00 04 65 08 06 00 00 01 67 ed 4a c8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 f5 a7 49 44 41 54 78 5e ec dd 07 dc 14 d5 bd ff f1 a8 a0 91 24 d7 f4 dc ff bd 31 f7 c6 84 94 7b 73 13 01 05 2c 94 e7 11 41 ac 80 60 c5 de 0b f6 5e 62 01 b1 a3 62 ef 9d 26 55 44 ca 43 ef 02 a2 74 78 e8 9d a7 b7 dd 7d b6 9e df 7f ce 72 08 ed 00 4f d9 7d 76 66 f6 f3 7e bd be af 44 85 2d 67 ce 9c f3 db 99 33 33 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e a5 94 3a 33 f2 c8 5d 52 d8 be b9 14 9e 76 62 ed e2 fc 9d ea 5b af 94 d8 92 ef 3b 99 97 83 1f 85 67 4d bd bb 30 a7 85 bd 13 a4 22 b9 Data Ascii: PNGIHDReegJsRGBgAMAapHYs&?IDATx^$1{s,A`^bb&UDCtx}rO}vf~D-g33?:3]Rvb[;gM0"
2024-08-04 22:30:24 UTC	16384	IN	Data Raw: 00 dc 28 9e 7f ff f6 83 5d e1 a4 2f a9 de 31 e1 c7 d2 69 c8 59 d6 89 9b d8 a3 1f 87 70 db f4 3e ce af 39 b9 dd 34 35 d0 a0 aa a3 ea c6 6e 2f 85 ac 13 34 a9 59 da f5 0e c8 96 0a 4e 2f 01 9e 20 3b fa 38 85 cb de 05 8d 3e 0a d3 77 64 0b 69 66 99 a8 49 cd d3 7c 60 37 79 65 e5 a7 22 4a 8e 36 cd 0d a4 95 53 40 1f f5 1c 37 c1 ab 77 74 fb 8d fa 4e ff 1e 51 ec bb 80 57 c8 b6 87 92 97 54 2f 19 f7 2b 39 65 70 17 eb c4 4c ea 1e 7d 29 f7 d3 4b df a5 a8 41 da 38 9d eb a8 d1 8b 25 b9 58 d5 36 39 93 da e5 91 2f 62 ba 90 f9 4f d3 bc 00 bc e2 f9 c5 1f 24 4f 8f d8 26 63 92 9a e8 f6 bd 61 d2 a3 fa 0e a2 9c 7e 42 ca 0c 5f 90 58 ca 91 98 d4 e5 82 fe c9 05 bf 77 9a e6 05 e0 35 af 2c fa 84 82 a6 81 d2 f9 cb 6b a5 ac ba a2 dc 34 3d 50 2b ce 6c db e4 eb a5 9c 4e 4a 75 ce d8 b9 e0 Data Ascii: (]/1iYp>945n/4YN/ ;8>wdifI\|`7ye"J6S@7wtNQWT/+9epL})KA8%X69/bO$O&ca~B_Xw5,k4=P+lNJu
2024-08-04 22:30:24 UTC	16384	IN	Data Raw: d5 6c 00 c5 0c 21 5e 4c db fe 5f 3b 45 cb fe a7 9a f4 e9 a4 6f 37 71 89 35 80 2c 31 a3 60 81 34 1b d0 c5 3a 50 12 42 dc 9c ae 72 d2 7b cf ef 57 c4 2c da ac 58 d8 0b 20 bb ac 0e 6e 92 13 ad 03 25 21 c4 dd d1 97 68 df 94 7c 8a 76 4e 9f 2a c9 df 21 2c ec 05 90 9d d6 07 b6 0e 69 37 f4 52 cb 40 49 08 71 7b 4e 1e dc 53 b6 56 c6 39 9d 04 20 bb 45 55 74 d0 45 e3 ef e2 5e 33 84 78 28 1d 46 5c 25 d5 2a c2 c2 5e 00 d0 44 e4 bf 1f 5d d0 5f 9a 0f 64 11 30 21 6e 4f 97 af 6e 91 b2 70 c5 ab ce 7e 7b 98 d9 85 01 00 ce a0 d8 f4 c3 15 c3 13 c7 b3 08 98 10 57 46 df d4 f2 ba 49 8f 4a 20 16 7a db ec b6 00 80 7d 7d 5b b4 3c d1 72 70 0f eb 40 4a 08 c9 4c 9a 0d ec 22 cf 7f ff be f3 7b 43 de 34 bb 2a 00 e0 40 36 07 0a 5e 38 73 d4 75 d2 c2 32 a0 12 42 1a 36 fa 94 ef d8 ad 33 75 11 Data Ascii: l!^L_;Eo7q5,1`4:PBr{W,X n%!h\|vN!,i7R@Iq{NSV9 EUtE^3x(F\%^D]_d0!nOnp~{WFIJ z}}[<rp@JL"{C4*@6^8su2B63u
2024-08-04 22:30:24 UTC	13842	IN	Data Raw: 2d ef fa b4 2f c3 3e b9 64 3e 74 2f bf 00 00 94 9d c8 d1 d1 f3 b5 e9 4a 1e 61 a2 d8 96 70 8e 42 6b ff 4f 0a 1d b6 0b 33 57 b9 c3 0d c0 69 60 51 86 88 a8 74 6b f8 9a 47 cf 4f 89 e8 48 46 78 bf 7b e9 05 00 a0 6c 99 70 ce 4c 6d bf 9e 45 19 8a 7d 0b cf 91 f6 f7 91 09 66 4f 72 87 1b 80 d3 c0 a2 0c 11 51 e9 66 77 ca bc bb 38 22 5f c0 24 4b ba c0 bd fc 02 00 50 76 ec 61 ac 91 e4 be 9e c8 b2 4b 9c 89 34 0b 33 14 bb c2 8b aa 4b 4b 7f a4 50 ca f8 02 23 dd e4 0e 39 00 a7 88 45 19 22 a2 d2 ab 49 3f 8f da 0f f1 6a d1 4e 29 18 34 2f b8 97 5e 00 00 ca 96 a4 73 23 99 8b a7 68 e3 ff c9 be 39 a7 b8 c9 35 d1 e9 64 16 55 97 2f e1 42 cd fd e2 0f ea 31 25 4e b7 24 3c ae 1d 19 49 6b 9c b1 f6 2b 77 d8 01 38 05 76 51 a6 d5 e0 48 74 e2 40 44 ff 5e 71 93 6c a2 d3 a9 d1 6b 1e dd f9 Data Ascii: -/>d>t/JapBkO3Wi`QtkGOHFx{lpLmE}fOrQfw8"_$KPvaK43KKP#9E"I?jN)4/^s#h95dU/B1%N$<Ik+w8vQHt@D^qlk

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	672	OUT	GET /host_style/style/new_ff_v2/css/57fd6fc58a09519be8012650efd9881d.jpg HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://raviral.com/host_style/style/new_ff_v2/css/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	658	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/jpeg Content-Length: 136773 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 2741 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBBku%2FTkb%2Bo6cOfK7iMSS%2BVmEoSPlmttzfRBtQAvC3u08744LxIAmqAGvRry1VNNlt4u7MFdDeJ9pLTjIWeDtYhPnLa136506Ef1DlN245IZdhv9ioVxz1lsoe9PHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde37a8872aa-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	711	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 03 c5 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f0 46 7e 8f 46 71 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("F~Fq
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 03 e1 b2 c6 7f 7f e2 c2 58 d4 65 9d c9 5f 4e c6 97 ec 51 b5 73 6d f5 dd 89 99 ac cc 8c 6e 81 a9 ab bb ad ad 6a eb ed 51 77 53 22 59 8c b5 24 28 ca cc 42 cc 1a f5 ec 55 9b 4c 2d 86 2c 31 2c 61 86 71 96 31 21 8c 65 93 2c d4 a7 19 ea 32 96 d8 cb 3a 89 33 b9 18 ca 36 e0 cd ac e3 3a 48 58 cb 3a 19 51 92 01 88 ca 39 46 33 8f 3b 18 cf 1c ed 78 9c 79 d8 b2 86 71 9d 19 c6 69 9c 66 b0 ce 74 c6 59 d5 4e 36 69 3b a3 77 46 67 2b 2a 37 2f 8c db 2b 39 aa c5 b8 5a f1 38 95 d7 6c 2a 8a b6 2b d4 d6 ab 66 9d 35 e3 38 69 d4 fa 47 9c f4 7f 85 f4 87 c7 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 3f 38 97 f4 0f 13 39 ce 98 ce 73 a9 2d 8a 2f d3 63 67 5b 62 4d 9b 75 ef cc b6 ca Data Ascii: Xe_NQsmnjQwS"Y$(BUL-,1,aq1!e,2:36:HX:Q9F3;xyqiftYN6i;wFg+7/+9Z8l+f58iG\|?89s-/cg[bMu
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 5b ea 62 ab 3d b7 67 56 5c af 3c df cc 29 f1 73 da 6a d1 86 f5 9c bc 76 bd dd ce 5e f7 bb a7 53 7b 95 b6 bd 8d ce 3e e7 0c 75 f6 f4 a7 e5 ce c6 75 65 39 ec e7 5e 51 6d 51 ae dc 6b 5b 47 4d 6b e9 6e 69 f7 dd 7e b7 95 d5 fc 97 a8 ce 3e 46 c1 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 35 96 3f a1 79 66 8e 74 93 19 d3 36 57 6e ed fb 5a bb 4d 6c 6c 53 7f 39 6d f5 db cf 13 93 39 e7 5e b6 d6 bd ce 96 ae e6 a7 66 bc 67 0e 97 12 66 c9 5b 5c e6 a5 6d 59 9b b2 a9 c6 da 68 d8 d7 b2 9a 6e a4 a9 2c 62 c5 9c 73 b1 19 91 49 94 73 89 45 b6 d3 6f 45 93 ae cd db 2c ae 7b 93 cc 33 a6 21 2a ac c6 31 1b 33 1c 62 98 ca b0 ce 79 ce 2c 36 df 07 1a b6 62 c8 76 f8 de e6 3d 45 1a Data Ascii: [b=gV\<)sjv^S{>uue9^QmQk[GMkni~>F@>5?yft6WnZMllS9m9^fgf[\mYhn,bsIsEoE,{3!*13by,6bv=E
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 7b 7c de dd 7f 4e f9 d9 75 f4 7c 19 aa 19 af cb 9d 8d 8d 2d c3 e8 9d 9f 27 eb 3e 87 a7 6f 66 9d 9e 5c e7 34 f9 63 3b 3a f2 c4 9e bd 90 ad 7a 76 6b e9 35 ae c6 7f 39 ec 0f 99 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 23 0f e8 fe 34 25 8b 31 8c e6 a3 34 ee f3 66 27 77 29 32 99 9d 79 62 d9 56 66 68 93 15 e6 16 e0 cb 52 9c 26 4e 55 e5 27 1c 62 c9 62 39 d4 8d 73 a9 61 5c a1 35 18 66 38 b8 84 a3 99 83 19 88 e7 19 86 33 16 dd 45 fb b6 4a 32 d5 ce 71 2d 46 71 3b 61 5d d0 aa 23 64 19 8e ee 96 cf 37 53 d1 f9 0f 4d f2 f1 b5 e4 3d 2f 82 f2 4f 6d d0 f0 7d ce 1e af 4f 7f 2b 6b 3b e8 d7 c0 f1 9b c7 a1 f3 5a b6 ef 1d fd af 27 d4 ce fd 56 fd 5d 1e 5b f3 5e 33 Data Ascii: {\|Nu\|-'>of\4c;:zvk59#4%14f'w)2ybVfhR&NU'bb9sa\5f83EJ2q-Fq;a]#d7SM=/Om}O+k;Z'V][^3
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 32 aa 54 d9 89 d7 3f cf 7a f3 83 e5 76 19 33 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 96 66 73 fe 97 f3 6a 6c 66 5d 7c ec 49 75 db 29 bd 4a f7 2b b7 5b 1b 0b 75 5b 39 35 73 b4 35 a5 b3 26 75 31 b9 1b 34 e1 b3 04 a5 3c 2c 4c 5b 3c d7 9a b1 5e 34 9c 71 11 1c c4 c4 25 1c 30 63 26 33 8c b0 23 06 62 56 d7 66 93 94 6d d5 4e fb f3 ad 6b a5 6f 4e 71 b2 fb a6 35 6e dc d9 c6 34 6e e9 ec f2 9c 2e 67 b4 97 29 e3 68 f7 58 e3 7e 69 c0 fb 47 3b 17 e6 7b 7c 3f 5b f3 fd 70 de d4 e8 72 f5 f4 7b 5a bd 0c f2 ab 57 73 8e 95 71 b6 3c fd dd 5d 6e 57 a4 e9 cb 7b e7 de d6 7d fc bf 3b ee 72 76 75 37 ea dd ae eb 4a 8e 96 23 63 a1 4f a4 f7 6b 8d b9 d5 da f6 5d 1d dd cb Data Ascii: 2T?zv3fsjlf]\|Iu)J+[u[95s5&u14<,L[<^4q%0c&3#bVfmNkoNq5n4n.g)hX~iG;{\|?[pr{ZWsq<]nW{};rvu7J#cOk]
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 3e 7e ca 8d 6d 7c 3d c7 5f e7 1e d3 d1 cf 93 de df f1 7e 7d 7a b6 33 f1 7d 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e1 ac ba cf e8 9e 1a 6f b6 ec 2b d8 cd bc ee 6f ae de 6b 67 5c b3 99 ab 49 2a a5 0b 2b a2 ea fa 4d 5d 3d fd 5e b9 e7 6a 74 f5 3b b4 69 db d6 e9 ba 2a be 9d ea a8 ce 0d 47 19 c1 80 00 30 04 63 39 4a 18 d4 b6 29 ef 70 eb a5 cb ea 73 45 b5 cf bf 2e 9e b5 0c 93 8d 9d 71 66 cd 1b 17 3b 74 4b cf 7c d6 fd 18 cf cf dd 3d 2f 75 e5 e4 e6 42 cd 19 65 0b f8 d6 71 f7 35 fa 1d 39 69 75 ba fe db 87 7e 4f 47 6e 7c bb f3 35 bb 7a 47 2a cd 9d 95 d8 b3 5d 73 75 74 f9 db 3a 1c 2b f5 ba 72 8d 57 69 eb 3d 1d ed 4d e5 ee 70 bd 6f 16 e3 c7 6e e9 68 b7 b3 Data Ascii: >~m\|=_~}z3}o+okg\I+M]=^jt;iG0c9J)psE.qf;tK\|=/uBeq59iu~OGn\|5zG*]sut:+rWi=Mponh
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: da 78 7f 7d cb d1 d1 f3 1d 6f 9d c4 74 f3 bd db cf 0d c8 74 66 b7 e5 ad 8e 5d ad f3 dd 8e 16 b1 9e 9c 27 5b 11 f5 5a 29 e2 28 d9 ae c9 ec d1 a8 74 eb a2 2b d1 d9 e0 6c 73 eb d6 ea 79 fa 97 ad a5 ac b7 6a 57 e9 4d ed 4b 5a d6 f1 4a bb ca 9d 9b fb 1b e1 c3 d4 f4 37 67 a7 97 ab a1 a6 9d 2f 5f f3 9c ef 1d af a5 fc 77 dd 7c ee 9e bc 7c 3f 41 9c 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 80 ca 5f d2 3c 90 cc e5 66 36 2b bb 16 c9 66 78 8b 13 ce 73 6c 67 8c 63 19 ad 2b ab 1a dd 6d f0 aa 7a f4 51 a3 dd d7 74 e1 55 d2 d2 f4 66 8c 4e 1a c4 6b b2 bb 98 63 38 93 11 9e 08 27 92 19 94 ab 0b 33 8e 95 2d c6 6d 79 9d 98 d5 57 6c 7a 0f 37 5f 3b a3 eb fc ac 94 cf 19 f5 f1 Data Ascii: x}ottf]'[Z)(t+lsyjWMKZJ7g/_w\|\|?A_<f6+fxslgc+mzQtUfNkc8'3-myWlz7_;
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 75 98 e7 fa 4f 92 06 2e 50 9d 5a 4b 35 e4 b6 75 5b 37 2c e2 52 42 36 46 e1 2c 4e e3 11 9c 08 69 6f 57 2f 96 eb ec 70 3e 1c d0 fa 47 95 f5 38 d7 a4 f1 3a 5c 9e 1e ab 75 73 d6 ef e4 ab d7 51 b1 f4 7b 4f 19 df f4 ef 47 3d ae 76 79 d3 1e b6 71 9f 37 a7 d1 d2 f4 e7 46 37 d3 75 5d 76 45 6d bb 5a 8e 3d 67 9a e7 d2 7a df 33 ef fe 7d f1 71 d9 f4 55 73 7c 5e 8d 6f 11 df e1 74 e2 9d 37 f6 e3 44 f7 a4 79 57 a8 f3 37 13 de d5 df a4 7d 36 fc 79 ee a5 9b a7 13 d3 70 76 36 f3 b8 8d b9 55 28 c0 ab 9f bf 41 a9 da bb ad 9d f2 f4 fb ba 33 5c 5c ee d1 71 5e de ad a6 e5 70 2d d8 ae 0b 3a 6a ad 9b 28 91 14 db 0a aa 3b ba 89 2b e9 ca f4 23 89 45 71 d9 be da 2c 85 39 df 4f 73 4b ab c3 b7 12 1e ab 47 bf 0b a7 a9 a1 Data Ascii: >uO.PZK5u[7,RB6F,NioW/p>G8:\usQ{OG=vyq7F7u]vEmZ=gz3}qUs\|^ot7DyW7}6ypv6U(A3\\q^p-:j(;+#Eq,9OsKG
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 68 7c ff 00 2b 30 9b 39 b6 ab da f7 fc 0d 7a f8 7d 3e 8e 9e c5 72 d8 86 9a ef df e7 fa 37 1e a7 d2 fc d3 6a 6b e9 be 57 8d b3 d9 cd f4 da d6 77 73 6a bb 4f c1 de fb 61 46 3c 5c dc cb 99 db 5b f6 71 fa 77 86 ed fa 9b bb c6 97 8d f4 9e 6f 5c a7 65 76 6b 1b 17 eb 58 b1 ae cc 94 47 6a 65 5d 2a 6e 32 c6 09 55 65 64 6b b2 b3 d7 db ab d3 e5 e8 f3 94 ed f3 35 9e 8e a7 6f 53 33 9d b5 c8 f4 55 c7 9e e7 9f b3 b9 a5 e9 78 59 b4 c3 7f b3 5e 6f 63 91 f4 38 f1 1e e7 c8 7d 0b c7 be c8 f8 5e 90 57 9a f4 ae 99 f8 54 3e a1 f3 5f d0 f8 e1 d2 d4 e8 dd fa 5e b7 1a ef 26 f6 f9 d1 af 9e f5 7c e7 79 e9 df 9e dd de e5 fa bc fa 5e a7 bf 4a f8 8f 5d e9 3d 37 5f 3f cd 61 ec 7c 5f 3e 9f 44 73 7a 5f 99 f5 87 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h\|+09z}>r7jkWwsjOaF<\[qwo\evkXGje]*n2Uedk5oS3UxY^oc8}^WT>_^&\|y^J]=7_?a\|_>Dsz_-
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: ee bb e2 3e d6 7d 44 9e 85 1e 1b 53 77 ca 55 09 be 7e f6 f7 af f2 fa 3c d7 13 db 78 8e 7b f5 5d 3e 2d be ff 00 24 7c 97 ad e6 dc f0 2e 96 d4 7a 4f 6f e3 bd 7f c4 f5 07 cd ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f2 75 99 fe 97 f3 75 b1 7c 2d ab 33 11 94 86 76 f5 b6 71 af 61 c8 d7 d7 f1 fa b5 a2 c7 b3 84 8c d4 b2 94 b1 c4 b1 37 5d 56 53 a8 86 23 ac 67 31 b1 ab 5b 1a 39 de d4 f4 b3 bc ed c2 95 5d 2a 6d ce f4 bc cf bd a7 e5 4f 13 76 85 de 5f 25 98 d8 1a ad 8a 96 28 ca 5b 6d d4 2e fd 54 4e 6e ba e5 1b ce 7d 9e 7f a5 f5 75 dc da d3 d9 fa de ae 07 9e e9 69 7c 5f 0d 73 8e 79 62 73 84 c9 4a 12 2c 95 59 ab 6c d7 b0 be 33 15 63 31 23 5d d8 35 28 de a0 d4 c5 f5 a5 76 44 Data Ascii: >}DSwU~<x{]>-$\|.zOouu\|-3vqa7]VS#g1[9]*mOv_%([m.TNn}ui\|_sybsJ,Yl3c1#]5(vD

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	672	OUT	GET /host_style/style/new_ff_v2/css/b3c9dc5b5bba47430a7da8301c09d45b.png HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://raviral.com/host_style/style/new_ff_v2/css/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	664	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/png Content-Length: 14297 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4095 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gl4GKSRp8z5GgB1ZTfvwfz4mkXvnhw%2Fz5RaiFfoGOAop%2F%2FfWhb9cwl%2BTNVDichMPo%2BS%2BhEa9K1DrheynDNx5TearE%2FwAI1p1kYSYiEz5KQ7IdsyqkpmLn6ZPbInyHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde3790443f3-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	705	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 aa 00 00 00 68 08 06 00 00 00 a0 d8 b4 fd 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 aa a0 03 00 04 00 00 00 01 00 00 00 68 00 00 00 00 50 cd be 28 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: PNGIHDRhsRGBeXIfMM*JR(iZHHhP(pHYsYiTXtXML:com.adobe.xmp<x:xmpmeta xml
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: ac d5 67 27 bb d6 2f 49 0e 73 f9 73 92 69 25 65 37 b2 55 90 06 46 0a a2 1b c9 46 0d 44 0d 44 0d e4 d2 40 fd e4 64 95 da 0e c9 f2 fa 05 c9 df 25 f5 64 76 32 9a ec e7 08 de a2 a3 08 51 03 51 03 51 03 51 03 51 03 83 d4 40 7d 6e 32 9d f6 95 6e a0 95 d4 3d f5 2b 93 ba 56 55 4f d6 2f 4f 36 71 e5 b3 92 38 c9 1e 64 07 f5 b9 ed d8 d9 7d 56 78 6c 2e 6a 20 6a 60 62 0d d4 eb c9 b4 da cc 64 85 b6 fd 5e 90 2c 4f 2e 4f d6 48 36 4f 9e 4b 96 e8 68 dd 64 69 f2 7a 77 f5 ae 31 50 4d ac c5 e1 3a 1b 03 d5 70 f5 67 94 26 6a a0 d2 1a a8 eb fe 53 ad 96 ac 54 b0 1a 49 9e 4c 2e 4d d6 4a 5e a1 20 b5 5c 42 4d 77 77 a6 ea c9 cc 4a 0b 18 99 ef 49 03 31 50 f5 a4 b6 78 51 d4 40 d4 40 68 0d d4 b5 9d 57 db 37 59 e9 e8 5e 92 5c 94 ac 9d bc 21 59 94 2c d3 31 0f 54 d4 5c b8 4a 92 5d 38 ef 56 Data Ascii: g'/Issi%e7UFFDD@d%dv2QQQQQ@}n2n=+VUO/O6q8d}Vxl.j j`bd^,O.OH6OKhdizw1PM:pg&jSTIL.MJ^ \BMwwJI1PxQ@@hW7Y^\!Y,1T\J]8V
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 41 a0 fc c6 4f 94 1e 25 bf 71 7f 8f 3e 24 2b af d9 9e 48 96 13 da 39 fe 72 72 5b 2d ae 30 04 f4 cb 4a 10 43 c0 d8 98 c5 70 fc ef c2 db 65 60 07 11 a0 40 e5 bb 1d 1c 16 04 44 2a 42 d4 40 45 35 50 4b de e6 46 49 b7 ec a7 d3 ba 99 ee b2 c7 fc 63 18 dd d2 28 7f 7d 7c 08 be 03 9f 81 7f 30 1f a2 6c f2 11 21 3e e4 53 19 1f 52 fa 80 03 e3 bd 40 0c 54 bd 68 ad b7 6b 2c 68 11 60 08 58 6c 79 7d 57 86 f6 1b e1 5a 32 36 fd 26 a4 8e 41 46 88 1a 18 6a 0d b8 6d 3f 7e 03 c5 2a a1 ae 07 cd d3 4d 28 9b e1 77 22 7b 7a 9f aa 96 ec a0 4f 80 ac c3 fb 01 03 fe 9e aa 1b 3e 3a e1 35 64 1d f3 21 d0 44 6b dc 27 fc b6 fc c6 2f f0 1d f2 21 d2 43 d7 13 5e 68 95 1e 62 a0 ea 7f 17 31 10 08 48 36 3b 7a 97 f2 37 ca c0 5e 26 43 5b 8e c1 f5 9f a5 d8 62 d4 40 1f 35 70 8c df 66 3b 5f f7 99 92 Data Ascii: AO%q>$+H9rr[-0JCpe`@DB@E5PKFIc(}\|0l!>SR@Thk,h`Xly}WZ26&AFjm?~M(w"{zO>:5d!Dk'/!C^hb1H6;z7^&C[b@5pf;_
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: cb 04 0a 06 ab 1b b0 3a f7 53 95 cf d5 f1 a5 42 66 49 a1 8c cd 3a 69 73 d1 04 ef 14 5a 99 b2 c1 00 d9 a0 7b a0 64 b9 23 18 d5 26 42 5e 8f bc 6d 03 bd 85 04 e3 1f db e3 05 bf 85 81 c9 50 58 03 f9 09 9b 2e 1e 96 2e 3e 9c 9f dc e4 14 d4 0e 6d 76 07 33 1a d5 5f e0 2c 6f 59 b2 4f 6d cf e4 57 f5 8b 15 ac d2 d0 da 3d cd 06 c9 52 64 b0 f1 f5 85 7c e8 90 09 76 b3 3c 38 15 26 56 bf 03 55 67 17 a5 67 0a 37 13 86 f2 1f 22 d5 80 d7 36 72 e1 33 b6 0b f5 5b c9 f4 e9 f0 e4 53 8a a1 02 95 f1 37 9d c1 ac 03 a3 db dc 41 56 af e7 54 ca a0 23 fb 06 d9 81 98 c9 d3 39 20 c1 6b 55 95 3f aa 74 37 1d de 2c 7c b1 90 e1 96 d7 21 a3 47 e8 a0 cb ad 84 04 2a 68 52 16 12 2c f8 ad 05 51 c9 c1 c0 72 b2 05 6a c4 c9 91 d1 5d 20 b2 e3 c8 8c 78 de b1 0f f4 14 d2 f6 fa 25 c3 38 a1 7a 2c 98 26 Data Ascii: :SBfI:isZ{d#&B^mPX..>mv3_,oYOmW=Rd\|v<8&VUgg7"6r3[S7AVT#9 kU?t7,\|!G*hR,Qrj] x%8z,&
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: e9 a5 54 5a ff 77 f7 d1 65 1b 85 dc 4f 0f 15 a8 4c 01 5b 4b d1 e7 48 0e 1c 9f 8b 86 5e 26 cb 5b da 4a 54 ce 01 a6 5c f2 18 2c f7 7c be 24 05 5c 23 da 7c 57 25 e8 c0 a3 91 bc 20 be a6 8b 2f be f7 b2 bd 68 bd cd d3 b3 15 4a 1e f2 e8 e4 71 e1 3d 9e 08 fa 30 3d f9 a2 dc 89 d1 e3 bb 35 b7 8a 1a 6f 0a a7 9d bc 40 3f 72 93 fc 26 e9 e6 6e d1 56 52 e8 44 63 2d b5 f1 0e b5 87 7d 98 4c ca e6 06 68 5d 25 de 9f ee 83 0c 79 99 35 b9 37 14 af c7 8b 98 d9 4b 76 4c f5 d2 86 8d c3 b3 a4 87 2b 45 7b cc e7 6f ba 26 b8 b6 ef 9f 5a f2 7a 05 a9 4b 15 a4 de ec 68 d4 f5 f6 84 10 96 d7 35 43 a5 b8 00 5f cc 44 6b 7f 21 e3 86 07 4e 42 3d 52 6e 8f bb 9b 7d 88 74 30 30 9a 2f 93 5d ec 2c aa eb 08 43 f8 68 6c 16 1f ba 48 78 45 a8 40 05 b3 10 5e 57 c8 2b eb 43 c3 8f 45 90 17 36 9a 52 42 Data Ascii: TZweOL[KH^&[JT\,\|$\#\|W% /hJq=0=5o@?r&nVRDc-}Lh]%y57KvL+E{o&ZzKh5C_Dk!NB=Rn}t00/],ChlHxE@^W+CE6RB
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: b0 23 54 79 88 81 aa 1c 5d 48 90 62 26 c4 6f 1e fe 97 67 29 6e f9 95 a3 6f 22 17 81 35 e0 1f 4d 5f a9 47 d3 77 d2 73 b5 d7 eb b1 a1 1f d7 de 9a 7c d8 35 93 ee 5f 0c 85 73 0d ac b6 89 c8 11 a4 6c 77 ec ed f2 21 f7 fb dd 98 a1 09 f8 31 50 4d d4 fd c5 9f 63 40 5a 90 e2 d7 e3 6f a1 49 bf 9a 8a 83 15 65 44 18 3e 0d d8 17 7e 47 f5 79 8f 85 c9 e9 0a 52 e9 e4 2c 7e e1 b7 97 be c6 7f 10 a4 08 4a 6f 56 90 ba 4a fe 83 9f b3 0c d5 6e 4c 0c 54 bd 98 46 98 6b cc 90 58 49 5d 20 fc 27 19 d7 73 c3 36 13 0a a3 aa 48 65 a8 34 f0 09 7f df a4 9e 9c a8 20 b5 bf bd 46 49 f7 a9 96 f7 ed b1 a5 ea 2b 14 ff 01 e2 3f 1e 10 ee 20 ff 71 a9 0f 52 6d 7f 64 ac 7a 95 84 18 a8 fa db 6d ac 92 30 2e 66 3f cc 82 d8 e8 38 5a 06 f6 4e 21 af 52 89 f7 a5 a4 90 08 c3 ad 01 19 bd db 2d d0 17 7e ff Data Ascii: #Ty]Hb&og)no"5M_Gws\|5_slw!1PMc@ZoIeD>~GyR,~JoVJnLTFkXI] 's6He4 FI+? qRmdzm0.f?8ZN!R-~
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 6b 55 65 e3 21 e5 30 ff ff ba 42 c1 88 df 1f 3a d5 91 fb 99 9b 28 87 08 d0 dd 72 c7 d8 21 a8 cc 15 de 2e e4 0d e6 79 e5 4d 43 70 92 6c 25 5a 27 0a ff 5d 48 99 f5 b1 b2 03 87 ec f8 0b ee 3f 82 cf 3e 07 ae ae 30 0c 6c a0 c1 7d 9d 48 fd 5c 68 46 92 87 32 13 02 b6 fb 66 28 40 61 b8 40 11 93 84 94 f2 14 fe af 7e b3 01 33 85 b5 50 32 d1 8f 76 2b 8a 44 0f 39 1c a2 20 75 b6 82 15 5b 45 6c 37 87 80 51 51 af eb 93 a6 23 c9 a2 e4 08 7d 80 f1 78 17 18 07 ff 88 fa 7a b2 c5 e3 24 e0 43 42 e4 cd eb bc a1 41 e0 fd 84 7c 08 db f4 ee 83 aa 3a 9e 12 10 03 55 eb 6e 36 67 77 b8 4e 73 bf 0a 23 b1 b2 d6 57 4c 5e 6a c6 7a a8 0c 8d f7 71 2d 57 4a 59 84 a8 81 a1 d6 80 7b 53 ba 56 55 08 a9 40 b2 9f 82 d5 ef f4 8e 3f b6 88 f2 06 2b 82 14 df e1 1e 49 9e 4d 0e 17 ed af b9 f7 08 6a 15 Data Ascii: kUe!0B:(r!.yMCpl%Z']H?>0l}H\hF2f(@a@~3P2v+D9 u[El7QQ#}xz$CBA\|:Un6gwNs#WL^jzq-WJY{SVU@?+IMj
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: a3 95 5a 99 8a 0b 03 33 26 7e 78 79 99 10 c3 b6 32 65 73 03 f4 98 04 f1 5b b4 2f 48 26 06 94 e9 50 d9 20 60 ba 7c 95 a8 dd 15 84 e2 58 22 f4 23 6f fc fe 80 f0 42 c9 50 c8 0b 85 d5 e7 e8 a8 01 6a 87 31 48 a0 8a 41 aa a1 95 6a 67 d4 c7 ea 56 17 40 16 2b fd 0f 49 73 96 90 f1 60 81 e6 5f 55 87 2f 7e bf 55 65 db fb 73 d8 b7 8d 19 6c a1 15 30 66 b1 53 ea 9e ae eb 5f 25 3a ee e1 2c da 6c 75 41 c0 32 fc 14 f0 29 b5 fb 11 a5 ed 78 74 95 7a fd c7 2c 14 e1 cc 39 91 1e 20 dc 45 f8 39 21 8d 16 d2 b0 e8 56 0e d4 e9 ee c9 1a a5 0f 49 6f 47 4b 00 ee 59 e1 8c e9 ac 67 84 00 c7 80 e9 94 3c c6 42 20 22 20 00 bc 3a 86 6b b2 75 30 56 ea e1 d0 2f 55 1b f3 94 f6 6b 56 04 1f 1b 0a 8b 82 75 8b 22 9c a1 8b 3e 37 ce 1c 87 ce f2 4d 20 20 db 67 69 49 80 ff 99 71 c8 67 60 b0 8f 9f 0a Data Ascii: Z3&~xy2es[/H&P `\|X"#oBPj1HAjgV@+Is`_U/~Uesl0fS_%:,luA2)xtz,9 E9!VIoGKYg<B " :ku0V/UkVu">7M giIqg`
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 63 c2 b7 0b 97 08 a9 8f 5f ec 1a 44 5f 64 dd 8f 73 e9 5f fc 07 fd 0a 58 fa 07 e5 cf 13 32 d1 66 e2 04 b0 e3 c5 6a 9b a0 f9 57 e1 81 3a be 52 c7 3f 52 fe e5 c2 23 84 77 08 9d 1f a1 2e f9 12 82 f9 4a d3 dd f5 e2 75 1e 7c 4a 16 9e ac c5 7f fe 04 d4 f1 fa d3 39 d1 06 50 de 93 c2 1b 85 9b 08 77 10 02 34 60 c4 5d 41 09 fe c1 13 b2 60 38 bc e1 e1 3c 09 07 8f 94 b9 4e 57 d9 d5 ca 3b d0 39 bb b7 44 00 ce 25 8f e8 36 1b 82 19 d9 6f 45 1b 43 fb a6 90 55 9d 01 ed 01 8b 84 df d6 f5 62 a7 be b1 f2 bf a1 50 79 96 fe 4b c9 0f 00 e0 dd 9c e2 44 cd 23 33 ce dd ea 3e 43 65 f1 ee ee cb 79 99 f8 71 23 4e 85 3e 01 01 93 9d 3c d7 da f5 1c 87 82 4e 64 80 0f 10 19 ac ff e8 0f 64 58 5d 7c 2f 51 8a fd d0 17 f0 ce fd c4 22 78 15 d9 8e 80 55 f7 f5 42 f4 fb 4a 21 bc 58 1f 28 3b 94 90 Data Ascii: c_D_ds_X2fjW:R?R#w.Ju\|J9Pw4`]A`8<NW;9D%6oECUbPyKD#3>Ceyq#N><NddX]\|/Q"xUBJ!X(;
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: d5 6d 0d 76 bb ff 12 70 e3 d2 0e 32 6b a8 0e 93 70 ec c0 b6 ad c7 5d e6 6d 9a 71 c1 8a 0b fb 9d 23 c4 1f e2 33 f6 15 32 76 80 67 d2 a4 f7 ff a2 ef c6 93 d2 23 c5 93 f3 d5 ca a3 9f c6 d8 d2 31 8e 45 a7 9d 2d bb 73 3d b6 c8 b5 c8 85 df 40 26 64 63 e2 fe 41 e1 3a c2 66 38 41 05 f7 0b e9 b3 ad 84 db 08 ff 4d 78 88 f0 b3 42 78 cf c6 17 eb 5b ec f3 9f c5 f3 6f c5 b3 92 da ab 74 ec c0 1f 8f b1 57 93 2d 4b c8 ea 37 52 2a d9 81 f2 cc 2e 69 c4 ae 31 c7 61 0c b1 3d f1 05 ea 28 1d e3 b0 8c 46 81 29 bc e0 48 57 f8 36 1a 7c b7 6a d3 f3 67 46 80 72 31 ce 93 95 fc 48 88 53 74 db 70 4a f3 74 7c c3 98 44 a7 08 27 97 0d a6 c8 42 df 9c 24 d9 0e a2 3d 03 c9 75 a4 f2 ff 29 a4 fe e5 c2 53 84 3c fc 70 8b 52 07 aa f3 1d 74 a2 74 3d 15 d8 ea 92 73 a6 4f 68 33 4b 04 ce 53 5d 9e ea Data Ascii: mvp2kp]mq#32vg#1E-s=@&dcA:f8AMxBx[otW-K7R*.i1a=(F)HW6\|jgFr1HStpJt\|D'B$=u)S<pRtt=sOh3KS]

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	662	OUT	GET /host_style/style/new_ff_v2/images/e328a85faf3ec595e525860c98e34098.png HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	657	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/png Content-Length: 9175 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4137 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wD24jq6JkNklwf8ko4Z%2FEWpVNhtX1mFpMQt%2BFzIS21HbqsXABCD%2FrnzAUr8yLeGklxjuvlrSh4xnakRbY9fYSgxkP889GQthOxclYQPjeqh%2F4ATRj3okhmoRkHehsw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde38c3a43ad-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 c8 a0 03 00 04 00 00 00 01 00 00 00 c8 00 00 00 00 9b 5b 3d 95 00 00 23 41 49 44 41 54 78 01 ed 5d 09 94 1c c5 79 ae d9 d9 7b 57 da 43 0b ac 38 74 80 10 06 24 41 00 cb 20 2b 80 84 10 60 61 0c 2f 98 80 90 c4 15 02 22 01 12 4c 38 0c c1 c6 01 73 18 78 60 1c 6e 71 48 58 4e 84 f3 8c 71 08 18 83 04 44 08 83 03 01 41 88 83 04 3a 1e b2 16 58 ed 21 ed 6a ef dd 7c 5f d3 b5 af 76 76 ce 9e 9e 9e ae 9a aa f7 7a aa a7 8f ea fa bf fa bf fe eb af ab 23 c2 86 9c Data Ascii: PNGIHDRXsRGBDeXIfMM*i[=#AIDATx]y{WC8t$A +`a/"L8sx`nqHXNqDA:X!j\|_vvz#
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: b6 9e 82 78 09 b6 d3 50 e6 e5 2c 77 5a 0a 92 a2 ac ac cc b1 18 05 a8 0b 8e 55 e9 e9 e9 71 c8 02 6c 24 04 dd c0 e6 39 6c cb eb ea ea 5e 40 3c ca a9 91 17 9a 18 17 0c 41 50 e0 25 b0 18 8b 10 5f 8f 82 3c 90 85 49 52 b0 fa 24 89 61 62 01 7b 95 49 12 85 55 31 85 2c 1b 80 d9 6d b0 28 4f 23 ee f3 9a b6 4e f7 19 4f 10 14 6e 39 2c c6 45 88 af c1 36 81 85 c3 2a 54 79 79 b9 43 0c 3a dd 36 24 46 80 4e 3d ab 60 dd dd dd 4e cb 18 af 04 39 b6 62 bb 13 16 65 19 e2 ee c4 77 eb 7f c6 58 82 80 0c d5 b0 18 97 22 fe 1e 8a a9 91 45 45 7f a2 a2 a2 c2 21 86 fe 45 17 bc 04 24 4a 57 57 97 e3 e4 bb 4f 6f 02 41 ee 86 45 79 08 71 47 f0 39 ca fd 13 8d 23 08 ac 45 2d de 7a 97 03 ba bf 03 39 ea 09 a1 25 86 bf 8a 14 4b 14 90 a3 05 4f b8 17 d6 f8 7e 58 95 36 7f 9f 96 df d4 8c 21 08 c8 10 Data Ascii: xP,wZUql$9l^@<AP%_<IR$ab{IU1,m(O#NOn9,E6*TyyC:6$FN=`N9bewX"EE!E$JWWOoAEyqG9#E-z9%KO~X6!
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 78 08 c8 c1 8d 38 37 00 b2 cc 83 3f f2 6a bc eb bc 1c f3 cd 82 70 69 1e 0c 05 58 09 eb 11 a5 df 61 c9 e1 a5 38 ec 3d 5e 10 60 35 8b 3a 47 dd a3 0e 52 17 bd a4 13 ef 1e 5f 08 82 8c 45 b8 6e 15 1e e0 ac 3e c2 cc da 60 11 08 12 01 ea 9c eb 8f 8c 77 d7 50 f3 a5 76 e4 0b 41 d0 61 f3 7d 90 64 be f5 3b 82 54 09 fb ac 58 04 14 7f 64 3e 75 32 f6 bc 97 ff 59 b3 0c 7e 07 d7 ca 7d 07 0f 8f 32 83 2e 8b bd e4 c5 de 63 11 c8 1a 81 18 7f e4 48 f8 23 59 ad 05 9c 95 05 61 d5 0a e4 e0 42 d2 51 76 04 5a 72 64 5d be 36 81 2c 11 a0 0e 52 17 a9 93 ae 6e 66 65 04 b2 22 08 9a d5 2e 44 46 9c 59 81 b6 bf 23 cb 92 b5 b7 fb 86 00 75 d1 6d fa e5 f0 f8 0b b3 49 d8 33 bb dc 8f d7 fc 1f 08 d2 c0 aa 95 5d 6c 21 9b 62 b0 f7 fa 8d 00 c7 6b 71 5e 3b 86 a2 34 a3 45 f5 20 af 1f f1 f1 6c 41 f0 Data Ascii: x87?jpiXa8=^`5:GR_En>`wPvAa}d;TXd>u2Y~}2.cH#YaBQvZrd]6,Rnfe".DFY#umI3]l!bkq^;4E lA
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: c7 28 85 88 3d 40 8c 88 15 31 33 31 50 c7 a9 eb d4 f9 78 f2 c5 25 08 6e 30 ba 7a b5 14 4d b9 1f 6c 1b 88 87 87 3d 16 07 01 62 45 cc 4c 0c b2 9a 25 75 3e 56 c6 51 ad 58 e8 18 3c 06 17 f3 c3 ed 46 f6 7d fc f3 ab bd e2 b6 17 31 cf 55 c3 50 5b 19 11 f5 d8 ea aa 10 63 2b c3 e0 c3 6e 4c d7 ed c2 60 09 8e 2c de 05 b1 38 3c a6 75 f7 10 df 8a be 4b 78 fd c9 65 e2 6f 8e 2f f5 3d dd 7c 27 28 fb 44 50 dd 9a 85 8e 43 ae b5 30 1c e2 8d e9 64 eb 95 91 be c7 3b 5b 07 c5 4f 7e a7 4f 5d 61 ef 1a 4c ab 3d 30 2a 66 1f 80 a9 b5 53 a2 62 af 31 a3 de 67 c3 05 a9 ee f4 c3 ad fa 62 e7 90 f8 ac 6d 10 53 7d 87 c4 26 54 93 fe f5 0f 7d a2 69 67 76 fe 16 b1 3b 7a ff 62 71 e4 84 b8 15 0f 35 0b 5a ed b3 9a d5 d5 e5 58 48 ea 7e 4a 82 9c 40 e9 4c f3 3f da 20 ff d2 95 5d a2 7f c0 ff 37 ab Data Ascii: (=@131Px%n0zMl=bEL%u>VQX<F}1UP[c+nL`,8<uKxeo/=\|'(DPC0d;[O~O]aL=0*fSb1gbmS}&T}igv;zbq5ZXH~J@L? ]7
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 0e 2f 11 a7 1d 96 d9 fc 87 09 f5 ce 0c 03 4f 88 f1 de 27 ce ab cc f8 5e 8e 51 7b 6c 6d 70 0b 2b e4 a3 2c 32 06 25 cd 1b 8a 61 46 88 9c f6 6b 75 57 c2 93 0a 7a a8 f5 01 7b 14 89 13 0f 0e 6e fa 6c 35 2a c3 5e 9e b7 3e e0 8f 05 b1 2c 4c 08 e4 06 ab 58 ce e4 02 fc d1 5a a6 ca 52 ef 83 00 b5 16 3c 8d cc 07 dd 2f a1 7b 59 48 2e 90 1b 74 d2 83 b3 bd 69 14 a6 d7 4b aa 0c 79 6b 79 95 3f d9 7d 41 13 c4 94 b2 30 ca 82 54 58 0b 92 90 23 9b 02 1e 3c a8 7b 59 c4 5a 90 4e 22 2b 0f 26 44 39 e4 27 d2 fd 3c 59 c8 c5 f0 3d 7b db db 87 02 5f 9f 58 f7 b2 90 5c 40 dc 49 1f 64 07 4b 45 1e f4 bd 84 02 4a 90 2b a5 db 30 1a 81 a0 ab 57 cc 81 ee 65 21 b9 40 6e d0 07 69 a6 50 f2 20 f7 75 0c ba 17 4a ae 30 b7 04 c9 1c 59 c9 05 72 63 d8 82 60 45 eb cc 53 0a d1 1d 93 b2 e8 5f 08 91 18 Data Ascii: /O'^Q{lmp+,2%aFkuWz{nl5*^>,LXZR</{YH.tiKyky?}A0TX#<{YZN"+&D9'<Y={_X\@IdKEJ+0We!@niP uJ0Yrc`ES_
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 96 8b 25 47 db ea 96 d4 0a 62 41 4c 74 5f a1 44 ca 13 2f a6 f5 a0 6e 53 c7 a9 eb f1 ae e1 b1 84 04 e1 49 dc bc 9c 71 77 77 37 23 63 03 df 92 3f 3e bd 4c 5c 33 df dc ea 44 ba 85 47 0c 88 85 a9 96 43 e2 20 75 5a ea b8 3c 1e 1b 27 25 48 5d 5d dd 0b b8 61 03 db 89 95 fa 5a 6c 1a c6 fc bf 62 6e a9 b8 ff ec 0a a1 fb 47 28 bd 14 08 65 a6 ec c4 c0 f4 40 5d 76 fb 3e 36 b8 3a 9e 50 e4 a4 04 01 bb 06 b1 dd c6 bb bb ba ba 12 26 62 d2 89 33 0e 2f 16 ff 71 79 a5 38 68 af a8 49 62 25 95 85 b2 52 66 ca 5e 08 41 ea 32 75 9b 3a 9e 4c e6 a4 04 e1 8d a8 9f 3d 8d 44 b6 72 40 57 21 58 11 ca 3c 05 d3 48 9f ff db 4a 71 d6 51 e6 b7 70 51 46 ca 4a 99 0b 21 50 87 a9 cb d4 69 ea 76 2a 99 53 a2 82 84 fa b0 dd c9 84 24 f3 52 25 6a c2 f9 72 70 e3 9e 33 cb c5 f2 0b 2a c5 7e 06 7e bd 8a Data Ascii: %GbALt_D/nSIqww7#c?>L\3DGC uZ<'%H]]aZlbnG(e@]v>6:P&b3/qy8hIb%Rf^A2u:L=Dr@W!X<HJqQpQFJ!PivS$R%jrp3~~
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 72 a1 d4 21 ea 12 c2 9d ae 6e e5 14 09 df 5b b1 12 e5 16 b3 10 9f 84 60 e7 71 72 15 46 57 da 49 56 89 80 b2 c7 e3 22 c0 c9 4f ed ed ed ce a7 38 50 ad 7a 0a e4 38 3f ee 85 3e 1f 0c 8c 20 20 47 31 9a 7f 9f 45 bc 00 4e 95 43 12 08 ea b3 38 36 39 13 11 a0 c5 20 39 68 41 a0 33 cf a3 5a 75 3a 62 67 05 b8 5c cb 1b a8 86 42 d0 0a 90 e4 65 c4 b3 30 89 c5 19 b3 65 49 92 eb 22 d6 3b 7d 92 83 7d 1d ee 7a ba 1c be 3e 0f 3a 13 d8 4a ea 39 f7 41 d4 e2 a1 60 b0 1e a7 22 fe 80 02 4b 93 a9 5e 63 f7 2d 02 12 01 59 ad 72 c9 f1 81 ab 3b 81 91 83 f9 08 94 20 7c 20 16 79 68 85 a0 c7 81 24 eb 68 32 a5 e9 e4 39 1b 2c 02 12 01 55 37 a8 2b d4 19 ea 8e 3c 1f 54 1c 68 15 4b 15 ca ad 6e 3d 83 78 01 00 70 56 6a b4 0b d1 a9 08 15 ee 3e 9b 72 65 6b 15 74 83 3e c7 77 11 07 6a 39 24 fa 81 Data Ascii: r!n[`qrFWIV"O8Pz8?> G1ENC869 9hA3Zu:bg\Be0eI";}}z>:J9A`"K^c-Yr; \| yh$h29,U7+<ThKn=xpVj>rekt>wj9$
2024-08-04 22:30:24 UTC	249	IN	Data Raw: 6f 6b b0 bf 1a 55 c8 35 18 72 fe 65 90 f9 d4 ed 59 c1 96 a2 6e e8 c4 c9 2f 86 b5 ec 03 12 cc 85 e2 cd c5 e9 39 50 cc 89 71 2e 73 9c 7e 92 45 12 88 31 49 23 63 ee cb 8d f7 73 5f 0d 54 78 06 c6 ea 46 85 e7 7f c6 24 81 8c e5 f5 6a 1a dc 47 ba 5b 10 ad c1 73 57 e3 fa d5 18 fe b1 2d f6 1a fb 3f 31 02 23 4b 25 f1 75 f6 4c 02 04 68 61 a0 78 33 b8 e1 92 e9 50 d4 19 50 ca 29 88 9d e1 2e 09 6e f3 fd 30 9e c9 61 1e f4 21 d6 23 71 ae 63 bb 9e 9b b5 10 d9 41 6d 09 92 1d 7e 09 ef 86 d3 5f 07 85 9d 04 e2 4c 86 d2 4e c2 85 ec cd 1f 87 63 e3 f0 bf c1 8d ab 11 97 e2 7f 29 e2 32 c6 b8 86 16 a2 17 fb 3d 6e dc 8b b8 03 ff 77 20 6e 66 8c 4b b8 35 e1 ff 66 90 60 13 8e 6d ce c7 ba b5 cc ab e9 e1 ff 01 4c e4 5e 92 98 80 ac 7a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: okU5reYn/9Pq.s~E1I#cs_TxF$jG[sW-?1#K%uLhax3PP).n0a!#qcAm~_LNc)2=nw nfK5f`mL^zIENDB`

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	662	OUT	GET /host_style/style/new_ff_v2/images/a53bf2276aa814a0053de1eb24d48b1b.png HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	661	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/png Content-Length: 9846 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4136 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJ%2BSfOr%2FI3K4Otta6lmVl2ioJeVX7aKgbAOjZ%2BMASWdwh7TJ%2F5Hjiy%2FogU31qLgU2%2FCaaYjiIwhXnBvhP3KAj7a2saBN7ZvcMPIjbHnnRBNEA52xLnJzykntYqM6Ww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde3ba220fa9-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	708	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 c8 a0 03 00 04 00 00 00 01 00 00 00 c8 00 00 00 00 9b 5b 3d 95 00 00 25 e0 49 44 41 54 78 01 ed 5d 09 94 55 c5 99 ae a6 57 ba 9b 5e d9 11 9b 45 40 41 05 83 a2 a2 28 c6 4c 8e 31 31 8e b2 44 c6 c9 e8 31 9b f1 e4 b8 27 6a 26 38 67 50 33 3a c1 24 e6 cc 89 09 c7 f1 64 d7 04 30 63 12 67 b2 19 b7 08 8a 51 21 11 0d c8 d6 a0 b2 34 f4 4a 37 dd 34 34 f3 7d c5 ad e6 f6 eb b7 dc ad ee bb f7 bd aa 73 ee ab fb ee ad 5b cb 77 ff ef fe b5 fc 55 55 20 8c d3 86 40 Data Ascii: PNGIHDRXsRGBDeXIfMM*i[=%IDATx]UW^E@A(L11D1'j&8gP3:$d0cgQ!4J744}s[wUU @
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 3e 2c 0f 6a 1b 3a 6a 16 b8 dd f0 bf 87 e3 3b 75 75 75 6d 99 e2 c9 c5 fb 79 49 10 bc f8 21 a8 42 2d 41 55 e9 4e 9c cf a4 3c f0 e5 42 10 24 21 50 2f 97 1a 23 17 5f 78 a6 32 51 ab a0 bd 25 c9 02 6c 54 70 f6 3f 6f 40 d5 6c 39 aa 60 4f e0 7c 60 a3 46 85 ca 41 3f af 08 82 17 5e dc d2 d2 72 3b be 92 f7 e2 25 cb 2a 14 49 c1 ea 13 b5 05 89 61 dc 09 04 14 51 48 1a 45 16 f8 5d d0 ae cb 6a 6b 6b bf 09 ec 7a 4f 84 ce cd b3 bc 20 08 5e 6a 19 88 b1 14 5f c0 3b f0 1a 25 0b 58 85 2a 2b 2b 93 c4 60 a3 db b8 d4 08 b0 51 cf 2a 58 77 77 b7 ec 19 b3 42 f6 00 b7 87 41 94 fb 40 14 76 23 e7 a4 cb 69 82 80 18 95 ad ad ad f7 43 63 dc 84 b7 57 cc 37 c8 f6 c4 d0 a1 43 25 31 72 f2 8d 6a 2e 14 89 72 e8 d0 21 d9 c8 b7 92 ea c5 c7 e6 bb 35 35 35 5f 03 51 0e 6a 4e 3e f4 e8 73 92 20 8d 8d Data Ascii: >,j:j;uuumyI!B-AUN<B$!P/#_x2Q%lTp?o@l9`O\|`FA?^r;%IaQHE]jkkzO ^j_;%X++`Q*XwwBA@v#iCcW7C%1rj.r!555_QjN>s
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 6f 10 d0 81 80 7d d2 15 65 2f c8 34 02 27 08 cc 02 3e 01 26 df c0 06 94 ea 6d 08 32 c3 26 2e 83 40 22 02 94 35 d5 68 a7 ec 51 06 13 c3 78 fd 1f 68 1b 84 4b f3 60 d3 95 5d d0 1e c5 54 7d 66 9a ac d7 d7 62 9e f3 82 00 27 5b b1 4d 02 c2 f4 62 33 a4 f1 20 8d ef 25 85 02 d3 20 20 45 01 d7 ad 22 39 58 27 34 e4 f0 f2 8a cd 33 7e 10 a0 cc 51 f6 28 83 96 2c fa 56 00 81 11 04 75 bf ef 83 b9 13 a1 e2 64 d5 ca 4f 41 cd b3 06 01 af 08 a8 f6 08 65 91 32 e9 35 1e f5 9c 6f 86 31 22 6b ad dc 57 70 5a c0 0c 5a bd 0a 2a 0d e3 1b 04 42 45 40 4d b6 42 a2 c7 60 05 7c 1e ac 81 3d af 05 ec 5b 83 b0 6a 65 2d 24 5d c0 81 40 43 8e 50 65 c1 24 96 04 01 ca 20 65 d1 2e 9b 49 82 39 ba e4 9b 20 b0 85 b9 07 19 91 b3 02 cd 2a 24 8e 30 37 81 42 40 80 b2 c8 ea 3e 65 93 32 ea 35 49 5f 55 2c Data Ascii: o}e/4'>&m2&.@"5hQxhK`]T}fb'[Mb3 % E"9X'43~Q(,VudOAe25o1"kWpZZBE@MB`\|=[je-$]@CPe$ e.I9 $07B@>e25I_U,
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: a5 ed e2 f2 b3 c7 8b ea 8a 12 bf 51 0d 78 7e 23 b5 df 1f 36 8b bd 2d 87 40 c2 be 84 8f cb 09 e1 1f f0 90 c3 3f 15 65 c5 e2 82 e9 a3 c4 3f 7f f8 14 31 6c a8 34 e7 70 f8 64 f6 82 29 99 87 92 38 5f e5 62 40 23 1d 13 a3 c6 e3 8b 50 41 1b 15 15 58 05 cc a6 ff ef 3f 7b 43 bc f8 d6 ee 40 c8 c1 72 74 e1 2b f7 9b 75 3b c5 3d 3f 78 4d 74 a2 8d e0 c5 0d 41 db e0 94 b1 d5 81 68 a2 4c e9 53 23 be ba a9 29 53 30 57 f7 f7 80 14 cb 7e f6 a6 d8 b6 bb 1d 18 f4 a2 9d 74 bc ba d7 0b 2d 70 e4 28 db 4b 7d 52 13 bb 8a d4 16 98 71 fe fe 8d f7 c4 f2 d5 7f b3 5d 8d f6 29 65 9e b2 4f 0e 90 0b cc ed 00 82 e0 e6 22 5e 8c 12 39 98 9f 7d ad 69 e7 d5 33 88 27 b7 ab e9 a0 58 f5 e7 ed 9e 9e bd f2 bc 06 f1 8d cf cc 11 2b 6e 9e 27 16 5e 38 51 14 15 0e 80 d2 53 9c e9 1e da 0a 41 0e d2 fd fc Data Ascii: Qx~#6-@?e?1l4pd)8_b@#PAX?{C@rt+u;=?xMtAhLS#)S0W~t-p(K}Rq])eO"^9}i3'X+n'^8QSA
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 88 29 bc 5c 54 22 68 e7 b4 9b 97 e9 af f8 ed df 83 4e 7e 50 7c 1c 8f ba ee 23 83 d6 7a 1e 14 2e ae 17 14 17 54 15 4b fa ea 62 dc 0a c5 19 7d 6e ab 20 6e ca f8 d4 cb db 05 d7 bd 72 e2 9a 51 f7 cf a6 7b 0c e4 e0 6a 28 3a 5d 15 d6 ef fa ca c2 99 b1 b4 d4 75 8a 8b e2 c2 00 82 38 7d 38 6a e1 46 d6 c0 72 f4 9c f1 da b2 c5 05 0d 1e 7d e6 6d 47 f1 ef 73 48 24 47 91 d9 02 71 39 9d 4c 8e ed a5 17 fe b6 3b 53 30 5f f7 61 8f 24 6e bb ea 74 51 5f 15 bf 65 7d bc 14 5c 12 04 36 27 b2 0f 51 b1 c6 4b 44 d9 7e 66 11 16 57 d3 35 9b 8f 65 7b 73 eb 01 f1 c7 37 33 4f cd dd d3 d2 a5 05 8a 4c 73 d2 b9 b0 c5 f7 ff 57 7f d5 6a f1 45 93 c4 ac 49 fa 06 69 b5 80 e7 21 52 c5 85 58 57 ad ec e5 ae 84 91 e0 a7 f0 f2 74 3a f6 0c ed d8 9b 7e 5c 61 9b cb 15 16 9d e6 f7 83 e6 d4 c4 63 af d9 Data Ascii: )\T"hN~P\|#z.TKb}n nrQ{j(:]u8}8jFr}mGsH$Gq9L;S0_a$ntQ_e}\6'QKD~fW5e{s73OLsWjEIi!RXWt:~\ac
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: d1 98 0c 46 43 cc 59 93 ea c4 43 37 cc c1 92 47 d9 db d9 e9 78 c3 7d 7d c6 25 91 22 0f 2e 32 a8 64 5f 71 61 00 41 a0 5a 56 b2 10 aa 15 1f 87 02 05 99 c7 cb 66 9f 24 49 12 d5 ee 5f 56 03 d9 66 2a 2a 1c ac e9 ae c1 56 10 d9 34 a5 e9 ec ee 95 66 29 c9 56 7b 09 f2 1d e9 8e 4b c9 be e2 c2 00 82 d4 d7 d7 ef 82 70 74 b2 0e a6 02 ea ce 50 d4 e2 bf fc ec f1 e2 4b 57 4c 87 cd d6 00 68 22 91 cd 0f cf 1c 2b 38 df 3e 95 bb e8 f4 d1 e2 8b 1f cf 9e 69 3f 6d b6 1e 5a b9 41 e8 d8 40 28 55 99 83 bc 4e 99 b7 da 1f 9d e4 02 e3 1e 24 05 e8 fb 5d cb 1b f9 4a 10 96 9d 82 f8 d5 4f cd 14 65 30 70 8c 92 bb f8 8c cc 7b 8f 5f 3a 6b ac 5c a6 27 5b f9 e6 7e 88 2b fe 4f ff 12 a8 3a ca a7 64 5e 71 80 69 0c 22 08 ae e5 6d 3b c4 0e fa 87 4e 19 8e ba fd b9 62 dc f0 68 2c 5a c0 bd d7 a7 8c Data Ascii: FCYC7Gx}}%".2d_qaAZVf$I_Vf**V4f)V{KptPKWLh"+8>i?mZA@(UN$]JOe0p{_:k\'[~+O:d^qi"m;Nbh,Z
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 34 34 34 b4 a0 8a f5 10 13 e8 ec ec 74 9a 8e 09 67 10 c8 2a 02 4a 56 29 bb 94 61 a7 99 71 d5 06 51 91 b2 0d 82 b6 c8 3e f8 75 e5 e5 e5 62 e8 d0 e8 db fc ab bc 1b 3f ff 10 60 d5 0a 5a 83 da a3 19 6d 8f 91 f0 1d 6f e7 ec 5a 83 10 5e 26 80 7a dc 02 f8 c7 98 38 ce f3 0f 75 53 e2 58 20 40 d9 a4 8c 52 56 2d 99 75 4c 0e 16 d0 13 41 f8 e0 88 11 23 9e 87 f7 1c b4 88 9a 70 c2 cb c6 19 04 22 85 00 27 43 51 46 e1 9e b3 64 d6 55 fe 3c 13 84 a9 60 b0 70 31 bc a3 aa 01 e4 2a 65 13 d8 20 a0 19 01 5b 47 d2 51 4b 56 5d a7 e8 8b 20 18 51 3f 80 14 97 32 55 d5 08 72 9d 03 f3 80 41 40 13 02 36 99 5c 6a c9 aa eb 94 3c 35 d2 ed a9 40 7d 15 a0 c1 fe 01 fc d1 6c ac b3 d1 6e 9c 41 20 db 08 b0 51 6e b5 3d f6 a0 61 3e 96 6d 10 2f 79 f2 a5 41 98 20 13 c6 88 fa 95 f4 39 01 c5 8c 8d 78 Data Ascii: 444tgJV)aqQ>ub?`ZmoZ^&z8uSX @RV-uLA#p"'CQFdU<`p1e [GQKV] Q?2UrA@6\j<5@}lnA Qn=a>m/yA 9x
2024-08-04 22:30:24 UTC	924	IN	Data Raw: 10 d8 71 dd 83 d3 65 38 0a 59 ed 32 3d 5d 44 26 1a ce de 43 85 1c 71 57 a7 7b 31 f0 f7 1f 71 d0 1a 76 04 63 4b 10 55 08 34 e0 eb a1 c2 57 01 f8 8b 49 1a 4e c4 62 b5 cb 18 3d 2a 84 c2 f5 a9 2d 58 9d a2 25 2e c9 00 f7 02 aa c0 0b bd ee cf 11 6e ee 07 a7 16 7b 82 a8 22 61 dc 64 3e aa 58 ab f1 42 ea 78 8d ed 12 6a 14 33 c0 a8 10 d2 eb 73 c0 8f 5a 83 ed 0d 3a 90 a3 19 55 2c 2e c5 f3 bc bc 10 d3 9f 9c 21 08 f1 07 39 0a 51 ed ba 0f 2f e7 2e 9c cb 06 09 35 09 89 62 34 8a 1e 09 a5 c6 20 31 6c ed 8c 3e 60 ff 10 aa 53 4b f1 1e 5c 6d 98 a9 27 87 fe 62 cd 29 82 28 28 1a 1b 1b 6b d1 68 5f 8e ff d7 91 34 bc 4e 4d 42 a2 98 1e 2f 85 92 3f 9f 9a 82 c4 a0 e6 a0 b3 c8 f0 43 34 ca ef 74 b3 0f b9 bf 5c e8 7f 3a 27 09 a2 60 03 39 2a 5b 5b 5b ef 47 7d f8 26 5c 93 33 b1 0c 51 14 Data Ascii: qe8Y2=]D&CqW{1qvcKU4WINb=-X%.n{"ad>XBxj3sZ:U,.!9Q/.5b4 1l>`SK\m'b)((kh_4NMB/?C4t\:'`9[[[G}&\3Q

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	662	OUT	GET /host_style/style/new_ff_v2/images/fad350ab1b376d6e63f4e20880b7714d.png HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	657	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/png Content-Length: 6351 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4137 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RVBrc5j0rNNSnSBF2B8WGDBvrqc1j5qeoPW2BXk4zjhiso%2FhdCJqMtVKg0%2FvIuT8zSuAt%2BHRXhB6JzA0sjzT0L%2Ft2ojnCI5Tgdg9Y13xAvs1Tyuq98a13iVYaXC9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde42e3a4297-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 54 08 06 00 00 00 1c 6b 10 c1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDRTTkpHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 3a d8 04 b5 b0 03 1a a0 11 9a e1 10 b4 c1 31 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d 5c 40 fa 90 db c8 20 32 8a fc 8a bc 47 31 94 81 b2 51 03 d4 02 75 40 b9 a8 1f 1a 8a c6 a0 73 d1 74 34 0f 5d 80 96 a2 6b d1 1a b4 1e 3d 80 b6 a2 a7 d1 4b e8 75 74 00 7d 8a 8e 63 80 d1 31 0e 66 8c d9 61 5c 8c 87 45 60 89 58 1a 26 c7 16 63 e5 58 35 56 8f 35 63 1d 58 37 76 15 1b c0 9e 61 ef 08 24 02 8b 80 13 ec 08 5e 84 10 c2 6c 82 90 90 47 58 4c 58 43 a8 25 ec 23 b4 12 ba 08 57 09 83 84 31 c2 27 22 93 a8 4f b4 25 7a 12 f9 c4 78 62 3a b1 90 58 46 ac 26 ee 21 1e 21 9e 25 5e 27 0e 13 5f 93 48 24 0e c9 92 e4 4e Data Ascii: :18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 66 fe ea f9 23 0b 82 16 7c bd 90 b0 50 b8 b0 b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 55 ef 6a 97 d5 5b 56 7f 2a 17 95 5f ac 70 ac a8 ae f8 b0 46 b8 e6 e2 57 4e 5f d5 7c f5 79 6d da da de 4a b7 ca ed eb 48 eb a4 eb 6e ac f7 59 bf af 4a bd 6a 41 d5 d0 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 35 ed 5b cc b6 ac db f2 a1 36 a3 f6 7a 9d 7f 5d cb 56 fd ad ab b7 be d9 26 da d6 bf dd 77 7b f3 0e 83 1d 15 3b de ef 94 ec bc b5 2b 78 57 6b bd 45 7d f5 6e d2 ee 82 dd 8f 1a 62 1b ba bf e6 7e dd b8 47 77 4f c5 9e 8f 7b a5 7b 07 f6 45 ef eb 6a 74 6f 6c dc af bf bf Data Ascii: f#\|PxY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcadUj[V*_pFWN_\|ymJHnYJjA_mJtzj5a5[6z]V&w{;+xWkE}nb~GwO{{Ejtol
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: fd ea 6f c8 be f5 1a f6 de f7 41 d3 11 91 68 b0 7d 64 32 a8 74 0a 7d fe b5 44 d6 fd 31 e1 75 7f 82 9c 51 56 88 e9 c4 80 d4 68 80 7e 8b 02 5d 5b b8 27 4f 90 7a f1 79 d2 bf 7e 09 e5 3a c8 58 7c 7c da 38 e6 c3 2d 05 52 12 be fd 2e 22 9f bb 0f 7d e1 62 44 38 1c 64 17 8f 9d 8f d5 f9 80 46 ce 47 3c a0 a9 e1 ec db c3 e0 b6 e7 c8 fc f6 4d 64 bc 08 34 9d 82 5f 44 0a 01 9e 87 db de 46 f4 ee 3f 25 be f9 9b c8 8a aa a0 7b 89 72 ce fd d4 f9 a6 e7 03 c1 1f df 1e d6 7b 3b e8 ff 87 27 c8 fc cf eb 3e c5 d1 34 26 e8 56 17 95 4e 61 2c 5c 84 b9 ea 26 44 34 56 88 2e 1e 18 4e 43 05 d0 43 c0 57 bd f6 be 06 06 9e 7a 02 bb 71 1f b2 b4 cc 3f a1 f3 42 44 7d fc a0 7c ad 13 72 f4 ad 42 08 d4 60 12 ad b2 9a f8 a6 bf 26 74 c7 fa 42 bd b3 04 50 3a a4 21 e7 12 fb eb 83 06 d3 6d 3d c6 e0 Data Ascii: oAh}d2t}D1uQVh~]['Ozy~:X\|\|8-R."}bD8dFG<Md4_DF?%{r{;'>4&VNa,\&D4V.NCCWzq?BD}\|rB`&tBP:!m=
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 6b 66 07 42 9b 9a 25 7e 25 84 60 30 2d ba 01 8a 16 82 a7 d0 95 8d 32 ca f8 85 58 cf 96 ee f9 1c 18 18 c0 f5 1c 42 52 32 e8 a4 79 bb 7d 17 fb bb 8f 14 ec ac 69 eb 3f c3 a1 d6 22 1c 2b 8e 94 c3 50 22 25 41 ef a3 bc 24 4d 58 0f 64 cd 9f 95 f8 65 25 3e 08 64 16 f1 a5 c8 f8 12 74 0f ce 84 ae e3 49 6b 3d df 3b 63 d2 65 db 48 65 21 73 c1 09 ba d4 38 de df ce 0f f6 ff 2b 3d d9 44 41 00 fd d9 ae 34 87 4f 0b cc 11 6e 5c 5d 4f 30 63 5a 96 aa d2 40 52 e8 3f 00 ec a1 de b6 05 c5 45 45 e9 6d ec 88 7d 96 2d 7d 2b 79 b9 27 cd a0 eb 62 e0 fa 31 9e 1f 31 3f 01 28 de ef 3c c0 df ef 7e 8e 94 13 6c ea fa bf ec 3e ce 9b fb 0c 3c 27 82 90 c3 6f a0 29 0b 96 d4 14 b1 66 6e 20 d6 db b6 21 4b 09 e0 e5 c0 66 53 b6 8e bd f1 f5 6c ef ed c1 f1 b2 18 c3 84 cc 48 21 f1 94 cb f6 f6 5d 3c Data Ascii: kfB%~%`0-2XBR2y}i?"+P"%A$MXde%>dtIk=;ceHe!s8+=DA4On\]O0cZ@R?EEm}-}+y'b11?(<~l><'o)fn !KfSlH!]<
2024-08-04 22:30:24 UTC	163	IN	Data Raw: 64 30 b9 01 cc ca 9d 86 97 ab fc 24 37 87 96 8b 6d 28 e8 b2 eb 37 e0 3b 5c 4b 2e 13 20 13 f8 df 23 69 08 aa 41 19 f0 00 1b f0 bf 2e b3 e9 32 00 73 53 6e ac 0d 41 36 2a 0b 30 50 07 78 16 df f3 ff d8 24 04 f2 6f 73 63 7b 96 80 bf b2 50 88 25 7f 21 b9 fa 71 95 42 f5 c5 d5 cf ff 14 4c 24 7e 8e e9 7a e0 0b 04 55 00 c1 0f 29 dc 86 1f b8 75 94 29 fe 81 aa 91 64 b8 4f a8 cd c5 4f 9d ac 38 87 2b 76 e3 fb 67 9b 99 84 9f 50 fb bf 01 00 33 8a 7f 17 b8 15 9d 25 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: d0$7m(7;\K. #iA.2sSnA6*0Px$osc{P%!qBL$~zU)u)dOO8+vgP3%IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	662	OUT	GET /host_style/style/new_ff_v2/images/3fb518b7c5881ad6aeb6c6fda87627e9.png HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ff-rewards-redeem-codes-org.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	655	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 22:30:24 GMT Content-Type: image/png Content-Length: 3010 Connection: close Last-Modified: Tue, 03 Aug 2021 22:44:40 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4137 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RUfpIiHgMtCMWjT3jIdFNivVBV%2FohN9Y1hzgObUd5xa5k3U4WUlg6OwALSkb3LiFQ1BhXcvt%2Fyr6ijx7VX5FTx9MfpcZ0UCkkQXTf1Mb56XHyyPDI5mqjMLyDb%2BSew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ae1fde41e4242ab-EWR alt-svc: h3=":443"; ma=86400
2024-08-04 22:30:24 UTC	714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 54 08 03 00 00 00 2b b5 e0 f3 00 00 02 f7 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb 37 33 00 00 00 eb 39 34 e9 36 32 fe fd fd eb 3b 36 e6 36 31 e9 1c 16 e7 11 0b ec 4a 33 e3 35 2f e8 17 11 e7 0c 06 e6 06 01 fd e9 e8 eb 3f 3a ec 50 35 eb 31 2b 15 11 12 f6 f6 f6 9b 9a 9a ed 43 3f ed 55 3a e9 20 1b ec 40 3c ea 2a 24 ea Data Ascii: PNGIHDRTT+PLTE739462;661J35/?:P51+C?U: @<*$
2024-08-04 22:30:24 UTC	1369	IN	Data Raw: 00 00 fb f3 f3 e7 e6 e7 f7 e1 e1 ea d3 d2 e5 9e 9c cf 97 95 f4 aa 93 cc 8d 8c 6f 6b 6d bd 67 65 f0 63 5f 59 58 58 ba 58 56 e5 54 50 4e 4b 4b e5 49 45 a8 42 40 db 3d 38 a5 37 35 2e 2a 2b d6 1a 14 e9 25 08 db b2 b2 cb 74 72 c0 74 71 ad 4c 4a d6 4d 49 c8 37 33 8e fc 83 f5 00 00 00 2c 74 52 4e 53 00 10 a1 f4 03 f7 c1 19 6c 5d 33 c4 a5 92 7d 26 22 c9 2f e7 d0 ac 64 51 ea ca ef d7 b5 b4 ae 73 1e 08 e0 d8 b3 b2 6b 52 ed ec e9 dd fa f9 90 ab 00 00 08 4e 49 44 41 54 58 c3 a4 96 5b 48 53 71 1c c7 e7 2c cb 34 cd 6e 76 bf 17 51 df 71 b6 79 ce da 8e ee 3c 6c 73 43 1b ba 36 26 0d 71 98 13 67 17 28 15 11 76 31 11 d6 8b a8 89 5a d1 c5 a2 42 e9 6e bd 64 91 92 a0 06 d9 e5 a1 0b 5d e8 46 50 50 04 11 14 45 3d f4 3f 67 dd 3c e7 ac d4 3e 2f 83 f3 f0 e1 77 f9 fe f9 4d f1 4f a6 Data Ascii: okmgec_YXXXVTPNKKIEB@=875.*+%trtqLJMI73,tRNSl]3}&"/dQskRNIDATX[HSq,4nvQqy<lsC6&qg(v1ZBnd]FPPE=?g<>/wMO
2024-08-04 22:30:24 UTC	927	IN	Data Raw: dc 76 dc 07 7b 4b a4 1d 15 c7 2a d1 e0 26 c5 52 77 80 7b 64 3f 44 c9 3b 37 7a a4 f9 ff 2e 06 6c 1d 9b 2d d3 81 c1 0a 31 f5 66 4e d3 1e 60 5a 6c da 0d 2c 10 40 55 d6 7a 20 6f ae 8d 85 be 93 6b a2 4d 22 10 4c 8d 8c c5 d4 cf a0 89 2d 97 6e fa fc e0 fc 19 50 6c 9d 38 11 b8 16 14 06 3a a1 d0 32 d1 5b c7 ba df d4 dd c6 c8 0f 04 8c a7 46 9a 5f c2 d2 52 61 50 d2 c1 0a 9e 7d bc 73 ee 6c de c6 8d cd cd cd eb f2 f3 df 15 c1 25 76 af b7 8c 80 82 55 e6 ef 76 83 0b 7e 8c 88 c2 dd d0 9d 35 cb 3a da 1a 08 a2 a3 83 b7 7b c3 04 bd e6 46 7b 15 79 79 82 80 57 11 2c 86 30 92 14 f6 16 b9 e7 c5 ad 5b 36 3d d9 ba f5 62 57 57 d7 f6 a7 07 76 23 32 e2 a5 03 3b b7 2f 58 70 69 76 a8 4f a9 b7 77 f1 ec c7 d8 da ea e0 6c 8a 09 0a 3f 3f 98 de d6 d6 76 fe dc d9 b3 79 79 79 99 b3 91 2a 85 Data Ascii: v{K&Rw{d?D;7z.l-1fN`Zl,@Uz okM"L-nPl8:2[F_RaP}sl%vUv~5:{F{yyW,0[6=bWWv#2;/XpivOwl??vyyy

Timestamp	Bytes transferred	Direction	Data
2024-08-04 22:30:24 UTC	528	OUT	OPTIONS /report/v4?s=Ct5%2FWwUB0qNHj9kw9lq8LablugZrx7H17fI2MZCOKtNoO6gyPi7frcyHvJGAfx7BWndpK7f0kVXpg3lUWcsMQzITvdRCjQw%2B4O4PNNiamwLY1VBcFXJZoYqjIEAoSw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://raviral.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-04 22:30:24 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sun, 04 Aug 2024 22:30:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close