Edit tour

Windows Analysis Report
http://beautiful-croquembouche-9e3d8d.netlify.app/

Overview

General Information

Sample URL:	http://beautiful-croquembouche-9e3d8d.netlify.app/
Analysis ID:	1520837
Infos:

Detection

HTMLPhisher

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Suricata IDS alerts for network traffic

Yara detected HtmlPhish10

Yara detected HtmlPhish44

Yara detected HtmlPhish64

HTML page contains obfuscated javascript

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2352,i,7081301816465017564,10651813306848709613,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://beautiful-croquembouche-9e3d8d.netlify.app/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_119	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
41.35.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
41.35.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
24.16.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
24.16.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.20.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.20.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.25.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.25.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
41.28.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
41.28.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.7.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.34.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.10.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.10.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.34.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 13 entries

Suricata Signatures

ETPRO PHISHING Successful Generic UIV Phish 2017-12-27

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-28T00:29:42.776312+0200	2829083	1	Successful Credential Theft Detected	192.168.2.4	49922	188.114.96.3	443	TCP

HTTP traffic detected: POST /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveContent-Length: 439sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://cdn-tc.33across.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 2Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:21 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSMPCFRK7AJBC3CHX5FBX7Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 2Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:21 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSMPCHF1RZC8X2ZRBCKCH8Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 2Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:21 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSMPCKHD4K8W5G66CJNWFWConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:22 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSMQN58EYMFW8272F4TTS2Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:29 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSMYSEQ7RSQ1DTKQS9R4Q3Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:38 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSN7BJHDFW605V80F60GSMConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:39 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSN84FSR6VY7M8MBQNGWS0Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:39 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSN84K99SSDH0HVQWM0WHPConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 18Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; hitContent-Length: 3082Content-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:40 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSN95Z7FJ89KWF84NJZB5HConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:46 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNFJWD5WH0FNVQCZK4ZMSConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:46 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNFK21HW57RESNXJVQ26YConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:46 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNFK05G1APG9K1R1KBNV0Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 1Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:48 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNGSJT6CEY08V8XTW3CF8Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:29:59 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNW54Q2XXXPJ8G89XVNCJConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 14Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; hitContent-Length: 3082Content-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:30:00 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNWVA6WC32X0GQNFWEEBQConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 21Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; hitContent-Length: 3082Content-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:30:00 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNWVFPE4M6MZ9AET6QZZWConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Fri, 27 Sep 2024 22:30:01 GMTEtag: 1727403626-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8TSNYAWGDVQK2MVW3SJY0C0Connection: closeTransfer-Encoding: chunked

Source: chromecache_147.2.dr, chromecache_127.2.dr, chromecache_115.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_182.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_144.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_110.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_196.2.dr, chromecache_165.2.dr, chromecache_221.2.dr, chromecache_184.2.dr	String found in binary or memory: https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125
Source: chromecache_182.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:c7e15352bf28d3c2ca85e22a990a66ff
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://cdn.tynt.com/afwu.js
Source: chromecache_182.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YzdlMTUzNTJiZjI4ZDNjMmNhODVlMjJhO
Source: chromecache_182.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzdlMTUzNTJiZjI4ZDNjMmNhODVlMjJhOT
Source: chromecache_182.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/c7e15352bf28d3c2ca85e22a990a66ff/ur
Source: chromecache_182.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_196.2.dr, chromecache_165.2.dr, chromecache_221.2.dr, chromecache_184.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_182.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=c7e15352bf28d3c2ca85e22a990a66ff
Source: chromecache_182.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=c7e15352bf28d3c2ca85e22a990a66ff
Source: chromecache_182.2.dr	String found in binary or memory: https://id5-sync.com/s/19/9.gif?puid=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0
Source: chromecache_182.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap
Source: chromecache_182.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_182.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_182.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_161.2.dr, chromecache_130.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_161.2.dr, chromecache_130.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_182.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_182.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=c7e15352bf28d3c2ca85e2
Source: chromecache_182.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0
Source: chromecache_182.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_182.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=11&uid=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0
Source: chromecache_182.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_182.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_182.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=lotame&cspid=20&cb=$
Source: chromecache_182.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_182.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_147.2.dr, chromecache_166.2.dr, chromecache_212.2.dr, chromecache_210.2.dr, chromecache_137.2.dr, chromecache_127.2.dr, chromecache_115.2.dr, chromecache_168.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_161.2.dr, chromecache_130.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_194.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_147.2.dr, chromecache_127.2.dr, chromecache_115.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_182.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: mal92.phis.win@26/227@305/90

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2352,i,7081301816465017564,10651813306848709613,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://beautiful-croquembouche-9e3d8d.netlify.app/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2352,i,7081301816465017564,10651813306848709613,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://beautiful-croquembouche-9e3d8d.netlify.app/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.74.118	true	false	unknown
cm.mgid.com	104.19.129.76	true	false	unknown
id5-sync.com	162.19.138.118	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
spl.zeotap.com	104.22.51.98	true	false	unknown
beautiful-croquembouche-9e3d8d.netlify.app	52.58.254.253	true	true	unknown
live.rezync.com	13.32.27.113	true	false	unknown
cdn.w55c.net	3.78.19.228	true	false	unknown
crb.kargo.com	3.120.69.45	true	false	unknown
httplogserver-lb.global.unified-prod.sharethis.net	52.58.69.239	true	false	unknown
mwzeom.zeotap.com	104.22.50.98	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
sync.crwdcntrl.net	52.210.163.17	true	false	unknown
api.intentiq.com	13.32.121.27	true	false	unknown
rtb-csync-euw1.smartadserver.com	89.149.193.121	true	false	unknown
s4.histats.com	54.39.128.117	true	false	unknown
cm.g.doubleclick.net	142.250.186.98	true	false	unknown
idaas-ext.cph.liveintent.com	54.242.241.108	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
sync.intentiq.com	3.160.150.105	true	false	unknown
idaas6.cph.liveintent.com	34.198.34.14	true	false	unknown
bcp.crwdcntrl.net	54.171.123.149	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
match.prod.bidr.io	52.19.152.80	true	false	unknown
t.dtscout.com	141.101.120.10	true	false	unknown
pixel.onaudience.com	54.38.113.2	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.18.97.170	true	false	unknown
ssum-sec.casalemedia.com	104.18.36.155	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
a.dtssrv.com	172.67.163.146	true	false	unknown
pixel-origin.mathtag.com	74.121.140.211	true	false	unknown
de.tynt.com	67.202.105.34	true	false	unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ps.eyeota.net	3.120.214.218	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
dmp.truoptik.com	104.17.111.254	true	false	unknown
i.simpli.fi	35.204.89.238	true	false	unknown
rtb.adentifi.com	3.208.227.142	true	false	unknown
sync.srv.stackadapt.com	54.152.149.248	true	false	unknown
thrtle.com	3.224.75.188	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	3.248.166.48	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
rtb-csync-euw2.smartadserver.com	164.132.25.184	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
sync.ipredictive.com	52.5.188.254	true	false	unknown
s.amazon-adsystem.com	98.82.156.207	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.76.227.64	true	false	unknown
raviral.com	188.114.96.3	true	true	unknown
dp2.33across.com	67.202.105.23	true	false	unknown
track2.securedvisit.com	34.202.154.150	true	false	unknown
global.ib-ibi.com	64.58.232.179	true	false	unknown
tags.crwdcntrl.net	65.9.66.122	true	false	unknown
thirdparty-logserver-lb.global.unified-prod.sharethis.net	3.73.6.8	true	false	unknown
t.dtscdn.com	104.26.13.60	true	false	unknown
e.dtscout.com	141.101.120.10	true	false	unknown
ic.tynt.com	67.202.105.32	true	false	unknown
ib.anycast.adnxs.com	185.89.210.46	true	false	unknown
load-euw1.exelator.com	34.254.143.3	true	false	unknown
assets.nflxext.com	45.57.91.1	true	false	unknown
pm.w55c.net	unknown	unknown	false	unknown
idpix.media6degrees.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
token.rubiconproject.com	unknown	unknown	false	unknown
sync.smartadserver.com	unknown	unknown	false	unknown
i6.liadm.com	unknown	unknown	false	unknown
ce.lijit.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
cms.analytics.yahoo.com	unknown	unknown	false	unknown
stags.bluekai.com	unknown	unknown	false	unknown
sync.mathtag.com	unknown	unknown	false	unknown
c.cintnetworks.com	unknown	unknown	false	unknown
i.w55c.net	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
p.rfihub.com	unknown	unknown	false	unknown
sync.sharethis.com	unknown	unknown	false	unknown
t.sharethis.com	unknown	unknown	false	unknown
image6.pubmatic.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
d.agkn.com	unknown	unknown	false	unknown
cdn-tc.33across.com	unknown	unknown	false	unknown
aqfer.lijit.com	unknown	unknown	false	unknown
cdn.tynt.com	unknown	unknown	false	unknown
agent.intentiq.com	unknown	unknown	false	unknown
s10.histats.com	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
rtd-tm.everesttech.net	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
i.liadm.com	unknown	unknown	false	unknown
tags.bluekai.com	unknown	unknown	false	unknown
pxdrop.lijit.com	unknown	unknown	false	unknown
i.imgur.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
pd.sharethis.com	unknown	unknown	false	unknown
loadm.exelator.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	false	unknown
https://de.tynt.com/deb/v2?id=wu!&dn=AFWU&cc=2&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F	false	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1727476205.4186413&iv=dcedb383-3fb1-4f43-b453-e3fd5ca9dde0:1727476191.0285268	false	unknown
https://t.dtscout.com/pv/?_a=v&_h=beautiful-croquembouche-9e3d8d.netlify.app&_ss=2xtxipquss&_pv=3&_ls=24&_cc=us&_pl=d&_b=chrome%40117&_cbid=72w8&_cb=_dtspv.c	false	unknown
https://x.bidswitch.net/syncd?dsp_id=256&user_group=2&user_id=203b536b-b596-42f9-b471-6c648650b830&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D	false	unknown
https://idsync.rlcdn.com/423476.gif?partner_uid=2-YVAKzf9ISmof9-vsk_LEWcrXzmjhsuhohYbjYY_fgE	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm=&google_sc=&google_hm=Y3BZZWMyWXY5OU8rbUY1Wg%3D%3D&google_tc=	false	unknown
https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=ad195b6c-6425-47de-79e2-9eeb07a77e30&reqId=e9e23fb9-1282-4864-43d9-e267fbe86fa3&zcluid=3ade6a5f8c3bd8e0&zdid=1332	false	unknown
https://track2.securedvisit.com/sync/1540_03681?id=JZ2lAQZH0FfAGdP-Rjm6m_2y	false	unknown
https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	false	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333857281914&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Ddcedb383-3fb1-4f43-b453-e3fd5ca9dde0%253A1727476191.0285268%26pid%3D500040%26it%3D1%26iv%3Ddcedb383-3fb1-4f43-b453-e3fd5ca9dde0%253A1727476191.0285268%26_%3D1727476191.0305512	false	unknown
https://loadm.exelator.com/load/?p=204&g=1133&j=0	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=1c781171-6dee-4a6e-9d95-c70f02f331cf%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D1c781171-6dee-4a6e-9d95-c70f02f331cf%252C%25257B%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252520Chrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25255Cu003dBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent=	false	unknown
https://thrtle.com/sync?vxii_pid=5044&vxii_pdid=RO9hsv43VjtJegiqx3XZlggueyE&_t=1727476223	false	unknown
https://ps.eyeota.net/match?bid=9sn4omv&uid=wH4tzWLu1SUjtc5&newuser=1&dc_rc=3&dc_mr=5&dc_orig=51mdg9u&	false	unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=f0959362-4d2f-1ee2-c602-bbced4ed0993&iiqpciddate=1727476184720&tsrnd=87_1727476184727&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=0	false	unknown
https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1727476180459&dn=AFWU&iso=0&pu=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F%23LoginHelp&t=Netflix&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117	false	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=JZ2lAQZH0FfAGdP-Rjm6m_2y&rnd=1727476213016	false	unknown
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h2&@i1&@j1727476177993&@k16775&@l2&@mNetflix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-86472054&@b3:1727476178&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F%23LoginHelp&@w	false	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&j=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F	false	unknown
https://raviral.com/host_style/style/js-track/track.js	true	unknown
https://ce.lijit.com/merge?pid=2&3pid=B742312DC2C945A2881D7046986EDC49	false	unknown
https://ml314.com/csync.ashx?fp=6ed3492db4c2f3766765feeec600ba1bc1891e90ec355b14916eb37822102db5f4cb09cee1a4f8eb&person_id=3647315693928972323&eid=50082	false	unknown
https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=203b536b-b596-42f9-b471-6c648650b830	false	unknown
https://de.tynt.com/deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&pu=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F	false	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=06bc3b45-4c4c-41c0-8aea-801f55e551c9&ttd_puid=1c781171-6dee-4a6e-9d95-c70f02f331cf%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D1c781171-6dee-4a6e-9d95-c70f02f331cf%2C%257B%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2520Chrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%255Cu003dBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D	false	unknown
https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NzMxNTY5MzkyODk3MjMyMxAAGg0Iy-PctwYSBQjoBxAAQgBKAA	false	unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=f0959362-4d2f-1ee2-c602-bbced4ed0993&iiqpciddate=1727476184720&tsrnd=87_1727476184727&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=&ckls=true&ci=L91yHJkAeQ&nc=false&trid=1120033188	false	unknown
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0&_bee_ppp=1	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0	false	unknown
https://x.bidswitch.net/sync?ssp=liveintent&user_id=203b536b-b596-42f9-b471-6c648650b830	false	unknown
https://thrtle.com/sync?vxii_pid=5038&vxii_pdid=y-jCzfX_5E2oSDFa.banVAiuuOaDaxY_tlqBa3lA--~A	false	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=840674475	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1	false	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333857281914&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Ddcedb383-3fb1-4f43-b453-e3fd5ca9dde0%253A1727476191.0285268%26pid%3D500040%26it%3D1%26iv%3Ddcedb383-3fb1-4f43-b453-e3fd5ca9dde0%253A1727476191.0285268%26_%3D1727476216.2456055	false	unknown
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=54B66038-E712-4EAB-8E38-C53CE369D867&gdpr=0	false	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&j=	false	unknown
https://pd.sharethis.com/pd/dtscout	false	unknown
https://ps.eyeota.net/match?bid=51mdg9u&uid=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0	false	unknown
https://sync.sharethis.com/eyeota?uid=2ITbKKsiL9aYqncFQql-4i7HFslLqjJig9w7tQwwgo1M&gdpr=0&gdpr_consent=	false	unknown
https://bcp.crwdcntrl.net/pixels?src=LTJS&s=41%2C92%2C54%2C2%2C136%2C135%2C7%2C33%2C78%2C122%2C121%2C26%2C22%2C67%2C116%2C61%2C154%2C106%2C104%2C8%2C148%2C3%2C49&c=3825&ch=%7B%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false	unknown
https://t.dtscdn.com/widget/?d=104017274761642511AE8CA7DD3CB97E&nid=300&p=2114454483&t=240&s=1280x1024x24&u=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&r=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F	false	unknown
https://sync.srv.stackadapt.com/sync?nid=50&gdpr=&gdpr_consent=&gdpr_pd=&ssp=liveintent	false	unknown
https://assets.nflxext.com/ffe/siteui/vlv3/bd27b60f-02db-41da-8f5c-1558b01b44d0/17a20159-6c8b-4e60-be30-becbc0268684/DZ-en-20180813-popsignuptwoweeks-perspective_alpha_website_large.jpg	false	unknown
https://id5-sync.com/a/19/121/4/6/gif/0/0/0/0/ZHkABGb3McUAAAAIR4WOAw==	false	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1727476177920	false	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	false	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1727476211690.5	false	unknown
https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&dc_rc=1&dc_mr=5&dc_orig=dn2m51u&	false	unknown
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h4&@i1&@j1727476199530&@k13839&@l4&@mNetflix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:41944249&@b3:1727476200&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F%23contactus&@w	false	unknown
https://mwzeom.zeotap.com/mw?google_gid=CAESEJ5Q5pzrDXbTdMcG1MObQvU&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=ad195b6c-6425-47de-79e2-9eeb07a77e30&reqId=e9e23fb9-1282-4864-43d9-e267fbe86fa3&zcluid=3ade6a5f8c3bd8e0&zdid=1332	false	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1727476211690.3	false	unknown
https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1727476177872	false	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?partner=lotame&cspid=20&cb=${ADELPHIC_CACHE_BUSTER}&redirect=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D16622%26tp%3DALDX%26tpid%3D%24{ADELPHIC_CUID}%26gdpr%3D0	false	unknown
https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1727476220364	false	unknown
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false	unknown
https://beautiful-croquembouche-9e3d8d.netlify.app/Netflix_files/jquery.placeholder.label.js.download	true	unknown
https://thrtle.com/sync?vxii_pid=5026&vxii_pdid=f7aa7370-e189-4a55-8eda-7f27b995d06c-66f731d0-5553&vxii_ts=7&_t=1727476218	false	unknown
https://x.bidswitch.net/sync?dsp_id=188&user_id=RO9hsv43VjtJegiqx3XZlggueyE&user_group=1&ssp=liveintent	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm&google_sc&google_hm=Y3BZZWMyWXY5OU8rbUY1Wg%3D%3D	false	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F%23contactus&j=	false	unknown
https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AAEkRU7N7mQAABTbZ-Zlyw&gdpr=0	false	unknown
https://sync.srv.stackadapt.com/sync?nid=throtle	false	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1727476211690.1	false	unknown
https://beautiful-croquembouche-9e3d8d.netlify.app/Netflix_files/jquery.bootstrap.js.download	true	unknown
https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=d2f8ebbc-d2f5-4edf-9de4-e2e500b43e66&vxii_rmax=2	false	unknown
https://ssum-sec.casalemedia.com/ium?sourceid=11&uid=c7e15352bf28d3c2ca85e22a990a66ff&gdpr=0	false	unknown
https://sync.sharethis.com/id5?uid=ID5-1de3qg3wTSgLvoxBaC1o_uMvIW0cMYG6VuFt3rTYOQ&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fid5-sync.com%2Fa%2F19%2F121%2F4%2F6%2Fgif%2F0%2F0%2F0%2F0%2F	false	unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false	unknown
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	false	unknown
https://thrtle.com/sync?vxii_pid=5015&vxii_pdid=06bc3b45-4c4c-41c0-8aea-801f55e551c9	false	unknown
https://um.simpli.fi/lj_match?r=1727476220364	false	unknown
https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	true	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzdlMTUzNTJiZjI4ZDNjMmNhODVlMjJhOTkwYTY2ZmY&gdpr=0	false	unknown
https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0	false	unknown
https://de.tynt.com/deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=&pu=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F	false	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1	false	unknown
https://ps.eyeota.net/match?uid=Zvcx0wAFhp8fiwAF&bid=0rijhbu&dc_rc=2&dc_mr=5&dc_orig=51mdg9u&	false	unknown
https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0	false	unknown
https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825	false	unknown
https://loadm.exelator.com/load/?p=204&g=1133&j=0&xl8blockcheck=1	false	unknown
https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D281%252Ftp%253DANXS%252Ftpid%253D%2524UID%252Fgdpr%253D0%252Frand%3D840674475	false	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F%23LoginHelp&j=	false	unknown
https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=4399447666984669611&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	false	unknown
https://track2.securedvisit.com/sync/1540_03681?id=na	false	unknown
https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0	false	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=JZ2lAQZH0FfAGdP-Rjm6m_2y	false	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1727476204241.3&ref=	false	unknown
https://um.simpli.fi/lj_match?r=1727476198985	false	unknown
https://cm.mgid.com/m?cdsp=737575&gdpr=0&gdpr_consent=	false	unknown
https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1727476187483&dn=AFWU&iso=0&pu=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&r=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&t=Netflix&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	chromecache_161.2.dr, chromecache_130.2.dr	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=YzdlMTUzNTJiZjI4ZDNjMmNhODVlMjJhO	chromecache_182.2.dr	false	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/c7e15352bf28d3c2ca85e22a990a66ff/ur	chromecache_182.2.dr	false	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=c7e15352bf28d3c2ca85e2	chromecache_182.2.dr	false	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%	chromecache_182.2.dr	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=YzdlMTUzNTJiZjI4ZDNjMmNhODVlMjJhOT	chromecache_182.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.78.19.228	cdn.w55c.net	United States	16509	AMAZON-02US	false
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
98.82.156.207	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
54.171.123.149	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
98.82.157.137	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
52.19.152.80	match.prod.bidr.io	United States	16509	AMAZON-02US	false
64.58.232.179	global.ib-ibi.com	United States	13649	ASN-VINSUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
65.9.66.97	unknown	United States	16509	AMAZON-02US	false
52.5.188.254	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
164.132.25.184	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
3.77.0.174	unknown	United States	16509	AMAZON-02US	false
104.17.111.254	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
199.232.192.193	unknown	United States	54113	FASTLYUS	false
34.198.34.14	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
52.18.97.170	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.58.254.253	beautiful-croquembouche-9e3d8d.netlify.app	United States	16509	AMAZON-02US	true
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.39.128.117	s4.histats.com	Canada	16276	OVHFR	false
54.228.75.221	unknown	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
3.248.166.48	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.19.129.76	cm.mgid.com	United States	13335	CLOUDFLARENETUS	false
3.221.128.179	unknown	United States	14618	AMAZON-AESUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
172.67.163.146	a.dtssrv.com	United States	13335	CLOUDFLARENETUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
13.32.121.27	api.intentiq.com	United States	16509	AMAZON-02US	false
104.26.13.60	t.dtscdn.com	United States	13335	CLOUDFLARENETUS	false
185.89.210.46	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
52.208.23.237	unknown	United States	16509	AMAZON-02US	false
18.193.215.227	unknown	United States	16509	AMAZON-02US	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
216.200.232.249	unknown	United States	30419	MEDIAMATH-INCUS	false
3.73.6.8	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
52.45.156.251	unknown	United States	14618	AMAZON-AESUS	false
54.242.241.108	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	raviral.com	European Union	13335	CLOUDFLARENETUS	true
162.19.138.118	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
3.120.69.45	crb.kargo.com	United States	16509	AMAZON-02US	false
3.214.166.227	unknown	United States	14618	AMAZON-AESUS	false
45.57.91.1	assets.nflxext.com	United States	40027	NETFLIX-ASNUS	false
3.76.227.64	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.125.70.222	unknown	United States	16509	AMAZON-02US	false
3.120.162.160	unknown	United States	16509	AMAZON-02US	false
34.202.154.150	track2.securedvisit.com	United States	14618	AMAZON-AESUS	false
18.184.216.10	unknown	United States	16509	AMAZON-02US	false
3.224.75.188	thrtle.com	United States	14618	AMAZON-AESUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
13.32.27.113	live.rezync.com	United States	7018	ATT-INTERNET4US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
3.75.62.37	unknown	United States	16509	AMAZON-02US	false
54.38.113.2	pixel.onaudience.com	France	16276	OVHFR	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
3.120.214.218	ps.eyeota.net	United States	16509	AMAZON-02US	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.210.163.17	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
104.26.12.60	unknown	United States	13335	CLOUDFLARENETUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
37.252.171.85	unknown	European Union	29990	ASN-APPNEXUS	false
141.101.120.11	unknown	European Union	13335	CLOUDFLARENETUS	false
3.208.227.142	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
141.101.120.10	t.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
54.152.149.248	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
67.202.105.23	dp2.33across.com	United States	32748	STEADFASTUS	false
3.160.150.105	sync.intentiq.com	United States	16509	AMAZON-02US	false
52.58.69.239	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
45.57.90.1	unknown	United States	40027	NETFLIX-ASNUS	false
104.22.51.98	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
89.149.193.121	rtb-csync-euw1.smartadserver.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
65.9.66.122	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
67.202.105.33	unknown	United States	32748	STEADFASTUS	false
67.202.105.32	ic.tynt.com	United States	32748	STEADFASTUS	false
142.250.186.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.204.89.238	i.simpli.fi	United States	15169	GOOGLEUS	false
74.121.140.211	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
67.202.105.34	de.tynt.com	United States	32748	STEADFASTUS	false
3.220.96.103	unknown	United States	14618	AMAZON-AESUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
3.160.150.86	unknown	United States	16509	AMAZON-02US	false
34.255.72.255	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520837
Start date and time:	2024-09-28 00:28:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://beautiful-croquembouche-9e3d8d.netlify.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal92.phis.win@26/227@305/90
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp Browse: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.99, 142.250.110.84, 142.250.185.238, 34.104.35.123, 172.66.132.118, 172.66.132.114, 142.250.185.234, 172.217.16.202, 172.217.18.10, 142.250.186.106, 142.250.184.202, 142.250.185.138, 142.250.185.74, 142.250.185.202, 142.250.186.138, 216.58.206.74, 142.250.185.170, 142.250.184.234, 142.250.186.42, 142.250.186.74, 142.250.185.106, 216.58.212.138, 95.101.111.167, 95.101.111.145, 104.18.34.83, 172.64.153.173, 95.101.111.153, 95.101.111.156, 104.18.35.167, 172.64.152.89, 2.23.197.190, 4.245.163.56, 93.184.221.240, 20.3.187.198, 192.229.221.95, 51.144.7.192, 151.101.130.49, 151.101.66.49, 151.101.2.49, 151.101.194.49, 104.18.41.39, 172.64.146.217, 2.19.126.149, 2.19.126.156, 13.107.42.14, 20.242.39.171, 193.0.160.131, 69.173.144.138, 69.173.144.139, 69.173.144.165, 142.250.184.227, 193.0.160.130
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, cdn-tc.33across.com.cdn.cloudflare.net, e213908.b.akamaiedge.net, cdn.tynt.com.cdn.cloudflare.net, wu.azureedge.net, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, a24365-c026.edgekey.net, cert1.a1.atm.aqfer.net.edgekey.net, e167121.b.akamaiedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, a.rfihub.com.akadns.net, update.googleapis.com, agent.intentiq.com.akamaized.net, s10.histats.com.cdn.cloudflare.net, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, collector-main.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, waws-prod-am2-241.westeurope.cloudapp.azure.com, fs.microsoft.com, accounts.g
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://beautiful-croquembouche-9e3d8d.netlify.app/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	LLM: Score: 9 Reasons: The brand 'NETFLIX' is well-known and has a widely recognized domain 'netflix.com'., The provided URL 'beautiful-croquembouche-9e3d8d.netlify.app' does not match the legitimate domain 'netflix.com'., The URL uses a subdomain of 'netlify.app', which is a common platform for hosting static websites and is not associated with Netflix., The URL contains random words and characters, which is a common tactic used in phishing URLs to appear legitimate., The input fields 'Email or phone number' and 'Password' are typical targets for phishing attempts, especially for a well-known brand like Netflix. DOM: 0.0.pages.csv
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	LLM: Score: 9 Reasons: The brand Netflix is well-known and has a single, well-established domain: netflix.com., The provided URL (beautiful-croquembouche-9e3d8d.netlify.app) does not match the legitimate domain name for Netflix., The URL is hosted on Netlify, a popular platform for deploying web applications, which is often used for phishing attempts., The URL contains random words and characters, which is a common tactic used in phishing URLs to avoid detection., The input fields (Email or phone number, Password) are typical targets for phishing attacks aimed at harvesting user credentials. DOM: 0.3.pages.csv

Source: Yara match	File source: 41.35.pages.csv, type: HTML
Source: Yara match	File source: 24.16.pages.csv, type: HTML
Source: Yara match	File source: 0.20.pages.csv, type: HTML
Source: Yara match	File source: 0.25.pages.csv, type: HTML
Source: Yara match	File source: 41.28.pages.csv, type: HTML
Source: Yara match	File source: 0.7.pages.csv, type: HTML
Source: Yara match	File source: 0.10.pages.csv, type: HTML
Source: Yara match	File source: 0.34.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Form action: https://raviral.com/k_fac.php netlify raviral

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017274761642511AE8CA7DD3CB97E
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7254020519603246&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476165220&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017274761642511AE8CA7DD3CB97E
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7254020519603246&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476165220&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.8017355900396841&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476187822&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.8017355900396841&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476187822&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://t.dtscout.com/idg/?su=104017274761642511AE8CA7DD3CB97E
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.7254020519603246&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476165220&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://cdn-tc.33across.com/lotame-sync.html
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Iframe src: //pxdrop.lijit.com/a/t_.htm?ver=1.1550.828&cid=c026&cls=sync#cls=sync&dmn=beautiful-croquembouche-9e3d8d.netlify.app&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=&tt=t.dhj&cid=c026&lbl=lijit&flbl=pxcel&ll=d&ver=1.1550.828&ell=d&cck=ljt_reader&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C#cid=c010&cls=C&rnd=0.006825533949757823&stid=ZHkABGb3McUAAAAIR4WOAw%253D%253D&tt=t.dhj&dhjLcy=1727476208528&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1523.23404&ell=d&cck=__stid&dmn=beautiful-croquembouche-9e3d8d.netlify.app&pn=%2F&qs=na&rdn=beautiful-croquembouche-9e3d8d.netlify.app&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Number of links: 0
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: Number of links: 0
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Number of links: 0

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: Title: Netflix does not match URL
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: Title: Netflix does not match URL
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: Title: Netflix does not match URL

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: <input type="password" .../> found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: <input type="password" .../> found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: <input type="password" .../> found

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No favicon
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No favicon

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No <meta name="author".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No <meta name="author".. found

Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#LoginHelp	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No <meta name="copyright".. found
Source: https://beautiful-croquembouche-9e3d8d.netlify.app/#contactus	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: beautiful-croquembouche-9e3d8d.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: raviral.com
Source: global traffic	DNS traffic detected: DNS query: assets.nflxext.com
Source: global traffic	DNS traffic detected: DNS query: s10.histats.com
Source: global traffic	DNS traffic detected: DNS query: s4.histats.com
Source: global traffic	DNS traffic detected: DNS query: e.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dmp.truoptik.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: dp2.33across.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: cm.mgid.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: sync.mathtag.com

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 28, 2024 00:29:26.580892086 CEST	192.168.2.4	1.1.1.1	c272	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:29:35.951037884 CEST	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:29:38.263111115 CEST	192.168.2.4	1.1.1.1	c301	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:29:39.665545940 CEST	192.168.2.4	1.1.1.1	c280	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:29:41.954722881 CEST	192.168.2.4	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:29:43.829760075 CEST	192.168.2.4	1.1.1.1	c205	(Port unreachable)	Destination Unreachable
Sep 28, 2024 00:30:13.182068110 CEST	192.168.2.4	1.1.1.1	c1fa	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Sep 28, 2024 00:29:17.117408037 CEST	457	OUT	GET / HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 28, 2024 00:29:17.756278992 CEST	323	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Fri, 27 Sep 2024 22:29:17 GMT Location: https://beautiful-croquembouche-9e3d8d.netlify.app/ Server: Netlify X-Nf-Request-Id: 01J8TSMK6X0V1TCFC75AQA7VWH Content-Length: 66 Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 62 65 61 75 74 69 66 75 6c 2d 63 72 6f 71 75 65 6d 62 6f 75 63 68 65 2d 39 65 33 64 38 64 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f Data Ascii: Redirecting to https://beautiful-croquembouche-9e3d8d.netlify.app/

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:18 UTC	685	OUT	GET / HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:18 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 34888 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 751789 Content-Type: text/html; charset=UTF-8 Date: Fri, 27 Sep 2024 22:29:18 GMT Etag: "9eaaefea26944b160af074d18f74237c-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8TSMM5G2CCQ06ZTQG8B7WYJ Connection: close
2024-09-27 22:29:18 UTC	748	IN	Data Raw: 20 20 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 20 0a 0a 76 61 72 20 65 6e 6b 72 69 70 73 69 3d 22 27 32 43 27 32 43 27 31 41 27 30 33 46 4d 41 56 5b 52 47 27 30 32 6a 76 6f 6e 27 31 47 27 32 43 27 31 41 6a 76 6f 6e 27 31 47 27 31 41 6a 67 63 66 27 31 47 27 31 41 6f 67 76 63 27 30 32 6a 76 76 72 2f 67 73 77 6b 74 27 31 46 27 30 30 41 6d 6c 76 67 6c 76 2f 56 7b 72 67 27 30 30 27 30 32 61 6d 6c 76 67 6c 76 27 31 46 27 30 30 76 67 7a 76 2d 6a 76 6f 6e 27 31 40 27 30 32 61 6a 63 70 71 67 76 27 31 46 57 56 44 2f 3a 27 30 30 27 31 47 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 30 32 27 32 43 27 30 32 27 30 32 27 30 32 27 30 32 27 30 Data Ascii: <script language="javascript"> var enkripsi="'2C'2C'1A'03FMAV[RG'02jvon'1G'2C'1Ajvon'1G'1Ajgcf'1G'1Aogvc'02jvvr/gswkt'1F'00Amlvglv/V{rg'00'02amlvglv'1F'00vgzv-jvon'1@'02ajcpqgv'1FWVD/:'00'1G'2C'02'02'02'02'02'02'2C'02'02'02'02'02'02'2C'02'02'02'02'0
2024-09-27 22:29:18 UTC	2372	IN	Data Raw: 30 27 30 37 34 44 27 30 37 34 36 27 30 37 35 3b 27 30 37 30 41 27 30 37 34 3a 27 30 37 35 36 27 30 37 34 46 27 30 37 34 41 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 34 27 30 37 34 44 27 30 37 34 47 27 30 37 35 36 27 30 37 30 46 27 30 37 34 34 27 30 37 34 33 27 30 37 34 46 27 30 37 34 3b 27 30 37 34 41 27 30 37 35 3b 27 30 37 31 43 27 30 37 30 35 27 30 37 36 3a 27 30 37 34 37 27 30 37 34 41 27 30 37 35 34 27 30 37 34 37 27 30 37 35 36 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 33 27 30 37 30 32 27 30 37 36 47 27 30 37 34 37 27 30 37 35 37 27 30 37 34 37 27 30 37 30 35 27 30 37 30 41 27 30 37 36 3a 27 30 37 34 37 27 30 37 34 41 27 30 37 35 34 27 30 37 34 37 27 30 37 35 36 27 30 37 34 3b 27 30 37 34 Data Ascii: 0'074D'0746'075;'070A'074:'0756'074F'074A'075@'072C'0702'0702'0702'0702'0744'074D'074G'0756'070F'0744'0743'074F'074;'074A'075;'071C'0705'076:'0747'074A'0754'0747'0756'074;'0741'0743'0702'076G'0747'0757'0747'0705'070A'076:'0747'074A'0754'0747'0756'074;'074
2024-09-27 22:29:18 UTC	538	IN	Data Raw: 30 37 34 41 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 35 32 27 30 37 34 44 27 30 37 35 31 27 30 37 34 3b 27 30 37 35 36 27 30 37 34 3b 27 30 37 34 44 27 30 37 34 47 27 30 37 31 43 27 30 37 34 33 27 30 37 34 30 27 30 37 35 31 27 30 37 34 44 27 30 37 34 41 27 30 37 35 37 27 30 37 35 36 27 30 37 34 37 27 30 37 31 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 35 36 27 30 37 34 44 27 30 37 35 32 27 30 37 31 43 27 30 37 31 31 27 30 37 35 32 27 30 37 35 3a 27 30 37 31 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 35 30 27 30 37 34 3b 27 30 37 34 35 27 30 37 34 3a 27 30 37 35 36 27 30 37 31 43 27 30 37 31 32 27 30 37 31 40 27 Data Ascii: 074A'075@'072C'0702'0702'0702'0702'0752'074D'0751'074;'0756'074;'074D'074G'071C'0743'0740'0751'074D'074A'0757'0756'0747'071@'072C'0702'0702'0702'0702'0756'074D'0752'071C'0711'0752'075:'071@'072C'0702'0702'0702'0702'0750'074;'0745'074:'0756'071C'0712'071@'
2024-09-27 22:29:18 UTC	4744	IN	Data Raw: 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 46 27 30 37 34 33 27 30 37 35 30 27 30 37 34 35 27 30 37 34 3b 27 30 37 34 47 27 30 37 31 43 27 30 37 30 47 27 30 37 31 35 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 30 32 27 30 37 31 32 27 30 37 30 32 27 30 37 30 47 27 30 37 31 30 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 30 47 27 30 37 34 30 27 30 37 34 44 27 30 37 34 41 27 30 37 34 36 27 30 37 30 41 27 30 37 35 31 27 30 37 35 36 27 30 37 35 30 27 30 37 34 44 27 30 37 34 47 27 30 37 34 35 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 34 27 30 37 34 44 27 30 37 34 47 27 30 37 35 36 27 30 37 30 46 27 30 37 35 Data Ascii: C'0702'0702'0702'0702'074F'0743'0750'0745'074;'074G'071C'070G'0715'0717'0747'074F'0702'0712'0702'070G'0710'0717'0747'074F'072C'075F'072C'070G'0740'074D'074A'0746'070A'0751'0756'0750'074D'074G'0745'075@'072C'0702'0702'0702'0702'0744'074D'074G'0756'070F'075
2024-09-27 22:29:18 UTC	5930	IN	Data Raw: 34 31 27 30 37 35 37 27 30 37 35 30 27 30 37 35 31 27 30 37 34 44 27 30 37 35 30 27 30 37 31 43 27 30 37 35 32 27 30 37 34 44 27 30 37 34 3b 27 30 37 34 47 27 30 37 35 36 27 30 37 34 37 27 30 37 35 30 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 30 47 27 30 37 34 3a 27 30 37 34 3b 27 30 37 34 36 27 30 37 34 36 27 30 37 34 37 27 30 37 34 47 27 30 37 30 46 27 30 37 34 31 27 30 37 34 3a 27 30 37 34 37 27 30 37 34 31 27 30 37 34 40 27 30 37 34 30 27 30 37 34 44 27 30 37 35 3a 27 30 37 30 41 27 30 37 30 47 27 30 37 34 3a 27 30 37 34 3b 27 30 37 34 36 27 30 37 34 36 27 30 37 34 37 27 30 37 34 47 27 30 37 30 46 27 30 37 35 30 27 30 37 34 33 27 30 37 34 36 27 30 37 34 3b 27 30 37 34 44 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 Data Ascii: 41'0757'0750'0751'074D'0750'071C'0752'074D'074;'074G'0756'0747'0750'072C'075F'072C'070G'074:'074;'0746'0746'0747'074G'070F'0741'074:'0747'0741'074@'0740'074D'075:'070A'070G'074:'074;'0746'0746'0747'074G'070F'0750'0743'0746'074;'074D'075@'072C'0702'0702'07
2024-09-27 22:29:18 UTC	7116	IN	Data Raw: 35 46 27 30 37 32 43 27 30 37 35 31 27 30 37 35 37 27 30 37 35 32 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 35 36 27 30 37 34 44 27 30 37 35 32 27 30 37 31 43 27 30 37 30 46 27 30 37 30 47 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 35 31 27 30 37 35 37 27 30 37 34 30 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 30 27 30 37 34 44 27 30 37 35 36 27 30 37 35 36 27 30 37 34 44 27 30 37 34 46 27 30 37 31 43 27 30 37 30 46 27 30 37 30 47 27 30 37 31 30 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 34 3b 27 30 37 34 46 27 30 37 34 35 27 30 37 Data Ascii: 5F'072C'0751'0757'0752'075@'072C'0702'0702'0702'0702'0756'074D'0752'071C'070F'070G'0717'0747'074F'072C'075F'072C'0751'0757'0740'075@'072C'0702'0702'0702'0702'0740'074D'0756'0756'074D'074F'071C'070F'070G'0710'0717'0747'074F'072C'075F'072C'074;'074F'0745'07
2024-09-27 22:29:18 UTC	8302	IN	Data Raw: 47 27 30 37 31 34 27 30 37 31 30 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 30 32 27 30 37 30 47 27 30 37 31 35 27 30 37 31 37 27 30 37 34 37 27 30 37 34 46 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 34 41 27 30 37 34 37 27 30 37 34 35 27 30 37 34 37 27 30 37 34 47 27 30 37 34 36 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 30 27 30 37 34 44 27 30 37 35 30 27 30 37 34 36 27 30 37 34 37 27 30 37 35 30 27 30 37 31 43 27 30 37 31 32 27 30 37 31 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 35 32 27 30 37 34 33 27 30 37 34 36 27 30 37 34 36 27 30 37 34 3b 27 30 37 34 47 27 30 37 34 35 27 30 37 31 43 27 30 37 31 32 27 30 37 32 43 27 30 37 35 Data Ascii: G'0714'0710'0717'0747'074F'0702'070G'0715'0717'0747'074F'072C'075F'072C'074A'0747'0745'0747'074G'0746'075@'072C'0702'0702'0702'0702'0740'074D'0750'0746'0747'0750'071C'0712'071@'072C'0702'0702'0702'0702'0752'0743'0746'0746'074;'074G'0745'071C'0712'072C'075
2024-09-27 22:29:18 UTC	6106	IN	Data Raw: 30 37 30 47 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 30 46 27 30 37 37 36 27 30 37 34 33 27 30 37 34 41 27 30 37 34 37 27 30 37 34 47 27 30 37 35 36 27 30 37 31 43 27 30 37 34 30 27 30 37 34 37 27 30 37 34 34 27 30 37 34 44 27 30 37 35 30 27 30 37 34 37 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 35 36 27 30 37 34 37 27 30 37 34 47 27 30 37 35 36 27 30 37 31 43 27 30 37 30 35 27 30 37 37 41 27 30 37 34 37 27 30 37 31 35 27 30 37 31 31 27 30 37 31 36 27 30 37 30 35 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 30 47 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 30 46 27 30 37 36 33 27 30 37 35 35 27 Data Ascii: 070G'074;'0741'074D'074G'070F'0776'0743'074A'0747'074G'0756'071C'0740'0747'0744'074D'0750'0747'075@'072C'0702'0702'0702'0702'0741'074D'074G'0756'0747'074G'0756'071C'0705'077A'0747'0715'0711'0716'0705'072C'075F'072C'070G'074;'0741'074D'074G'070F'0763'0755'
2024-09-27 22:29:18 UTC	10674	IN	Data Raw: 37 35 36 27 30 37 31 43 27 30 37 30 35 27 30 37 37 41 27 30 37 34 34 27 30 37 31 32 27 30 37 31 32 27 30 37 31 30 27 30 37 30 35 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 30 47 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 30 46 27 30 37 34 47 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 33 27 30 37 34 46 27 30 37 30 46 27 30 37 31 33 27 30 37 31 34 27 30 37 31 43 27 30 37 34 30 27 30 37 34 37 27 30 37 34 34 27 30 37 34 44 27 30 37 35 30 27 30 37 34 37 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 35 36 27 30 37 34 37 27 30 37 34 47 27 30 37 35 36 27 30 37 31 43 27 30 37 30 35 27 30 37 37 41 27 30 37 34 34 27 30 37 31 32 27 30 Data Ascii: 756'071C'0705'077A'0744'0712'0712'0710'0705'072C'075F'072C'070G'074;'0741'074D'074G'070F'074G'074;'0741'0743'074F'070F'0713'0714'071C'0740'0747'0744'074D'0750'0747'075@'072C'0702'0702'0702'0702'0741'074D'074G'0756'0747'074G'0756'071C'0705'077A'0744'0712'0
2024-09-27 22:29:18 UTC	11860	IN	Data Raw: 30 37 34 37 27 30 37 34 34 27 30 37 34 44 27 30 37 35 30 27 30 37 34 37 27 30 37 35 40 27 30 37 32 43 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 30 32 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 35 36 27 30 37 34 37 27 30 37 34 47 27 30 37 35 36 27 30 37 31 43 27 30 37 30 35 27 30 37 37 41 27 30 37 34 37 27 30 37 31 34 27 30 37 31 35 27 30 37 31 31 27 30 37 30 35 27 30 37 32 43 27 30 37 35 46 27 30 37 32 43 27 30 37 30 47 27 30 37 34 3b 27 30 37 34 31 27 30 37 34 44 27 30 37 34 47 27 30 37 30 46 27 30 37 34 41 27 30 37 34 44 27 30 37 34 47 27 30 37 34 35 27 30 37 30 46 27 30 37 34 33 27 30 37 35 30 27 30 37 35 30 27 30 37 34 44 27 30 37 35 35 27 30 37 30 46 27 30 37 35 30 27 30 37 34 3b 27 30 37 34 35 27 30 37 34 3a 27 30 37 35 36 27 Data Ascii: 0747'0744'074D'0750'0747'075@'072C'0702'0702'0702'0702'0741'074D'074G'0756'0747'074G'0756'071C'0705'077A'0747'0714'0715'0711'0705'072C'075F'072C'070G'074;'0741'074D'074G'070F'074A'074D'074G'0745'070F'0743'0750'0750'074D'0755'070F'0750'074;'0745'074:'0756'

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:20 UTC	605	OUT	GET /Netflix_files/jquery.min.js.download HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:21 UTC	404	IN	HTTP/1.1 404 Not Found Age: 2 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Type: text/html; charset=utf-8 Date: Fri, 27 Sep 2024 22:29:21 GMT Etag: 1727403626-ssl Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8TSMPCFRK7AJBC3CHX5FBX7 Connection: close Transfer-Encoding: chunked
2024-09-27 22:29:21 UTC	2372	IN	Data Raw: 63 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: c0a<!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com
2024-09-27 22:29:21 UTC	717	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 3c 70 3e 49 66 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 73 69 74 65 2c 20 61 6e 64 20 79 6f 75 20 77 65 72 65 6e 27 74 20 65 78 70 65 63 74 69 6e 67 20 61 20 34 30 34 20 66 6f 72 20 74 68 69 73 20 70 61 74 68 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 20 4e 65 74 6c 69 66 79 27 73 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 73 77 65 72 73 2e 6e 65 74 6c 69 66 79 2e 63 6f 6d 2f 74 2f 73 75 70 70 6f 72 74 2d 67 75 69 64 65 2d 69 2d 76 65 2d 64 65 70 6c 6f 79 65 64 2d 6d 79 2d 73 69 74 65 2d 62 75 74 2d 69 2d 73 74 69 6c 6c 2d 73 65 65 2d 70 61 67 65 2d 6e 6f 74 2d 66 6f 75 6e 64 2f 31 32 35 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 34 30 34 70 61 67 65 26 Data Ascii: > </p> <hr><p>If this is your site, and you weren't expecting a 404 for this path, please visit Netlify's <a href="https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125?utm_source=404page&
2024-09-27 22:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:20 UTC	619	OUT	GET /Netflix_files/jquery.placeholder.label.js.download HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:21 UTC	404	IN	HTTP/1.1 404 Not Found Age: 2 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Type: text/html; charset=utf-8 Date: Fri, 27 Sep 2024 22:29:21 GMT Etag: 1727403626-ssl Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8TSMPCHF1RZC8X2ZRBCKCH8 Connection: close Transfer-Encoding: chunked
2024-09-27 22:29:21 UTC	2372	IN	Data Raw: 63 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: c0a<!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com
2024-09-27 22:29:21 UTC	717	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 3c 70 3e 49 66 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 73 69 74 65 2c 20 61 6e 64 20 79 6f 75 20 77 65 72 65 6e 27 74 20 65 78 70 65 63 74 69 6e 67 20 61 20 34 30 34 20 66 6f 72 20 74 68 69 73 20 70 61 74 68 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 20 4e 65 74 6c 69 66 79 27 73 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 73 77 65 72 73 2e 6e 65 74 6c 69 66 79 2e 63 6f 6d 2f 74 2f 73 75 70 70 6f 72 74 2d 67 75 69 64 65 2d 69 2d 76 65 2d 64 65 70 6c 6f 79 65 64 2d 6d 79 2d 73 69 74 65 2d 62 75 74 2d 69 2d 73 74 69 6c 6c 2d 73 65 65 2d 70 61 67 65 2d 6e 6f 74 2d 66 6f 75 6e 64 2f 31 32 35 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 34 30 34 70 61 67 65 26 Data Ascii: > </p> <hr><p>If this is your site, and you weren't expecting a 404 for this path, please visit Netlify's <a href="https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125?utm_source=404page&
2024-09-27 22:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:20 UTC	611	OUT	GET /Netflix_files/jquery.bootstrap.js.download HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:21 UTC	404	IN	HTTP/1.1 404 Not Found Age: 2 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Type: text/html; charset=utf-8 Date: Fri, 27 Sep 2024 22:29:21 GMT Etag: 1727403626-ssl Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8TSMPCKHD4K8W5G66CJNWFW Connection: close Transfer-Encoding: chunked
2024-09-27 22:29:21 UTC	2372	IN	Data Raw: 63 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: c0a<!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com
2024-09-27 22:29:21 UTC	717	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 3c 70 3e 49 66 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 73 69 74 65 2c 20 61 6e 64 20 79 6f 75 20 77 65 72 65 6e 27 74 20 65 78 70 65 63 74 69 6e 67 20 61 20 34 30 34 20 66 6f 72 20 74 68 69 73 20 70 61 74 68 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 20 4e 65 74 6c 69 66 79 27 73 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 73 77 65 72 73 2e 6e 65 74 6c 69 66 79 2e 63 6f 6d 2f 74 2f 73 75 70 70 6f 72 74 2d 67 75 69 64 65 2d 69 2d 76 65 2d 64 65 70 6c 6f 79 65 64 2d 6d 79 2d 73 69 74 65 2d 62 75 74 2d 69 2d 73 74 69 6c 6c 2d 73 65 65 2d 70 61 67 65 2d 6e 6f 74 2d 66 6f 75 6e 64 2f 31 32 35 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 34 30 34 70 61 67 65 26 Data Ascii: > </p> <hr><p>If this is your site, and you weren't expecting a 404 for this path, please visit Netlify's <a href="https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125?utm_source=404page&
2024-09-27 22:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:20 UTC	608	OUT	GET /OabVP5H.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:20 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534 Content-Type: image/png Last-Modified: Thu, 29 Oct 2020 16:18:59 GMT ETag: "8ec02206fa20e35b7be7d5d04151a3c8" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: HPLlW_GLqd0Kdliljm2fax62a7oZlAltC4V4y1WmbYhhAmP1-4TMXw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1509838 Date: Fri, 27 Sep 2024 22:29:20 GMT X-Served-By: cache-iad-kjyo7100175-IAD, cache-ewr-kewr1740063-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 41, 0 X-Timer: S1727476161.873033,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-27 22:29:20 UTC	534	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 39 08 06 00 00 00 8c 18 83 85 00 00 01 dd 49 44 41 54 78 da 62 b4 0e 9f cb cc c0 c0 50 0c c4 e9 40 ac c4 30 7c c0 0b 20 9e 00 c4 3d 2c 40 a2 0e 8a 87 1b 90 00 e2 0e 20 e6 66 02 12 69 0c c3 1b a4 32 41 7d 3c 9c 81 04 13 c3 08 00 a3 9e 1c f5 e4 a8 27 07 17 60 19 74 0e 62 66 62 30 d6 95 62 30 d3 95 66 d0 d7 14 67 90 10 e1 65 e0 e7 65 67 f8 f5 fb 0f 10 ff 65 f8 fc f5 17 c3 cf 5f 7f 19 de 7e f8 ce f0 f2 cd 57 86 f6 19 87 86 8e 27 19 19 19 18 7c 9d 34 18 12 82 0d 18 c4 84 b8 30 e4 d9 d9 58 c0 98 97 9b 1d cc 57 94 11 00 d3 43 c6 93 20 87 d7 e6 d8 33 58 19 ca 0c cf e4 2a c0 c7 c1 30 bd d1 87 41 56 92 6f 78 16 3c 4c 4c 8c 0c ad 45 ce 34 f5 e0 80 7b 32 c0 55 93 41 5f 43 7c f8 56 21 ac 2c 4c 0c f1 Data Ascii: PNGIHDR99IDATxbP@0\| =,@ fi2A}<'`tbfb0b0fgeege_~W'\|40XWC 3X*0AVox<LLE4{2UA_C\|V!,L

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:29:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=238541 Date: Fri, 27 Sep 2024 22:29:21 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://beautiful-croquembouche-9e3d8d.netlify.app/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
http://beautiful-croquembouche-9e3d8d.netlify.app/

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:21 UTC	659	OUT	GET /host_style/style/js-track/track.js HTTP/1.1 Host: raviral.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:21 UTC	682	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:29:21 GMT Content-Type: application/javascript Content-Length: 398 Connection: close Cf-Bgj: minify Cf-Polished: origSize=426 Last-Modified: Sun, 25 Sep 2022 10:15:16 GMT Cache-Control: max-age=1800 CF-Cache-Status: HIT Age: 4699 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1X0i7YyJGAjytLaO7LpkjYDkYan3zoEKnDNCagE1eiE3jzpZ1vW%2BI6WMQQyGOXowInZyynxxFrC3r52ID7JU5c9acOGYzp2qzukV3RQhEGzcW%2Fyl%2FRc8EmSKv3%2BuZQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9eee9888277c94-EWR
2024-09-27 22:29:21 UTC	398	IN	Data Raw: 76 61 72 20 5f 48 61 73 79 6e 63 3d 5f 48 61 73 79 6e 63 7c 7c 5b 5d 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 73 74 61 72 74 27 2c 27 31 2c 34 35 38 33 32 37 32 2c 34 2c 30 2c 30 2c 30 2c 30 30 30 31 30 30 30 30 27 5d 29 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 66 61 73 69 27 2c 27 31 27 5d 29 3b 5f 48 61 73 79 6e 63 2e 70 75 73 68 28 5b 27 48 69 73 74 61 74 73 2e 74 72 61 63 6b 5f 68 69 74 73 27 2c 27 27 5d 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 68 73 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 68 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 68 73 2e Data Ascii: var _Hasync=_Hasync\|\|[];_Hasync.push(['Histats.start','1,4583272,4,0,0,0,00010000']);_Hasync.push(['Histats.fasi','1']);_Hasync.push(['Histats.track_hits','']);(function(){var hs=document.createElement('script');hs.type='text/javascript';hs.async=true;hs.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:21 UTC	762	OUT	GET /ffe/siteui/vlv3/bd27b60f-02db-41da-8f5c-1558b01b44d0/17a20159-6c8b-4e60-be30-becbc0268684/DZ-en-20180813-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:22 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 22:29:22 GMT Content-Type: image/jpeg Content-Length: 331371 Connection: close Content-MD5: 2tH+31+XnaTUzAmvlEG28Q== Last-Modified: Wed, 15 Aug 2018 13:28:26 GMT Cache-Control: max-age=604801 Expires: Fri, 04 Oct 2024 22:29:23 GMT Accept-Ranges: bytes
2024-09-27 22:29:22 UTC	16066	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 04 65 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 01 07 08 ff da 00 08 01 01 00 00 00 00 f3 41 52 9e cd c3 1c 4e bd d6 d3 2f 9a d6 ea a7 d1 ac e9 8a a2 29 4d 86 33 e9 c0 b3 3d 31 73 9a 19 63 1a 27 cb 2a a4 56 d4 2a Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwe"ARN/)M3=1sc'V
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 6d 26 86 be 69 24 99 19 08 b4 b2 60 ad 93 f7 9f 2d 67 a7 e1 f6 bc 1d a9 8f 31 9a b7 86 83 76 27 24 dd 57 a1 ce 95 69 9e 86 f8 ab d9 2e a7 43 47 ce b9 ba be 4b 46 20 94 a6 ab 43 c6 03 63 59 5f c4 3e 8f 88 6d db 17 4e bd 70 26 4b 27 93 05 c5 2b ef ea fd 3c 87 62 17 e7 18 e2 3b bb 15 c4 64 85 32 52 8c 13 62 dc d2 15 26 70 99 0b fe 7e 1b 7e 66 37 8d aa 16 01 f4 b0 fb b5 46 8c 6a 4f 69 f2 8f 50 cd e5 af e5 be 97 f9 c6 bf ac 63 3d 0f 29 ea 58 81 58 0e 32 dd 63 7a fc 8c 7e ab e7 99 46 2e cb 34 de 8b e8 75 fc cf 31 df 4c 1d 86 06 4b d6 74 80 f1 65 ab c3 5b ce c3 fa 69 e9 c0 79 9b 6e 19 8a 26 bc 81 67 d7 03 39 52 16 af 45 ba 65 2a 75 7c ab 39 a2 8b 8e eb 9c bb ce b2 3e 73 8d 6b 63 83 d0 de 1c 52 49 14 ba 32 c1 71 78 d3 9b 1f 4d 84 68 fd 3b 71 bb 55 16 53 4e 57 c8 Data Ascii: m&i$`-g1v'$Wi.CGKF CcY_>mNp&K'+<b;d2Rb&p~~f7FjOiPc=)XX2cz~F.4u1LKte[iyn&g9REe*u\|9>skcRI2qxMh;qUSNW
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: b6 a7 97 e9 f3 25 eb b5 d8 78 a7 87 da b6 26 d6 88 ba 37 d9 5d 2a 95 d2 01 6d 93 94 c3 6e 99 cb 7f 53 1f 3b 7e fe 2e bd 18 2d b7 5d db 89 29 9c d7 66 df 5f 3a 5a ca ea a6 a4 26 2a 8b 80 00 00 00 00 0a ab b7 35 42 73 ba 73 51 6b 23 e6 4f 45 8f 8b 96 fe dd 71 13 d1 95 a2 9d 2b af a3 8b a1 e7 b6 dd a9 f1 e8 cf 9e b4 00 08 5a a8 df d3 e9 66 e3 f7 38 ba 73 35 5a 2a c7 7e ec da ed b5 ec 79 95 23 37 27 77 12 fb df 4d c9 55 35 55 12 00 00 00 00 00 00 2a b5 9c a8 d1 40 06 7f 49 67 9d 9e 37 7a dc 2b 1d 6b ed ad 2d 84 d3 9a 1f 0f 51 97 3e cd bc f4 a0 00 1e 92 b7 63 d0 3f 1b a3 6d d8 75 52 60 c3 76 ec fa 68 b6 ab 96 fb ad 66 c7 86 cc b6 42 5a 94 f5 c2 2a aa 9a 60 00 00 00 00 00 00 bb 8d ad b3 51 6a 4d 9d be 77 93 d7 dc 6a 79 70 de 87 35 fa 12 ad 32 a8 57 56 98 a2 3d Data Ascii: %x&7]mnS;~.-])f_:Z&5BssQk#OEq+Zf8s5Z~y#7'wMU5U@Ig7z+k-Q>c?muR`vhfBZ*`QjMwjyp52WV=
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: b9 63 5c 63 30 73 1b 6d f1 e0 90 63 1d 4c 43 c5 da c3 ee fc 62 ff 00 2c 71 98 ec 3b 83 65 97 89 d6 55 dd 8c 76 68 01 66 d4 65 3f a1 ca 28 fb b6 44 ee 3c e6 f3 91 9c a7 31 37 c8 93 e9 7b 69 42 ca c6 da 72 33 9c ee 9d 6a 2b ea 79 e5 b8 1c 19 e1 80 d6 f5 f1 c9 84 61 b3 38 91 f2 84 a1 da d7 76 fe 4d 81 be 19 c8 00 c1 71 1f 2b 67 ff 00 ae e2 7c 80 fe 63 7b 54 b1 ef b9 8a e7 53 22 d0 c3 84 c5 a8 03 de 38 df 0f 63 67 bf 1c 66 d6 1d 3c ae 56 62 f5 80 49 6b 3b b6 3d b3 a7 54 36 f7 bb 5e 6d db 3e c6 c5 92 fb 75 d3 ed b5 d1 74 01 3d 3e ae 38 ca 4b ff 00 30 b5 86 e5 ed da fc 7a 7e 3d 75 d2 1d 4e e6 72 f3 40 b3 16 82 b8 bc 86 21 0e 1a 6a 6a 15 ff 00 7c 54 4e a7 6f 2b 45 62 a5 e4 e0 45 66 fd 27 73 f6 0b 18 06 e5 58 c3 5c ed bf a9 25 69 aa a8 c9 b2 eb 0b 4b 3a 95 a4 ea Data Ascii: c\c0smcLCb,q;eUvhfe?(D<17{iBr3j+ya8vMq+g\|c{TS"8cgf<VbIk;=T6^m>ut=>8K0z~=uNr@!jj\|TNo+EbEf'sX\%iK:
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: b2 9f 61 c7 71 f2 95 90 65 2b 2a 0c 7c 45 ac 4f 02 5a fe d8 cc 4b 42 02 ed a3 65 d6 17 73 23 21 af 6f 4f 30 7c c1 f3 b9 f2 d3 e4 cf 93 1a 0f 33 ce cc 1f 26 6f 5e 09 83 5a 83 5b 9f 07 73 f5 3e 04 3f a1 0f e8 4f 33 cf af 8f 4d 0f 4f f5 3c cd cf f5 e9 fb 9b f0 65 ac 16 b2 7d 30 29 ef 65 56 b3 53 50 e8 02 4b 66 a2 56 dc 28 ba ac 12 1d 5a fb 2e 6d d9 45 c2 a3 14 ab 8e 4b 91 93 5d 0b e5 73 ac 04 96 ab 2e 9b 3d 35 1b d8 0e d8 96 6d ca 71 57 55 a3 d3 7d 55 2e 83 67 55 58 f7 27 57 a5 df 42 bb 43 f9 1b 8f 6a ac 5b 39 7c 13 0b 4e ad 8f 5d eb 32 14 77 88 9e 5d bc 74 fc 41 8b 89 5d 53 53 53 40 8d 43 52 37 1d e5 61 ae 48 5d fd 25 89 d9 9d 87 39 78 c6 dd 4e a7 92 f8 f5 7f 2f 0f a8 67 be 45 29 eb af b3 e0 12 7e be f3 61 e3 43 3b a6 db d7 50 af a1 00 fc be 0e 1d 9f 93 f4 Data Ascii: aqe+*\|EOZKBes#!oO0\|3&o^Z[s>?O3MO<e}0)eVSPKfV(Z.mEK]s.=5mqWU}U.gUX'WBCj[9\|N]2w]tA]SSS@CR7aH]%9xN/gE)~aC;P
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 07 13 60 fd a4 ea 79 26 1f 62 04 0e 76 7d 02 ef 8a 8b 88 ae b1 52 d3 8c a4 6c de 81 1b c7 a2 b1 5f 83 60 6d 6c b5 73 c7 a1 31 7d da 02 dd a8 83 fe ca 3d 8c 42 8a a9 54 1b 31 a3 1d 4b 1f 53 7c 9a 5a 36 04 27 c4 57 28 ea eb f5 19 9d 46 c4 5b 2b 1c 40 5f 46 e4 7c 2e 46 36 61 73 ca d4 c9 55 22 77 1c 1d 46 6f 43 2a fd fa 5a 7c 6a 01 b3 a9 45 bd be 1a 6c b1 d8 e2 b8 c8 36 d6 90 19 8c 55 e4 fa 08 ec f6 e9 6c fe e6 96 9e 7c b5 e9 a9 af 6c 22 6a 33 6b c4 3a 9c 4e c3 4c 81 b4 0b 31 10 83 65 86 9c 40 6c e5 29 1f 95 91 43 5b 6e 86 65 bd dc 87 61 83 4f 76 f1 2e 71 c5 55 51 78 ac 03 f7 1b df 60 10 0f d4 ca c4 dd 2d a1 4b 1d cf 83 a6 e1 fb 4e 5e 48 20 8d c1 f3 3a 55 06 bc 7e 67 ed d7 f4 3a 9a f2 9f 44 fc 37 2c c5 23 51 7b 8b 3e a2 d1 06 51 d7 b9 9e 86 f9 34 ec fb 71 70 Data Ascii: `y&bv}Rl_`mls1}=BT1KS\|Z6'W(F[+@_F\|.F6asU"wFoC*Z\|jEl6Ul\|l"j3k:NL1e@l)C[neaOv.qUQx`-KN^H :U~g:D7,#Q{>Q4qp
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 52 cb 13 f1 a7 97 65 39 9e a3 8c 5c 87 14 f4 db 88 29 97 53 db 8e 52 bc 4c 2b 53 25 7b 92 f6 2b 45 ac 2d 6d b1 98 55 1d ee 77 ea 4f 06 9c b4 63 a8 72 6a 42 03 64 de 8b 46 c7 4d ac a6 2a 6f ee fe 27 cb fe d6 2a aa 96 60 02 a8 55 03 d7 53 89 fb 53 a7 62 76 d4 31 e9 f9 5c ca cc ca 3f 97 52 12 08 f9 fe 8e 43 f3 b4 ca 93 9d 8a 3d 75 e9 e6 6f d0 d3 53 7c b6 1a 1f c5 b0 ec 1f 0d 55 8b f3 f6 72 68 1f 53 b8 27 21 2b 4e e3 6a 3f 14 0d 58 7f 91 2b d7 2e 4d 04 5f 88 63 fa 6a 1f 9f 41 e8 23 7c fd 83 d0 fa 56 dc 5d 5a 0c a4 74 59 6e 48 7f 6d 66 b2 87 9b 7d 71 0b a5 7b 59 db 66 95 e4 c2 75 0f e5 d6 5b d1 07 ee 38 2b fd 11 eb af 51 1b fa 2a 36 40 8a bc 11 54 3b f0 46 62 cc 59 99 8f a6 0a 78 67 fb 1a 9a 9b e4 e1 52 7e 07 81 af 4a eb f7 1b 0c 66 55 1b 27 36 91 17 2a 96 f4 Data Ascii: Re9\)SRL+S%{+E-mUwOcrjBdFMo'`USSbv1\?RC=uoS\|UrhS'!+Nj?X+.M_cjA#\|V]ZtYnHmf}q{Yfu[8+Q6@T;FbYxgR~JfU'6
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 33 e2 53 8c 97 da d9 bd b5 a7 a7 59 6d cb 95 97 65 0a dd 4f a9 8e 59 4e f9 3d 53 1f 12 93 ff 00 91 d4 4f 2e a2 94 75 1c dc 53 8f d6 2d 67 be bc 41 d5 38 e2 62 e0 e3 45 b6 bc ab fe aa bc 8c 31 ff 00 13 7d d3 27 a5 38 af 08 25 bd 03 32 ba 8d 92 9b cd 72 db 0d 8e 58 8f 4e cb 25 14 e2 8c eb 43 dd c5 7f b9 d3 25 bf f8 f8 4b 54 e9 a9 fc c7 b4 83 c9 c3 33 85 e4 1d 72 39 db 62 d5 2c 0a b5 2d 6b 52 da f6 90 ac 75 b5 87 e0 05 3f fb 3a 61 29 d2 89 d6 72 f8 63 f6 97 1a 93 7d f5 d6 11 42 28 51 5f da e3 c4 10 0f 9f e9 8f 5b ed ed af 8b 6a 5b bf 3b 71 6d ab d1 6d fd 3f d9 89 d2 6c b8 07 ba aa aa a1 78 d5 e9 91 8e 99 15 14 66 52 8c ca d1 94 30 d1 c5 bc 9f e5 58 40 b3 60 e0 da 74 d4 3f dd d5 b2 3b 18 8d af e8 a6 55 c9 2a ea 40 0d 3f d4 25 ad e1 74 06 bd 14 79 9c bf d9 f0 Data Ascii: 3SYmeOYN=SO.uS-gA8bE1}'8%2rXN%C%KT3r9b,-kRu?:a)rc}B(Q_[j[;qmm?lxfR0X@`t?;U*@?%ty
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 12 23 54 cb 89 4e 44 20 13 0a 69 bd c4 2b 42 88 f4 4d 6a b3 f7 4c 2a 21 5a 04 f6 fa a2 2f a0 99 28 4d 15 44 24 06 ea 12 ac f3 28 2c ee 1d 13 91 47 ba 3b ad 90 da 3b 21 14 fa 99 a6 34 a6 11 bb 04 e3 54 fa 99 f4 50 1d 10 46 6f af 21 9a ce 5d 91 c3 23 35 39 c2 29 fc 20 09 27 07 3c 89 43 c3 a4 54 60 d1 bf fd 2e e8 44 9a 23 bc 04 ce 88 c1 94 6a 3b c2 a1 18 2a af 2d 13 a3 75 71 c7 b2 a0 91 55 8e 16 a1 26 8a ae 11 26 f6 43 7a d6 7d ae 28 02 a7 c9 02 a1 71 28 94 22 98 2e 61 56 65 30 05 e5 10 13 cc aa 92 88 92 24 6b 10 9f 18 23 3f aa 8d c3 c6 17 d0 23 06 c7 2c d0 29 a3 7b 55 52 84 5c 54 c9 a2 9c 2a 84 22 b2 92 dd 08 0b 9a 10 08 aa 90 b4 da ce ec 91 28 f5 45 52 e6 c5 4b 90 50 0a 5d 15 34 53 4d 30 55 4d 89 4d 4d 41 42 ec ce d7 44 65 75 14 9b 92 6c 7a a1 e8 a8 d0 9b Data Ascii: #TND i+BMjL!Z/(MD$(,G;;!4TPFo!]#59) '<CT`.D#j;-uqU&&Cz}(q(".aVe0$k#?#,){UR\T*"(ERKP]4SM0UMMMABDeulz
2024-09-27 22:29:22 UTC	16384	IN	Data Raw: 16 b4 7b af 2b c8 ba ad b3 24 5f c0 c1 84 76 bb 2b 2f aa ca ce 43 52 54 e7 ea 51 89 28 44 46 6b 86 00 8e e8 c0 99 04 41 e8 63 e0 8b c2 a9 2b 20 86 27 ac 20 73 2a bc ae 3e 05 48 2d 6f f2 86 f3 ce 49 a0 3b 08 c4 06 b7 55 0b bb 94 41 de 50 81 d8 33 3b 40 10 54 42 33 84 ee a9 11 3d 4f ce 84 c5 63 66 7b 2b 32 de 85 5b b8 75 11 56 8c 77 b2 b1 8f 49 ab 27 0e a3 64 91 d1 7c 43 e5 ce 28 b5 d0 8d 46 ab e1 c7 0c 24 55 5c 63 fe 0d e4 10 1d 4d c0 dc 7c 08 20 a2 82 e1 08 96 c1 16 95 19 ea 98 25 a2 c4 3d f6 02 1e 18 4d 45 4d 0b dd 74 93 9a aa 85 f0 46 f3 95 c7 2a 21 85 19 ba 5b 39 78 b5 2b 0b 9a 46 69 b0 58 49 63 30 b1 a7 32 ea a7 b2 71 b4 7e 43 77 85 bd 13 e2 d6 9c 53 f3 43 3f 52 9e 03 ad 7c da 83 20 07 20 13 c9 b1 69 88 6e 50 6a 39 ae 06 99 73 2a 27 0e 5c ca 6b 63 f9 Data Ascii: {+$_v+/CRTQ(DFkAc+ ' s>H-oI;UAP3;@TB3=Ocf{+2[uVwI'd\|C(F$U\cM\| %=MEMtF![9x+FiXIc02q~CwSC?R\| inPj9s*'\kc

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:22 UTC	642	OUT	GET /nf-icon-v1-93.woff HTTP/1.1 Host: beautiful-croquembouche-9e3d8d.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://beautiful-croquembouche-9e3d8d.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:22 UTC	404	IN	HTTP/1.1 404 Not Found Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Type: text/html; charset=utf-8 Date: Fri, 27 Sep 2024 22:29:22 GMT Etag: 1727403626-ssl Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8TSMQN58EYMFW8272F4TTS2 Connection: close Transfer-Encoding: chunked
2024-09-27 22:29:22 UTC	2372	IN	Data Raw: 63 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: c0a<!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com
2024-09-27 22:29:22 UTC	717	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 3c 70 3e 49 66 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 73 69 74 65 2c 20 61 6e 64 20 79 6f 75 20 77 65 72 65 6e 27 74 20 65 78 70 65 63 74 69 6e 67 20 61 20 34 30 34 20 66 6f 72 20 74 68 69 73 20 70 61 74 68 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 20 4e 65 74 6c 69 66 79 27 73 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 73 77 65 72 73 2e 6e 65 74 6c 69 66 79 2e 63 6f 6d 2f 74 2f 73 75 70 70 6f 72 74 2d 67 75 69 64 65 2d 69 2d 76 65 2d 64 65 70 6c 6f 79 65 64 2d 6d 79 2d 73 69 74 65 2d 62 75 74 2d 69 2d 73 74 69 6c 6c 2d 73 65 65 2d 70 61 67 65 2d 6e 6f 74 2d 66 6f 75 6e 64 2f 31 32 35 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 34 30 34 70 61 67 65 26 Data Ascii: > </p> <hr><p>If this is your site, and you weren't expecting a 404 for this path, please visit Netlify's <a href="https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125?utm_source=404page&
2024-09-27 22:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:29:22 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=238570 Date: Fri, 27 Sep 2024 22:29:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 22:29:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:22 UTC	346	OUT	GET /OabVP5H.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:23 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 534 Content-Type: image/png Last-Modified: Thu, 29 Oct 2020 16:18:59 GMT ETag: "8ec02206fa20e35b7be7d5d04151a3c8" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: HPLlW_GLqd0Kdliljm2fax62a7oZlAltC4V4y1WmbYhhAmP1-4TMXw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Fri, 27 Sep 2024 22:29:22 GMT Age: 1509839 X-Served-By: cache-iad-kjyo7100175-IAD, cache-ewr-kewr1740027-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 41, 1 X-Timer: S1727476163.660868,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-27 22:29:23 UTC	534	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 39 08 06 00 00 00 8c 18 83 85 00 00 01 dd 49 44 41 54 78 da 62 b4 0e 9f cb cc c0 c0 50 0c c4 e9 40 ac c4 30 7c c0 0b 20 9e 00 c4 3d 2c 40 a2 0e 8a 87 1b 90 00 e2 0e 20 e6 66 02 12 69 0c c3 1b a4 32 41 7d 3c 9c 81 04 13 c3 08 00 a3 9e 1c f5 e4 a8 27 07 17 60 19 74 0e 62 66 62 30 d6 95 62 30 d3 95 66 d0 d7 14 67 90 10 e1 65 e0 e7 65 67 f8 f5 fb 0f 10 ff 65 f8 fc f5 17 c3 cf 5f 7f 19 de 7e f8 ce f0 f2 cd 57 86 f6 19 87 86 8e 27 19 19 19 18 7c 9d 34 18 12 82 0d 18 c4 84 b8 30 e4 d9 d9 58 c0 98 97 9b 1d cc 57 94 11 00 d3 43 c6 93 20 87 d7 e6 d8 33 58 19 ca 0c cf e4 2a c0 c7 c1 30 bd d1 87 41 56 92 6f 78 16 3c 4c 4c 8c 0c ad 45 ce 34 f5 e0 80 7b 32 c0 55 93 41 5f 43 7c f8 56 21 ac 2c 4c 0c f1 Data Ascii: PNGIHDR99IDATxbP@0\| =,@ fi2A}<'`tbfb0b0fgeege_~W'\|40XWC 3X*0AVox<LLE4{2UA_C\|V!,L

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:23 UTC	633	OUT	GET /ffe/siteui/fonts/nf-icon-v1-93.ttf HTTP/1.1 Host: assets.nflxext.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://beautiful-croquembouche-9e3d8d.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:23 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 Sep 2024 22:29:23 GMT Content-Type: font/ttf Content-Length: 93944 Connection: close Content-MD5: 9iYaU6P7Gb2LSvPZVKjtPA== Last-Modified: Mon, 29 Jan 2018 01:50:51 GMT Cache-Control: max-age=604801 Expires: Fri, 04 Oct 2024 22:29:24 GMT Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-27 22:29:23 UTC	15650	IN	Data Raw: 00 01 00 00 00 0c 00 80 00 03 00 40 44 53 49 47 00 00 00 01 00 01 6e f0 00 00 00 08 47 53 55 42 00 01 00 00 00 01 6e e4 00 00 00 0a 4f 53 2f 32 67 ac 62 01 00 01 57 b4 00 00 00 60 63 6d 61 70 97 9f 95 71 00 01 58 14 00 00 05 24 67 6c 79 66 2a 70 2e bd 00 00 00 cc 00 01 4d 04 68 65 61 64 22 3f b6 25 00 01 51 14 00 00 00 36 68 68 65 61 1a cd 15 f4 00 01 57 90 00 00 00 24 68 6d 74 78 4d 66 13 6a 00 01 51 4c 00 00 06 44 6c 6f 63 61 f6 68 48 20 00 01 4d f0 00 00 03 24 6d 61 78 70 02 28 04 57 00 01 4d d0 00 00 00 20 6e 61 6d 65 92 21 05 73 00 01 5d 38 00 00 01 ef 70 6f 73 74 5a 80 b6 e7 00 01 5f 28 00 00 0f bc 00 0a 00 62 ff a0 01 b1 03 c0 00 03 00 07 00 0b 00 17 00 1d 00 27 00 2b 00 31 00 3d 00 48 00 00 05 21 11 21 01 15 33 35 07 23 35 33 27 15 33 35 33 15 23 Data Ascii: @DSIGnGSUBnOS/2gbW`cmapqX$glyf*p.Mhead"?%Q6hheaW$hmtxMfjQLDlocahH M$maxp(WM name!s]8postZ_(b'+1=H!!35#53'353#
2024-09-27 22:29:23 UTC	16384	IN	Data Raw: 17 06 15 14 17 07 17 37 16 17 07 17 37 16 17 07 17 37 16 33 32 37 17 37 27 36 37 17 37 27 36 37 17 37 27 36 35 34 27 37 27 07 24 33 32 16 16 17 16 15 14 06 06 07 06 23 22 26 26 27 26 35 34 36 36 37 03 81 27 3b 4b 3b 32 38 16 67 15 1c 23 20 1b 16 67 15 3a 2f 3b 4b 3b 28 15 50 1c 50 04 04 50 1c 4f 17 27 3b 4b 3b 31 38 15 67 15 1c 23 20 1b 16 67 16 36 34 3a 4c 3b 28 15 50 1c 50 04 04 50 1c 50 fe 44 26 45 7c 59 13 0b 3a 69 44 2a 26 45 7c 59 13 0b 3a 69 44 02 9c 31 3b 4b 3b 27 16 50 1b 4f 04 04 4f 1b 50 17 26 3b 4b 3b 33 36 15 67 15 1c 23 1f 1b 16 66 15 39 30 3b 4b 3b 26 17 50 1c 50 04 04 50 1c 4f 16 27 3a 4b 3b 33 36 15 66 16 1b 23 20 1b 16 66 15 93 3a 68 44 2a 26 45 7c 59 12 0b 3a 68 44 2a 26 44 7c 59 13 00 00 07 00 00 ff c0 04 04 03 c0 00 0f 00 2e 00 3d 00 Data Ascii: 7773277'677'677'654'7'$32#"&&'&54667';K;28g# g:/;K;(PPPO';K;18g# g64:L;(PPPPD&E\|Y:iD&E\|Y:iD1;K;'POOP&;K;36g#f90;K;&PPPO':K;36f# f:hD&E\|Y:hD*&D\|Y.=
2024-09-27 22:29:23 UTC	16384	IN	Data Raw: 04 fe b8 82 58 10 10 96 04 13 13 04 01 76 00 01 00 95 00 e8 03 2b 02 d8 00 11 00 00 01 27 06 07 01 27 07 32 1f 03 16 33 32 37 37 01 03 2b 5d 02 04 fe ae 80 61 01 10 10 8f 04 15 18 1a 13 05 01 7f 02 7a 5e 01 04 fe b8 82 58 10 10 96 04 13 13 04 01 76 00 00 00 00 02 00 00 00 00 03 c0 03 c0 00 0f 00 3b 00 00 00 16 16 15 14 06 06 23 22 26 26 35 34 36 36 33 00 35 34 27 27 26 23 22 07 07 27 26 23 22 07 07 06 15 14 17 17 07 06 15 14 17 17 16 33 32 37 37 17 16 33 32 37 37 36 35 34 27 27 37 02 62 dd 81 81 dd 82 82 dd 81 81 dd 82 01 04 0e 22 0e 12 13 0e 93 93 0e 12 13 0e 22 0d 0d 93 93 0d 0d 22 0d 14 13 0d 93 93 0d 14 13 0d 22 0e 0e 93 93 03 c0 81 dd 82 82 dd 81 81 dd 82 82 dd 81 fe c1 13 12 0e 22 0e 0e 92 92 0e 0e 22 0d 13 14 0d 93 93 0d 13 14 0d 22 0d 0d 93 93 0d Data Ascii: Xv+''23277+]az^Xv;#"&&5466354''&#"'&#"32773277654''7b"""""""
2024-09-27 22:29:23 UTC	16384	IN	Data Raw: 36 33 02 15 14 17 26 23 22 07 36 35 34 27 26 27 16 37 36 37 16 17 16 37 06 07 24 36 35 34 26 23 22 07 15 33 00 06 23 22 26 26 35 34 36 33 32 16 17 35 34 26 23 22 06 07 27 36 33 32 16 15 11 23 35 24 26 23 22 06 15 15 23 11 33 15 36 36 33 32 16 15 11 23 35 04 23 22 26 26 35 34 36 33 32 17 35 34 26 23 22 06 07 27 36 33 32 16 15 11 23 35 24 26 23 22 06 15 15 23 35 34 26 23 22 15 15 23 11 33 15 36 36 33 32 16 17 3e 02 33 32 16 15 15 23 35 04 07 23 16 16 33 32 36 37 17 06 06 23 22 26 35 34 36 36 33 32 16 15 16 27 06 07 07 23 37 27 33 17 17 36 37 37 33 07 17 23 27 00 17 23 22 07 06 06 15 17 14 06 07 06 23 22 27 26 35 34 37 04 26 23 22 06 07 33 04 33 32 36 35 34 26 23 23 15 04 27 16 17 16 33 32 36 36 37 36 33 32 16 15 14 06 07 06 07 26 27 24 23 22 06 15 14 16 33 Data Ascii: 63&#"654'&'7677$654&#"3#"&&5463254&#"'632#5$&#"#36632#5#"&&5463254&#"'632#5$&#"#54&#"#36632>32#5#3267#"&546632'#7'36773#'#"#"'&547&#"332654&##'32667632&'$#"3
2024-09-27 22:29:23 UTC	16384	IN	Data Raw: 0e 05 03 15 16 15 34 18 4a 0f 01 03 13 0c 14 09 03 0f 14 08 6c 04 05 0d 05 05 0a 07 05 04 02 0e 08 05 05 0c 09 06 0c 03 03 07 06 01 03 09 08 01 05 03 04 03 09 06 02 06 a9 21 01 02 1d 26 46 2a 10 12 07 08 12 11 16 22 13 0c 0f 10 0e 0c 02 07 25 11 0f 36 12 0c 10 0f 08 0b 19 04 89 0e 07 07 0b 05 04 03 03 06 06 05 03 02 02 01 04 0b 04 07 05 06 0b 08 0b 01 08 12 04 81 dd 82 83 dc 81 81 dc 83 82 dd 81 02 3f 0f 0e 0d 0e 08 0f 02 02 06 03 07 0a 03 03 07 05 08 06 05 04 0a 08 0b 0b 0d 05 06 07 0c 0e 06 fe cf 11 02 02 07 0d 0b 10 11 18 6e 3b 46 21 1b 2e 0a 07 13 15 0d 1e 17 18 25 12 16 11 01 4d 13 14 09 0a 17 2d 31 16 df 19 0f 0d 0b 15 10 0e 05 12 0c 03 08 04 10 0b 0d 09 0c 07 04 06 0a 07 06 07 04 03 02 11 09 07 07 03 01 cd 1d 13 0a 09 10 0e 06 0b 23 2e 14 07 1b 27 Data Ascii: 4Jl!&F*"%6?n;F!.%M-1#.'
2024-09-27 22:29:23 UTC	12758	IN	Data Raw: 6f 6f 7b 01 c9 fe 9a 01 66 fe 3d 01 66 fe 9a 00 00 00 00 03 00 00 00 00 03 c0 03 c0 00 05 00 15 00 25 00 00 01 17 07 27 37 27 00 06 06 23 22 26 26 35 34 36 36 33 32 16 16 15 00 36 36 35 34 26 26 23 22 06 06 15 14 16 16 33 01 a4 e1 e1 2d b5 b5 02 2b 79 cf 7a 7a cf 79 79 cf 7a 7a cf 79 fe c0 dd 81 81 dd 82 82 dd 81 81 dd 82 02 c1 e1 e1 2d b4 b5 fe d1 cf 79 79 cf 7a 7a cf 79 79 cf 7a fe 20 81 dd 82 82 dd 81 81 dd 82 82 dd 81 00 03 00 00 00 00 03 c0 03 c0 00 0f 00 1f 00 4e 00 00 00 26 26 23 22 06 06 15 14 16 16 33 32 36 36 35 24 36 36 33 32 16 16 15 14 06 06 23 22 26 26 35 17 37 23 37 36 37 36 37 36 33 32 17 17 16 17 16 17 16 15 14 07 06 07 06 07 06 23 22 27 27 07 16 33 32 36 36 35 34 26 27 26 23 22 06 06 07 23 03 c0 81 dd 82 82 dd 81 81 dd 82 82 dd 81 fc 77 Data Ascii: oo{f=f%'7'#"&&5466326654&&#"3-+yzzyyzzy-yyzzyyz N&&#"32665$6632#"&&57#76767632#"''326654&'&#"#w

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:23 UTC	775	OUT	GET /stats/0.php?4583272&@f16&@g1&@h1&@i1&@j1727476161218&@k0&@l1&@mNetflix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-7123696&@b3:1727476161&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttps%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:23 UTC	135	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:29:03 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 380 Connection: close
2024-09-27 22:29:23 UTC	380	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 36 34 38 38 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 Data Ascii: _HST_cntval="#3Vis. today=6488";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="as

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:24 UTC	627	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fbeautiful-croquembouche-9e3d8d.netlify.app%2F&j= HTTP/1.1 Host: e.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:29:24 UTC	1164	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:29:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: mtl2 Set-Cookie: m=1; Domain=dtscout.com; Expires=Fri, 27-Sep-2024 23:52:44 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=1; Domain=dtscout.com; Expires=Fri, 27-Sep-2024 23:29:24 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: df=1727476164; Domain=dtscout.com; Expires=Sun, 05-Jan-2025 22:29:24 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure Set-Cookie: l=104017274761642511AE8CA7DD3CB97E; Domain=dtscout.com; Expires=Wed, 25-Dec-2024 22:29:24 GMT; Max-Age=7689600; Path=/; SameSite=None; Secure X-T: 0.552 Expires: Fri, 27 Sep 2024 22:29:23 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cKVQ5G4sp3rKjCEIbl%2FUt0QXXolL0Y%2FoYjcmLNi3xBFyI2om%2FidMbEbgjqAnH685MKMyctSw%2F%2FrILWMw82lmDLv5K6QGQ1uS95tStbHZcWfB%2B1rm0x5HUYARqjHhu4k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9eeeaa1de08c9b-EWR
2024-09-27 22:29:24 UTC	205	IN	Data Raw: 31 66 63 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 31 30 34 30 31 37 32 37 34 37 36 31 36 34 32 35 31 31 41 45 38 43 41 37 44 44 33 43 42 39 37 45 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e Data Ascii: 1fc8(function() { var dc = {}; var gu = false; var su = "104017274761642511AE8CA7DD3CB97E"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; Strin
2024-09-27 22:29:24 UTC	1369	IN	Data Raw: 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 73 68 3d 30 3b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 30 29 72 65 74 75 72 6e 20 68 61 73 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 68 61 72 3d 74 68 69 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b 68 61 73 68 3d 68 61 73 68 26 68 61 73 68 7d 20 72 65 74 75 72 6e 20 68 61 73 68 3b 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 74 73 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 20 61 2e 68 Data Ascii: g.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;}; function _dtsi() { a = document.createElement("a"), a.h
2024-09-27 22:29:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f 73 75 3d 22 2b 73 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 77 69 64 74 68 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 Data Ascii: } } }); try { var i = document.createElement('iframe'); i.src = "https://t.dtscout.com/idg/?su="+su; i.width = 0; i.height = 0; i.style.display = 'none';
2024-09-27 22:29:24 UTC	1369	IN	Data Raw: 79 7b 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 74 61 72 67 65 74 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 29 28 29 3b 76 61 72 20 64 74 73 5f 70 69 5f 73 74 72 3d 22 22 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 74 73 5f 70 69 5f 73 74 72 2b 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 7d 64 74 73 5f 70 69 5f 73 74 72 3d 64 74 73 5f 70 69 5f 73 74 72 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 28 29 3b 76 61 72 20 64 74 73 5f 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 76 61 72 20 64 74 73 5f 74 7a 5f 6f 66 66 73 65 74 3d 64 74 73 5f 64 2e 67 65 74 Data Ascii: y{e.target.parentNode.removeChild(e.target);}catch(e){}}}})();var dts_pi_str="";for(var i=0;i<navigator.plugins.length;i++){dts_pi_str+=navigator.plugins[i].description}dts_pi_str=dts_pi_str.dts_hash_code();var dts_d=new Date();var dts_tz_offset=dts_d.get
2024-09-27 22:29:24 UTC	1369	IN	Data Raw: 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 20 2d 20 32 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 73 6c 69 63 65 28 69 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 63 69 28 6e 2c 76 2c 64 2c 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 6e 2b 27 3d 27 2b 76 29 20 21 3d 3d 20 2d 31 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 Data Ascii: on.hostname.split('.'); for (var i = splitHostname.length - 2; i >= 0; i--) { var ch = splitHostname.slice(i).join('.'); __sci(n,v,d,ch); if (document.cookie.indexOf(n+'='+v) !== -1) break; } }
2024-09-27 22:29:24 UTC	1369	IN	Data Raw: 70 74 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 64 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 70 64 2f 64 74 73 63 6f 75 74 22 3b 73 2e 69 64 3d 22 73 74 70 64 2d 64 74 73 63 6f 75 74 22 3b 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 2c 77 3d 77 69 6e 64 6f 77 2e 74 6f 70 3b 77 2e 54 79 6e 74 3d 77 2e 54 79 6e 74 7c 7c 5b 5d 3b 77 2e 54 79 6e 74 2e 70 75 73 68 28 22 77 75 21 22 29 3b 73 3d 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 Data Ascii: pt");s.src="https://pd.sharethis.com/pd/dtscout";s.id="stpd-dtscout";s.async=true;document.getElementsByTagName("body")[0].appendChild(s);}catch(e){}})();(function(){try{var s,w=window.top;w.Tynt=w.Tynt\|\|[];w.Tynt.push("wu!");s=w.document.createElement("s
2024-09-27 22:29:24 UTC	1094	IN	Data Raw: 65 72 3d 21 30 2c 6e 2e 73 72 63 3d 69 2b 22 3f 22 2b 65 2c 6e 2e 69 64 3d 22 64 74 73 70 76 5f 22 2b 74 2e 63 62 69 64 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 75 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 2e 75 28 29 7d 29 2c 74 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 68 28 74 29 2c 21 31 21 3d 3d 65 29 74 72 79 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 74 73 70 76 5f 22 2b 65 29 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 Data Ascii: er=!0,n.src=i+"?"+e,n.id="dtspv_"+t.cbid,o.appendChild(n)}catch(t){}}(u),window.addEventListener("beforeunload",function(){window._dtspv.u()}),t.c=function(t,e){if(h(t),!1!==e)try{var n=document.getElementById("dtspv_"+e);n.parentNode.removeChild(n)}catch
2024-09-27 22:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:24 UTC	812	OUT	GET /idg/?su=104017274761642511AE8CA7DD3CB97E HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1727476164; l=104017274761642511AE8CA7DD3CB97E
2024-09-27 22:29:25 UTC	609	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 27 Sep 2024 22:29:24 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BQR%2FhLbVu5mRjID9ZhNSDMcshFIGLNFhW%2BAGkmdLp97Xubj3VZLSc66noY0ZKONxoAwdToOjHpzKkn%2Bv%2BtmjtVefdUzgSvDXBNoNkDg6OoysT1EzRhSaCuIpUFEtYM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9eeeaf8bb14234-EWR
2024-09-27 22:29:25 UTC	760	IN	Data Raw: 35 34 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 75 69 64 5f 67 20 20 3d 20 27 31 30 34 30 31 37 32 37 34 37 36 31 36 34 32 35 31 31 41 45 38 43 41 37 44 44 33 43 42 39 37 45 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 20 20 3d 20 27 31 30 34 30 31 37 32 37 34 37 36 31 36 35 33 41 46 45 41 41 39 33 30 43 35 35 32 39 33 42 44 34 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 75 20 3d 20 27 31 30 34 30 31 37 32 37 34 37 36 31 36 34 32 35 31 31 41 45 38 43 41 37 44 44 33 43 42 39 37 45 27 3b 0a 0a 20 20 20 20 76 61 72 20 64 65 62 75 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 Data Ascii: 546<html><head></head><body><script>window.onload = function() { var uid_g = '104017274761642511AE8CA7DD3CB97E'; var uid_s = '104017274761653AFEAA930C55293BD4'; var uid_su = '104017274761642511AE8CA7DD3CB97E'; var debug = {}; v
2024-09-27 22:29:25 UTC	597	IN	Data Raw: 20 20 76 61 72 20 75 69 64 20 3d 20 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 69 66 28 6d 65 74 68 6f 64 20 3d 3d 20 27 67 6f 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 67 6f 74 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 28 6c 73 5f 75 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 6c 73 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var uid = false if(method == 'got') { uid = pass_uid; debug.uid_src = 'got'; } else if(ls_uid) { uid = ls_uid; debug.uid_src = 'ls'; } else { uid = pass_uid;
2024-09-27 22:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:29:24 UTC	739	OUT	GET /pv/?_a=v&_h=beautiful-croquembouche-9e3d8d.netlify.app&_ss=2xtxipquss&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=4yq8&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beautiful-croquembouche-9e3d8d.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1727476164; l=104017274761642511AE8CA7DD3CB97E
2024-09-27 22:29:25 UTC	621	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:29:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.143 X-C: 0 Expires: Fri, 27 Sep 2024 22:29:24 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2FZbPV1zV7Nw69ejcbGGP088zNP5WaNcMZ42w4MQS7EKEzt3jIIDMqV%2FIBHI2NP1KrvBMZlTREHpBe5UQWEZG5UnWuvg1AAb%2FleayT7G8pcv6q19rTxfcvpNOi7FyyQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9eeeafa9c94357-EWR
2024-09-27 22:29:25 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 34 79 71 38 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'4yq8');}catch(e){}
2024-09-27 22:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0