Edit tour

Windows Analysis Report
http://13.248.169.48/

Overview

General Information

Sample URL:	http://13.248.169.48/
Analysis ID:	1556742
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,6712137421768642059,17494825194880425227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://13.248.169.48/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious URL

Source: Email

Joe Sandbox AI: AI detected IP in URL: http://13.248.169.48

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50057 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.42
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.42
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.42
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.42
Source: unknown	TCP traffic detected without corresponding DNS query: 13.248.169.48

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/esw.min.js HTTP/1.1Host: service.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BrowserId=ihLF_qOXEe-yl6c-rt1ImA
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KvF7dfO4TKBahHK&MD=vxmonrnU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /s/fs.js HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.afternic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/YKBRC/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.afternic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/fs.js HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/YKBRC/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datalayer/v4/latest.js HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datalayer/v4/latest.js HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=1&ClientTime=1731705683378&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=0&LastActivity=3&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705684659&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&LastActivity=800&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705686784&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&IsNewSession=true&DeltaT=2124&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.afternic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.afternic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94l4jmnkd7in/7Ybg3zqoD9AaHTtrU0mA9/a7b860e366bd1f71ccf4aef8e07a7b30/afternic_footer.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.afternic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94l4jmnkd7in/7Ybg3zqoD9AaHTtrU0mA9/a7b860e366bd1f71ccf4aef8e07a7b30/afternic_footer.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.afternic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=1&ClientTime=1731705698761&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=0&LastActivity=800&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=2&ClientTime=1731705701256&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705700286&LastActivity=256&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=3&ClientTime=1731705706250&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705702605&LastActivity=0&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=4&ClientTime=1731705711256&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705707606&LastActivity=2499&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KvF7dfO4TKBahHK&MD=vxmonrnU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=5&ClientTime=1731705716255&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705712601&LastActivity=4249&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=6&ClientTime=1731705721253&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705717619&LastActivity=498&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=7&ClientTime=1731705726255&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705722606&LastActivity=2313&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=8&ClientTime=1731705731257&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705727609&LastActivity=641&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=9&ClientTime=1731705736259&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705732648&LastActivity=501&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 13.248.169.48Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lander HTTP/1.1Host: 13.248.169.48Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://13.248.169.48/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr

String found in binary or memory: return b}yD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),AD=["www.youtube.com","www.youtube-nocookie.com"],BD,CD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.afternic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: service.force.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: img6.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: ds-aksb-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: gui.afternic.com
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: edge.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: rs.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: 37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io
Source: global traffic	DNS traffic detected: DNS query: _9243._https.37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io

Source: unknown

HTTP traffic detected: POST /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveContent-Length: 773sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.afternic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_190.2.dr, chromecache_166.2.dr, chromecache_221.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_210.2.dr, chromecache_196.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_192.2.dr, chromecache_229.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/next-router-not-mounted
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_195.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_120.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_172.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50057 version: TLS 1.2

Source: classification engine

Classification label: sus20.win@17/180@46/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,6712137421768642059,17494825194880425227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://13.248.169.48/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,6712137421768642059,17494825194880425227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://13.248.169.48/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://13.248.169.48/lander	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
rs.fullstory.com	35.186.194.58	true	false	high
d3orhvfyxudxxq.cloudfront.net	13.33.187.2	true	false	high
proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com	44.232.228.214	true	false	high
www.google.com	142.250.184.196	true	false	high
edge.fullstory.com	35.201.112.186	true	false	high
location.l.force.com	160.8.186.13	true	false	high
unpkg.com	104.17.247.203	true	false	high
img1.wsimg.com	unknown	unknown	false	high
37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io	unknown	unknown	false	unknown
www.afternic.com	unknown	unknown	false	high
gui.afternic.com	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
ds-aksb-a.akamaihd.net	unknown	unknown	false	high
img6.wsimg.com	unknown	unknown	false	high
_9243._https.37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io	unknown	unknown	false	unknown
service.force.com	unknown	unknown	false	high
csp.secureserver.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=7&ClientTime=1731705726255&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705722606&LastActivity=2313&ContentEncoding=gzip	false		high
https://service.force.com/embeddedservice/5.0/esw.min.js	false		high
http://13.248.169.48/	false		unknown
https://edge.fullstory.com/s/fs.js	false		high
http://13.248.169.48/lander	true	Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=8&ClientTime=1731705731257&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705727609&LastActivity=641&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=9&ClientTime=1731705736259&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705732648&LastActivity=501&ContentEncoding=gzip	false		high
https://edge.fullstory.com/datalayer/v4/latest.js	false		high
https://images.ctfassets.net/94l4jmnkd7in/7Ybg3zqoD9AaHTtrU0mA9/a7b860e366bd1f71ccf4aef8e07a7b30/afternic_footer.svg	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705684657&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&IsNewSession=true&SkipResponseBody=true	false		high
https://unpkg.com/@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js	false		high
https://www.afternic.com/legal/agreements/cookie-policy	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705686784&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&IsNewSession=true&DeltaT=2124&ContentEncoding=gzip	false		high
https://edge.fullstory.com/s/settings/YKBRC/v1/web	false		high
https://rs.fullstory.com/rec/page	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=1&ClientTime=1731705698761&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=0&LastActivity=800&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=2&ClientTime=1731705701256&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705700286&LastActivity=256&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=5&ClientTime=1731705716255&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705712601&LastActivity=4249&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=4&ClientTime=1731705711256&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705707606&LastActivity=2499&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=1&ClientTime=1731705683378&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=0&LastActivity=3&IsNewSession=true&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=6&ClientTime=1731705721253&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705717619&LastActivity=498&ContentEncoding=gzip	false		high
https://www.afternic.com/forsale/13.248.169.48?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-daslnc_base&traffic_type=TDFS_DASLNC&traffic_id=daslnc&	false		high
https://rs.fullstory.com/rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705684659&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&LastActivity=800&IsNewSession=true&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=3&ClientTime=1731705706250&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=1731705702605&LastActivity=0&ContentEncoding=gzip	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_188.2.dr, chromecache_142.2.dr	false	high
https://tagassistant.google.com/	chromecache_172.2.dr, chromecache_195.2.dr	false	high
https://nextjs.org/docs/messages/next-router-not-mounted	chromecache_192.2.dr, chromecache_229.2.dr	false	high
http://code.google.com/p/episodes/	chromecache_188.2.dr, chromecache_142.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_172.2.dr, chromecache_195.2.dr	false	high
https://cct.google/taggy/agent.js	chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	false	high
https://www.google.com	chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	false	high
https://www.google.com/ads/ga-audiences	chromecache_172.2.dr, chromecache_195.2.dr	false	high
https://www.google.%/ads/ga-audiences	chromecache_172.2.dr, chromecache_195.2.dr	false	high
https://td.doubleclick.net	chromecache_210.2.dr, chromecache_196.2.dr, chromecache_220.2.dr, chromecache_120.2.dr	false	high
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_210.2.dr, chromecache_196.2.dr	false	high
https://stats.g.doubleclick.net/j/collect	chromecache_195.2.dr	false	high
http://jedwatson.github.io/classnames	chromecache_190.2.dr, chromecache_166.2.dr, chromecache_221.2.dr, chromecache_173.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
160.8.189.19	unknown	Sweden	14340	SALESFORCEUS	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
13.33.187.2	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
18.244.28.26	unknown	United States	16509	AMAZON-02US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
160.8.186.13	location.l.force.com	Sweden	14340	SALESFORCEUS	false
13.248.169.48	unknown	United States	16509	AMAZON-02US	true
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.247.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
44.232.228.214	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556742
Start date and time:	2024-11-15 22:20:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://13.248.169.48/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.win@17/180@46/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 216.58.206.46, 142.251.173.84, 34.104.35.123, 2.18.64.31, 2.18.64.17, 23.38.98.114, 23.38.98.78, 2.16.241.18, 2.16.241.7, 2.16.168.5, 2.16.168.6, 142.250.185.136, 104.102.33.222, 199.232.210.172, 142.250.186.104, 172.217.23.110, 192.229.221.95, 142.250.185.110, 142.250.184.227
Excluded domains from analysis (whitelisted): e8843.dsca.akamaiedge.net, e40258.g.akamaiedge.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, gui.afternic.com.edgekey.net, e126871.dsca.akamaiedge.net, ds-aksb-a.akamaihd.net.edgesuite.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, a1910.dscq.akamai.net, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, global-wildcard.wsimg.com.sni-only.edgekey.net, csp.secureserver.net.edgekey.net, afternic.com.sni-only.edgekey.net, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://13.248.169.48/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.751049232662301
Encrypted:	false
SSDEEP:	12:tWQvhRA7L+tGexVbA5i+spXtdW1GexVJn+6Ff:tWkhq+1VbQYpXuVJnZf
MD5:	1BD8614A7705DE4606C47DF62D5C5B24
SHA1:	D5F45F9C9363FDF8E4FD167314EB616975A2E6BB
SHA-256:	1D6116B7A9AE55F2A8B11828D88F25884E95CACE1F913B14FB58698B9F4360BA
SHA-512:	44B6302B251FE62D95CF180B92AF9BD52BAA7C455EBD211B5AEF7F6C5251D16D9A0EA6DD94E25B61ACF1FBB297226F0639E39D6603FEE2D381E4E21D5E8CA859
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/css/14a1dbcaec667fc5.css
Preview:	.sso-deck-iframe{width:100%;border:0;height:0}.sso-deck-wrapper{width:100%;height:0;position:relative;display:flex;flex-direction:row;justify-content:center;align-items:center;overflow:hidden;background-color:#fff}.sso-deck-wrapper.init,.sso-deck-wrapper.loading{transition:height .25s ease-out}.sso-deck-wrapper.init .sso-deck-overlay,.sso-deck-wrapper.loading .sso-deck-overlay{opacity:1}.sso-deck-overlay{background-color:#fff;top:0;bottom:0;left:0;right:0;position:absolute;display:flex;flex-direction:row;justify-content:center;align-items:center;opacity:0;pointer-events:none;transition:opacity .25s ease-out;z-index:200}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 15, 2024 22:21:03.298548937 CET	53	57404	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:03.360568047 CET	53	60246	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:04.611465931 CET	53	52586	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:06.190038919 CET	58719	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:06.190038919 CET	51127	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.246947050 CET	61536	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.246947050 CET	56943	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.254307985 CET	53	56943	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:07.254360914 CET	53	61536	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:07.631258965 CET	51347	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.631386042 CET	55420	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.632119894 CET	50636	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.633465052 CET	57487	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.638989925 CET	53	51347	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:07.639059067 CET	53	55420	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:07.646639109 CET	52704	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:07.649830103 CET	52624	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:09.044236898 CET	59750	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:09.044667959 CET	52648	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.239366055 CET	63656	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.239958048 CET	51605	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.273277044 CET	55702	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.273277998 CET	57074	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.725833893 CET	59239	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.725970984 CET	62517	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.732918978 CET	53	62517	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:12.733742952 CET	53	59239	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:12.889574051 CET	56182	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:12.889691114 CET	55255	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:13.507076979 CET	65124	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:13.507076979 CET	59941	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:13.565980911 CET	59145	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:13.565980911 CET	62385	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:16.872107029 CET	53	54227	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:17.137376070 CET	50020	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:17.137598991 CET	64861	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:17.980850935 CET	57242	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:17.981024981 CET	62905	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:18.032732964 CET	138	138	192.168.2.4	192.168.2.255
Nov 15, 2024 22:21:18.506091118 CET	59525	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:18.506266117 CET	56825	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:18.744503021 CET	53	59525	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:18.744549990 CET	53	56825	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:19.172751904 CET	53	55012	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:19.202639103 CET	53	50087	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:20.138864994 CET	61193	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:20.139029980 CET	51103	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:20.145781040 CET	53	61193	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:20.146796942 CET	53	51103	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:20.638869047 CET	51754	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:20.639062881 CET	61370	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:20.647077084 CET	53	51754	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:20.647577047 CET	53	61370	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:20.704004049 CET	53	57293	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:21.510436058 CET	59281	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:21.510761976 CET	59117	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:21.518277884 CET	53	59281	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:21.518635988 CET	53	59117	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:21.592009068 CET	53	49765	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:28.493634939 CET	51583	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:28.493757963 CET	53861	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:28.500902891 CET	53	53861	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:28.501238108 CET	53	51583	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:29.688772917 CET	60441	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:29.688858032 CET	62615	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:29.695857048 CET	53	62615	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:29.695893049 CET	53	60441	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:33.724488974 CET	50084	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:33.724714994 CET	65395	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:33.731770039 CET	53	65395	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:33.731915951 CET	53	50084	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:35.093482971 CET	63727	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:35.093607903 CET	58412	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:35.100136995 CET	53	58412	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:35.100771904 CET	53	63727	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:36.432320118 CET	51110	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:36.432518959 CET	55689	53	192.168.2.4	1.1.1.1
Nov 15, 2024 22:21:36.449445963 CET	53	51110	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:36.450038910 CET	53	55689	1.1.1.1	192.168.2.4
Nov 15, 2024 22:21:40.316807985 CET	53	50453	1.1.1.1	192.168.2.4
Nov 15, 2024 22:22:03.166763067 CET	53	63879	1.1.1.1	192.168.2.4
Nov 15, 2024 22:22:03.222548962 CET	53	64158	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 15, 2024 22:21:06.199352026 CET	1.1.1.1	192.168.2.4	0x877c	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:06.199901104 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.254307985 CET	1.1.1.1	192.168.2.4	0x4f25	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 15, 2024 22:21:07.254360914 CET	1.1.1.1	192.168.2.4	0x8cd	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.186.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.187.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.190.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.188.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.189.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.638989925 CET	1.1.1.1	192.168.2.4	0xcb55	No error (0)	location.l.force.com		160.8.191.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:07.639059067 CET	1.1.1.1	192.168.2.4	0x2d3e	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.639059067 CET	1.1.1.1	192.168.2.4	0x2d3e	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.640769958 CET	1.1.1.1	192.168.2.4	0x9b19	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.641779900 CET	1.1.1.1	192.168.2.4	0x696	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.654751062 CET	1.1.1.1	192.168.2.4	0x938a	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:07.656984091 CET	1.1.1.1	192.168.2.4	0x279d	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:09.052609921 CET	1.1.1.1	192.168.2.4	0x27f5	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:09.052649021 CET	1.1.1.1	192.168.2.4	0x3676	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.248450041 CET	1.1.1.1	192.168.2.4	0x4e27	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.248683929 CET	1.1.1.1	192.168.2.4	0x93ff	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.282325983 CET	1.1.1.1	192.168.2.4	0x645	No error (0)	gui.afternic.com	gui.afternic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.283813000 CET	1.1.1.1	192.168.2.4	0x4edf	No error (0)	gui.afternic.com	gui.afternic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.732918978 CET	1.1.1.1	192.168.2.4	0xa49c	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.732918978 CET	1.1.1.1	192.168.2.4	0xa49c	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.189.19	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.184.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.185.13	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.190.19	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.232.10	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.733742952 CET	1.1.1.1	192.168.2.4	0x7b4f	No error (0)	location.l.force.com		160.8.191.19	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:12.899039984 CET	1.1.1.1	192.168.2.4	0x188f	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:12.914088964 CET	1.1.1.1	192.168.2.4	0x2aa4	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:13.515703917 CET	1.1.1.1	192.168.2.4	0x2759	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:13.529160023 CET	1.1.1.1	192.168.2.4	0x64c9	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:13.573813915 CET	1.1.1.1	192.168.2.4	0xc0e7	No error (0)	gui.afternic.com	gui.afternic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:13.574304104 CET	1.1.1.1	192.168.2.4	0xaf5b	No error (0)	gui.afternic.com	gui.afternic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:17.145378113 CET	1.1.1.1	192.168.2.4	0x7191	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:17.147277117 CET	1.1.1.1	192.168.2.4	0x89b	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:17.988533974 CET	1.1.1.1	192.168.2.4	0xa098	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:17.988893986 CET	1.1.1.1	192.168.2.4	0x3c68	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:18.744503021 CET	1.1.1.1	192.168.2.4	0xe2fa	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:20.145781040 CET	1.1.1.1	192.168.2.4	0xdd8e	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:20.647077084 CET	1.1.1.1	192.168.2.4	0xa55d	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:21.518277884 CET	1.1.1.1	192.168.2.4	0xa72d	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:28.500902891 CET	1.1.1.1	192.168.2.4	0x38c2	No error (0)	unpkg.com			65	IN (0x0001)	false
Nov 15, 2024 22:21:28.501238108 CET	1.1.1.1	192.168.2.4	0x2f94	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:28.501238108 CET	1.1.1.1	192.168.2.4	0x2f94	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:28.501238108 CET	1.1.1.1	192.168.2.4	0x2f94	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:28.501238108 CET	1.1.1.1	192.168.2.4	0x2f94	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:28.501238108 CET	1.1.1.1	192.168.2.4	0x2f94	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:29.695857048 CET	1.1.1.1	192.168.2.4	0xe5a	No error (0)	unpkg.com			65	IN (0x0001)	false
Nov 15, 2024 22:21:29.695893049 CET	1.1.1.1	192.168.2.4	0x15c1	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:29.695893049 CET	1.1.1.1	192.168.2.4	0x15c1	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:29.695893049 CET	1.1.1.1	192.168.2.4	0x15c1	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:29.695893049 CET	1.1.1.1	192.168.2.4	0x15c1	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:29.695893049 CET	1.1.1.1	192.168.2.4	0x15c1	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731770039 CET	1.1.1.1	192.168.2.4	0xe458	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731915951 CET	1.1.1.1	192.168.2.4	0xf155	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731915951 CET	1.1.1.1	192.168.2.4	0xf155	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.2	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731915951 CET	1.1.1.1	192.168.2.4	0xf155	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.16	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731915951 CET	1.1.1.1	192.168.2.4	0xf155	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.102	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:33.731915951 CET	1.1.1.1	192.168.2.4	0xf155	No error (0)	d3orhvfyxudxxq.cloudfront.net		13.33.187.25	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100136995 CET	1.1.1.1	192.168.2.4	0xa9fd	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100771904 CET	1.1.1.1	192.168.2.4	0x261	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100771904 CET	1.1.1.1	192.168.2.4	0x261	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.244.28.26	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100771904 CET	1.1.1.1	192.168.2.4	0x261	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.244.28.44	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100771904 CET	1.1.1.1	192.168.2.4	0x261	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.244.28.109	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:35.100771904 CET	1.1.1.1	192.168.2.4	0x261	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.244.28.72	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:36.449445963 CET	1.1.1.1	192.168.2.4	0xe926	No error (0)	37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io	proxy.us-west-2.aws.found.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:36.449445963 CET	1.1.1.1	192.168.2.4	0xe926	No error (0)	proxy.us-west-2.aws.found.io	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:36.449445963 CET	1.1.1.1	192.168.2.4	0xe926	No error (0)	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com		44.232.228.214	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:36.449445963 CET	1.1.1.1	192.168.2.4	0xe926	No error (0)	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com		52.26.59.44	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:36.449445963 CET	1.1.1.1	192.168.2.4	0xe926	No error (0)	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com		54.212.23.110	A (IP address)	IN (0x0001)	false
Nov 15, 2024 22:21:36.450038910 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	_9243._https.37883deb336a414987c2e72fdc25ba7f.apm.us-west-2.aws.found.io	proxy.us-west-2.aws.found.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 15, 2024 22:21:36.450038910 CET	1.1.1.1	192.168.2.4	0x7199	No error (0)	proxy.us-west-2.aws.found.io	proxy-nlb-prod-us-west-2-v5-ac4e52c97755301b.elb.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Nov 15, 2024 22:21:05.237294912 CET	428	OUT	GET / HTTP/1.1 Host: 13.248.169.48 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 15, 2024 22:21:05.903203964 CET	259	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 15 Nov 2024 21:21:05 GMT Content-Type: text/html Content-Length: 114 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 6c 61 6e 64 65 72 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander"}</script></head></html>
Nov 15, 2024 22:21:05.949824095 CET	466	OUT	GET /lander HTTP/1.1 Host: 13.248.169.48 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://13.248.169.48/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 15, 2024 22:21:06.128863096 CET	590	IN	HTTP/1.1 307 Temporary Redirect Server: openresty Date: Fri, 15 Nov 2024 21:21:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 229 Connection: keep-alive Location: https://www.afternic.com/forsale/13.248.169.48?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-daslnc_base&traffic_type=TDFS_DASLNC&traffic_id=daslnc& Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 66 74 65 72 6e 69 63 2e 63 6f 6d 2f 66 6f 72 73 61 6c 65 2f 31 33 2e 32 34 38 2e 31 36 39 2e 34 38 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 54 44 46 53 5f 44 41 53 4c 4e 43 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 70 61 72 6b 65 64 70 61 67 65 73 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 78 5f 63 6f 72 70 5f 74 64 66 73 2d 64 61 73 6c 6e 63 5f 62 61 73 65 26 61 6d 70 3b 74 72 61 66 66 69 63 5f 74 79 70 65 3d 54 44 46 53 5f 44 41 53 4c 4e 43 26 61 6d 70 3b 74 72 61 66 66 69 63 5f 69 64 3d 64 61 73 6c 6e 63 26 61 6d 70 3b 22 3e 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.afternic.com/forsale/13.248.169.48?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-daslnc_base&traffic_type=TDFS_DASLNC&traffic_id=daslnc&">Temporary Redirect</a>.
Nov 15, 2024 22:21:51.136465073 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 21:21:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=156260 Date: Fri, 15 Nov 2024 21:21:09 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 21:21:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=156272 Date: Fri, 15 Nov 2024 21:21:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-15 21:21:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:12 UTC	511	OUT	GET /embeddedservice/5.0/esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:12 UTC	1080	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 21:21:12 GMT Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Sat, 15-Nov-2025 21:21:12 GMT; Max-Age=31536000; secure Set-Cookie: LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Sat, 15-Nov-2025 21:21:12 GMT; Max-Age=31536000; secure Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=86400 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=ihLF_qOXEe-yl6c-rt1ImA; domain=.force.com; path=/; expires=Sat, 15-Nov-2025 21:21:12 GMT; Max-Age=31536000; secure; SameSite=None Expires: Sat, 16 Nov 2024 21:21:12 GMT Last-Modified: Fri, 28 Jun 2024 13:30:12 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Vary: Accept-Encoding Transfer-Encoding: chunked Connection: close
2024-11-15 21:21:12 UTC	15304	IN	Data Raw: 37 38 35 46 0d 0a 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 21 31 2c 62 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 7b 61 70 70 65 6e 64 48 65 6c 70 42 75 74 74 6f 6e 3a 21 30 2c 64 Data Ascii: 785F/* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,d
2024-11-15 21:21:12 UTC	19	IN	Data Raw: 74 49 6e 50 72 6f 67 72 65 73 73 3d 21 30 2c 74 68 69 73 Data Ascii: tInProgress=!0,this
2024-11-15 21:21:12 UTC	15498	IN	Data Raw: 2e 61 70 70 65 6e 64 49 46 72 61 6d 65 28 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 53 65 73 73 69 6f 6e 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 73 65 73 73 69 6f 6e 2e 6f 6e 4c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 73 65 73 73 69 6f 6e 2e 67 65 74 22 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 4b 65 79 73 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 74 68 69 73 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 73 65 73 73 69 6f 6e 2e 73 65 73 73 69 6f 6e 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 61 6c 77 61 79 73 57 61 72 6e 4f 6e 42 65 66 6f 72 65 55 6e Data Ascii: .appendIFrame())};d.prototype.addSessionHandlers=function(){this.addMessageHandler("session.onLoad",function(){this.postMessage("session.get",this.storageKeys)}.bind(this));this.addMessageHandler("session.sessionData",function(a){this.alwaysWarnOnBeforeUn
2024-11-15 21:21:12 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:13 UTC	413	OUT	GET /embeddedservice/5.0/esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BrowserId=ihLF_qOXEe-yl6c-rt1ImA
2024-11-15 21:21:13 UTC	927	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 21:21:13 GMT Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Sat, 15-Nov-2025 21:21:13 GMT; Max-Age=31536000; secure Set-Cookie: LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Sat, 15-Nov-2025 21:21:13 GMT; Max-Age=31536000; secure Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=86400 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Expires: Sat, 16 Nov 2024 21:21:13 GMT Last-Modified: Fri, 28 Jun 2024 13:30:12 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Vary: Accept-Encoding Transfer-Encoding: chunked Connection: close
2024-11-15 21:21:13 UTC	15457	IN	Data Raw: 37 38 35 46 0d 0a 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 21 31 2c 62 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 7b 61 70 70 65 6e 64 48 65 6c 70 42 75 74 74 6f 6e 3a 21 30 2c 64 Data Ascii: 785F/* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,d
2024-11-15 21:21:13 UTC	19	IN	Data Raw: 6f 6e 2e 67 65 74 22 2c 74 68 69 73 2e 73 74 6f 72 61 67 Data Ascii: on.get",this.storag
2024-11-15 21:21:14 UTC	15345	IN	Data Raw: 65 4b 65 79 73 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 74 68 69 73 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 73 65 73 73 69 6f 6e 2e 73 65 73 73 69 6f 6e 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 61 6c 77 61 79 73 57 61 72 6e 4f 6e 42 65 66 6f 72 65 55 6e 6c 6f 61 64 3d 21 61 3b 74 68 69 73 2e 72 65 73 75 6d 65 49 6e 69 74 57 69 74 68 53 65 73 73 69 6f 6e 44 61 74 61 28 61 7c 7c 7b 7d 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 74 68 69 73 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 73 65 73 73 69 6f 6e 2e 64 65 6c 65 74 65 64 53 65 73 73 69 6f 6e 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 43 48 41 53 49 54 4f 52 5f 53 45 52 49 41 4c 49 Data Ascii: eKeys)}.bind(this));this.addMessageHandler("session.sessionData",function(a){this.alwaysWarnOnBeforeUnload=!a;this.resumeInitWithSessionData(a\|\|{})}.bind(this));this.addMessageHandler("session.deletedSessionData",function(a){-1<a.indexOf("CHASITOR_SERIALI
2024-11-15 21:21:14 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KvF7dfO4TKBahHK&MD=vxmonrnU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-15 21:21:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 05d9f740-f9be-4829-a817-617ca545bf6d MS-RequestId: 2747a32c-e015-446a-9980-ee9aeb62c077 MS-CV: YuUJlOqHgkas7PAO.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:17 GMT Connection: close Content-Length: 24490
2024-11-15 21:21:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-15 21:21:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:19 UTC	520	OUT	GET /s/fs.js HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.afternic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:19 UTC	969	IN	HTTP/1.1 200 OK x-goog-generation: 1731593162034275 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 93866 Content-Encoding: gzip x-goog-hash: crc32c=0285nQ== x-goog-hash: md5=aXXmUk1DS8oZpTcmb6DAyw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 93866 Access-Control-Allow-Origin: * X-GUploader-UploadID: AFiumC5M1r4gUwpgyVFg8UvwrFBoDCFdOmDLnWW8kRBc1P0peUEBnRh_6jlIubkOrsoFwjlYIg Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Fri, 15 Nov 2024 21:09:57 GMT Expires: Fri, 15 Nov 2024 22:09:57 GMT Cache-Control: public, max-age=3600,no-transform Age: 682 Last-Modified: Thu, 14 Nov 2024 14:06:02 GMT ETag: "6975e6524d434bca19a537266fa0c0cb" Content-Type: application/javascript vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:19 UTC	409	IN	Data Raw: 1f 8b 08 08 c9 03 36 67 02 ff 74 6d 70 71 65 7a 71 72 67 73 71 00 dc bd 79 7f db c6 b2 28 f8 ff fb 14 14 8e 9f 0e 10 b5 28 52 f2 0a 1a e1 a5 36 5b b6 b6 88 92 97 d0 3c fa 41 64 93 84 4d 01 0c 16 2d 91 f8 dd a7 aa 7a 41 03 04 e5 24 77 ee cc 9b 39 27 16 1b bd 2f d5 d5 55 dd b5 6c 6c ac 9c 4f 82 a4 36 88 86 bc 06 bf 33 3f 4e 6b d1 a8 96 4e 78 ad cb e3 9b 60 c0 21 32 8e 6e 82 21 1f d6 ae ee 6b fb d9 74 da 4d a3 f8 9e d5 0e c2 41 bd b6 1f c5 b5 29 e4 0a 13 28 1f 8e a2 f8 da 4f 83 28 64 b5 d9 94 fb 10 17 f3 11 8f 6b 69 54 9b a4 e9 2c 71 37 36 6e 6f 6f eb 23 a8 24 c1 4a ea 83 e8 7a 63 ca c7 fe 74 23 e5 f1 75 b2 ee 87 c3 f5 41 14 0e 03 ac 24 d9 f8 5f 1b 1b 2b a7 51 4c 1f a2 5b aa af 7e cc 55 bb c3 5a 16 0e b1 11 e8 f3 28 9a 4e a3 db 20 1c ab 44 17 ab a8 2d eb a6 Data Ascii: 6gtmpqezqrgsqy((R6[<AdM-zA$w9'/UllO63?NkNx`!2n!ktMA)(O(dkiT,q76noo#$Jzct#uA$_+QL[~UZ(N D-
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 73 87 e2 e6 2d 55 77 4d 8e 24 18 d9 96 8a b3 56 3c ac 11 ba 19 ac ae 86 b0 6a 2b 9e 17 38 e9 24 8e 6e 6b 21 bf ad 9d 43 e2 5e 1c 43 7f ac 9d a9 9f 24 35 7e 97 f2 70 98 d4 6e fc 69 c6 6b d6 5a 17 a6 2f 1c db 81 b3 66 21 78 85 51 5a f3 61 01 61 f8 71 36 00 08 a8 c1 7f 58 af e5 e4 fd 88 61 8a 71 a1 eb 46 3e 98 85 94 ba c7 c2 7c a0 1e 96 f4 a0 47 6d 39 05 83 98 fb 29 87 d6 5c 3b 36 b2 05 79 98 61 af 63 67 4e d3 e7 19 6b 2a d6 0f e2 64 55 30 98 60 1c 9a 33 9f cf 3b f4 c3 6b b2 d8 f3 e3 71 76 cd c3 34 a9 4f 79 38 4e 27 ad e0 6d dc 0a d6 d6 1c 95 91 d3 02 e5 f9 70 de ff e2 6a 71 b1 5a 1c 57 8b f7 9d 96 ec 5f 3a 67 41 dd 9f cd a6 f7 36 4e 11 d3 55 9b 0b 19 23 98 b0 80 c5 7a 58 30 6a 3b 78 7c b4 03 0f da b9 0e 12 ee 38 b6 1e 19 67 09 8c 4d 15 ce 70 a4 69 7c ff e0 Data Ascii: s-UwM$V<j+8$nk!C^C$5~pnikZ/f!xQZaaq6XaqF>\|Gm9)\;6yacgNk*dU0`3;kqv4Oy8N'mpjqZW_:gA6NU#zX0j;x\|8gMpi\|
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 5a 22 b9 e8 2b 0d 2c 92 39 82 ce 80 2e 28 d4 97 3d 3e 72 71 18 f6 52 b5 4f 2d 16 20 a9 92 a7 98 4b 60 99 6d 8a 9c 40 8d b0 74 6e 3b 26 31 a8 27 c1 98 02 4e 34 99 d5 15 4c ae d3 12 78 cc b2 d4 39 12 32 cb b3 1c f5 05 b0 9d 15 70 30 6e 05 39 1c ab ae 0b f1 10 39 f4 8b b3 83 9d e8 7a 06 b0 1b 0a 16 02 fe a8 73 2a c3 99 5f f3 ac 56 6d 28 10 bb 2e 9b e1 b9 a6 53 f7 ee 66 41 0c 40 ae 93 63 48 16 49 33 3f 9d 78 1b ad 5a d7 bf e6 5d a0 8b f3 3c 1c 68 6b 71 d9 00 a4 34 01 18 76 57 00 c6 40 d0 d3 54 43 17 68 d8 18 36 16 4b 0a cc 49 11 ef c3 ee 82 0c f0 13 ea ce f3 76 d2 8e 89 69 72 b9 9b cc 05 64 84 fe 4d 30 46 32 b9 9e 25 3c ee 8c 61 d0 04 21 6a bb 5b 47 dd 83 bd 9a 85 9b fe f1 d1 88 3e 8f 83 21 e4 dd a0 14 36 f2 ec c9 ea 6a 45 f2 0b e8 66 75 ca cb 85 94 f8 c6 6d Data Ascii: Z"+,9.(=>rqRO- K`m@tn;&1'N4Lx92p0n99zs*_Vm(.SfA@cHI3?xZ]<hkq4vW@TCh6KIvirdM0F2%<a!j[G>!6jEfum
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 65 b2 ea f6 00 73 5d 5e 47 83 1f 97 8a f5 a8 6e 31 5a 5e 7a 16 4d ef 47 c1 74 ca 87 b0 66 41 52 5d de af ec b1 02 b5 ca 0e 0f 2a 8b c0 fc dc fa d0 1e 3e a6 56 37 35 a9 2c 37 0c 12 bc 08 02 b0 4c 00 d9 55 97 1c 19 a0 81 c7 12 61 bf 50 ee be 5e bf 25 a8 d4 b0 fe 87 5a e8 a0 6d cb 0b 1c 88 84 cd 8d 8f 2a ba b6 9b d4 b8 5c d0 f5 05 22 22 f6 02 ac 86 6e 51 21 04 88 1a 58 4a c1 36 87 e6 43 d4 b4 dc 25 f9 84 2b 1e 15 15 7c b9 61 fd f2 06 a9 aa 2c fc 11 46 b7 a1 95 57 30 ac 02 77 dc 26 6a 6f e9 48 11 41 a8 5d 75 da a4 a3 e5 9b 22 90 c1 0a 6f 04 ea 69 13 30 08 6d 47 a8 6d 01 f4 a1 6b c9 6c 0a c9 d6 7a 11 97 04 ed 00 a6 8b a6 d8 8e 25 c2 7d bb e5 28 9e 36 c6 93 20 81 9f 38 7f 36 10 99 ad d0 c7 23 df 4b f0 a2 41 5e 4c 36 9d 9c 00 9e ab 95 c3 2d f7 05 ef 91 15 be 93 Data Ascii: es]^Gn1Z^zMGtfAR]>V75,7LUaP^%Zm\""nQ!XJ6C%+\|a,FW0w&joHA]u"oi0mGmklz%}(6 86#KA^L6-
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 98 74 ae 12 2f 50 a1 3c 7a 7f 1a 45 b1 4c a0 70 9e 74 e4 df c9 04 08 19 d1 41 a8 a2 83 30 8f 3e a5 35 91 a1 3c fa cc 87 55 be 96 29 e2 c3 48 8c b2 70 a8 d2 30 2c 45 55 08 05 bf d7 02 99 62 f2 ca b1 8e 99 f9 23 bf c7 e1 e5 1f 66 22 3d 00 e7 c9 e2 13 f6 08 20 63 26 b7 e8 1f 10 93 0a 88 ec 84 81 90 4a 06 90 01 30 a4 19 7d 22 83 53 51 c5 c1 70 ca 77 24 b2 ab a8 c0 4c 96 c5 13 9e 56 6d ad 85 e8 72 f6 c2 b6 2a c7 ca cc 41 38 cb d2 77 4a b4 86 ba 53 88 52 40 52 3c 90 24 28 15 23 4b 59 77 83 04 4e a8 10 e6 b4 98 3b 8f 57 fd 95 d8 a9 3e 0c e2 f4 de 93 bf 73 f1 3a ee d8 67 ea 09 c4 7c 3c 3b 53 1c 53 91 51 da d3 28 df 51 d7 15 0c c9 1a c6 bd c5 e3 1c 52 f7 aa 31 bb ba 8b b0 14 a6 ad 8d 20 81 0f dd 9a c1 fd 39 ec 29 b6 e2 20 bc 89 7e f0 a1 2c 58 53 63 24 b6 28 59 c6 Data Ascii: t/P<zELptA0>5<U)Hp0,EUb#f"= c&J0}"SQpw$LVmr*A8wJSR@R<$(#KYwN;W>s:g\|<;SSQ(QR1 9) ~,XSc$(Y
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 79 ac 58 da 05 be 55 bf f1 03 df 3e e4 a8 0d 0b 13 f4 21 6d 07 ae 3a e0 48 12 e2 47 66 87 c5 1c cc 4a 63 ce 3f fb d3 1f 3c fe 97 ca 6b e9 fb 22 a9 a0 7e ae f3 00 35 82 73 b2 1f 4c 81 1a af 77 df 9f 7c be ec 1c 1e 32 ba 20 44 68 d7 fd 18 64 b1 9a 68 94 49 28 5f ba 18 f0 15 9a 8a 37 1e cd 8b 10 8e 31 76 8e 01 41 28 60 de 72 42 54 ad c5 04 03 1e 6d 53 b2 eb af 54 aa 81 a6 54 67 09 0a cd 7a b9 f9 bc 10 9a 52 af ed b0 d8 97 12 4d 96 3c 55 70 a1 c1 52 e1 ec c9 c2 1a a2 17 ca 45 4f 95 33 a7 b4 54 ce 0f 4d 09 2f aa 45 a8 8d e0 91 9d c3 f0 c4 c8 66 0f c2 76 14 ba 5f 52 a7 20 ea 38 2a 9c 70 98 29 0c dd 3f 31 53 01 d1 de 2c 64 8b 43 f7 8f 85 6c d3 52 83 7e e8 be 2f 35 38 2c 65 e1 a1 fb a9 94 65 56 ca 92 85 ee 6f a5 2c b7 a5 2c 49 e8 be 2b 65 19 9b 27 e3 5d 5a 78 06 Data Ascii: yXU>!m:HGfJc?<k"~5sLw\|2 DhdhI(_71vA(`rBTmSTTgzRM<UpREO3TM/Efv_R 8*p)?1S,dClR~/58,eeVo,,I+e']Zx
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 72 5a 0f 92 1d f1 ac c8 87 6a 67 2a 45 29 cd be e0 fe ab b4 38 48 8a 28 f2 35 25 6c 85 5e e0 90 c2 4e e0 cd b0 f3 86 1e 8e 66 c6 50 1b bf 70 37 65 5c ff 86 a5 e7 03 21 34 8c 8a 52 0b ca 21 39 27 e4 01 62 10 8a fa e9 12 ed 79 4e 97 ac 40 1b 6d 68 4c 93 2c ea 79 02 41 b4 51 50 c8 c9 ef 90 2b 8c 6b 9a a4 92 94 b3 b1 f5 13 a3 d2 f9 c8 71 86 4d 66 13 97 17 97 12 3e b6 e2 7c e9 f4 26 b2 eb 8f 90 3d 0b d9 a7 90 bd 0b 3d fb 59 e8 61 67 e0 53 e3 9b 3f c2 85 53 08 37 e0 c2 c9 24 a9 6f 00 54 b2 32 1a 0e 78 ae 76 9e e2 73 0a ca 02 a1 72 87 02 cf c5 02 a4 73 14 e2 40 b1 85 05 c5 16 c0 9c 41 b2 1f 84 01 99 ba 44 33 78 c1 5b b4 b7 27 25 d3 81 7b 87 11 0a 29 7f b3 bc 9e 24 6d dc 04 87 68 3b eb b2 2d 3c b5 24 17 92 8a 4a 50 a2 dd e0 33 0c 04 27 37 41 80 92 33 7e 0c f0 e0 Data Ascii: rZjg*E)8H(5%l^NfPp7e\!4R!9'byN@mhL,yAQP+kqMf>\|&==YagS?S7$oT2xvsrs@AD3x['%{)$mh;-<$JP3'7A3~
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 9e ec 9d 9d 9d 00 84 88 69 de 86 b6 68 a1 5e 34 c4 42 9d 1d 5d 76 2f b6 8f 0e ce bd 17 d4 fa e7 83 63 58 e2 4b b1 82 2f 36 8d 28 9a e3 17 54 f9 fb 3d 98 c9 ed bd 0e 14 a2 c9 fa dc 39 87 d9 dc a5 ae 78 2f 68 66 4e f7 ce f6 2f a1 3b 67 5f bd 17 af 44 c7 77 2e f7 a1 08 34 77 7a 7a 72 76 0e 4b fd e2 b5 58 b0 c3 bd 1d a8 89 3a b8 d3 ed 9e 5d 1c ee 29 a8 7f d9 30 23 77 21 27 cc f5 4b ea e8 7e e7 e0 f0 f2 fc fd d9 c9 f9 f9 21 d4 f5 92 ba da f9 d0 f9 02 3b e4 b7 8b bd 2e 14 de 32 e0 59 4e f4 c9 fe 3e 00 88 f7 f2 f9 b2 24 b9 14 2f 69 d1 8f f6 76 0f 3a 97 50 db d9 d7 4b 09 c2 2f 5f ca 55 38 b9 38 db d9 bb 3c 3f 38 3a 38 7e 77 b9 7d b1 bf 0f e0 b9 7f 71 78 e8 bd 7c a5 36 63 f7 7d 07 26 ce 7b 49 c3 dc 3d e8 d2 72 75 cf bf 1e ee 75 df ef 61 2f 68 c8 58 08 7a b2 b7 77 Data Ascii: ih^4B]v/cXK/6(T=9x/hfN/;g_Dw.4wzzrvKX:])0#w!'K~!;.2YN>$/iv:PK/_U88<?8:8~w}qx\|6c}&{I=ruua/hXzw
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 64 e7 38 bf 68 66 12 80 8b ea 1a 42 51 00 28 fb 2e f0 76 b0 43 3b 0b 1d ba 43 18 4c f7 ae 67 e9 3d f4 0a be 28 88 e0 8b f8 e1 63 e0 9d 61 b9 33 39 c3 1f 91 b2 c7 73 8b 16 10 43 16 c0 1c 46 9f 7c a4 59 3f f9 a8 22 3a db 82 8c c4 39 97 61 9d f7 b4 03 54 1b 19 32 10 41 95 20 89 61 04 01 0c c1 22 9d 04 de 11 76 e0 48 76 fc 9c ee 1e a1 df 27 d0 6f 7d d5 08 3d 3f 21 30 89 b2 78 80 13 79 82 7b 1a c0 12 a6 10 82 47 7e fc 03 26 0f 43 dc 4f d0 86 c2 0b f1 71 1d c5 f7 30 6d 10 3e d7 d7 84 30 75 f0 7d e8 df 47 59 da 9d 04 23 dc 90 10 b1 8f 42 7c a4 86 03 cc 19 65 88 c7 00 89 28 98 0a ab 03 f8 45 b4 d7 a4 9e 1d 46 e1 f8 dc 4f 7e 20 6b 06 9f 64 dd 52 f6 bc b9 59 8a a1 5b 05 e4 d2 64 b9 92 ae 77 93 fa 2d 30 84 aa 02 90 de f7 c0 3b c5 79 39 2d ce 0b be 0b 17 ee 5f e9 02 Data Ascii: d8hfBQ(.vC;CLg=(ca39sCF\|Y?":9aT2A a"vHv'o}=?!0xy{G~&COq0m>0u}GY#B\|e(EFO~ kdRY[dw-0;y9-_
2024-11-15 21:21:19 UTC	1378	IN	Data Raw: 6e 4c 63 ef 06 bb 71 23 a7 e6 c8 bf 43 8c 8e 8c 6f 02 01 31 05 2f b7 5e 3f 67 53 9c fb bb c3 68 9c c7 37 36 55 34 ec cb 43 7a 64 f6 36 1b cf 5f 53 a4 b4 91 91 2b 5e 6a 6b 60 9b 2f 1a 98 63 27 03 54 da 05 10 9c 9a 89 cd e7 9b 98 b8 2b bc 54 8a b1 5d cc f0 84 d4 59 5e f0 2d cc 02 44 48 9c 5e 71 3f 35 2a 7e b9 d9 a0 ba b1 7f 07 21 51 e4 80 db 94 61 b1 e6 6b fe 02 53 b7 fd c1 8f 68 34 42 9b 70 5b 22 06 e0 37 9a 4e a9 33 5c 57 f7 e4 28 36 44 b9 fb 30 9d 00 98 0f 08 8e 54 3b 4b 2a 5c a3 22 46 b7 26 40 40 4f a2 e9 d0 7b 2e 46 04 1d c2 13 f7 d4 bf c7 f1 ca 09 d5 b3 2f a7 04 50 87 5e cc 87 8a e5 72 45 45 e5 68 06 71 f2 6c 87 35 2c e6 35 16 95 55 f5 c1 5d d2 37 66 ae bc 5b 82 04 26 0e 08 83 3e 50 bc d0 c1 f5 d8 5d 69 2c 4f 17 44 0f 66 79 9f a6 b3 33 c1 83 e0 45 29 Data Ascii: nLcq#Co1/^?gSh76U4Czd6_S+^jk`/c'T+T]Y^-DH^q?5~!QakSh4Bp["7N3\W(6D0T;K\"F&@@O{.F/P^rEEhql5,5U]7f[&>P]i,ODfy3E)

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:20 UTC	535	OUT	GET /s/settings/YKBRC/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:20 UTC	939	IN	HTTP/1.1 200 OK x-goog-generation: 1731705379967889 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 61189 Content-Encoding: gzip x-goog-hash: crc32c=jLUEOg== x-goog-hash: md5=O7ubtau4AYvZn2ufZaZ0Vg== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 61189 Access-Control-Allow-Origin: * X-GUploader-UploadID: AFiumC5ln_qAvjVB1xGKQICgv4gCgSDrS8391VprVEyvlleRt4xcfnuvUO7AZzvVwsu1lwEXLic Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Fri, 15 Nov 2024 21:16:30 GMT Expires: Fri, 15 Nov 2024 21:31:30 GMT Cache-Control: public,max-age=900,no-transform Last-Modified: Fri, 15 Nov 2024 21:16:20 GMT ETag: "3bbb9bb5abb8018bd99f6b9f65a67456" Content-Type: application/json Age: 290 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:20 UTC	439	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd eb 6e dc b8 d6 28 f8 2a 82 8d 01 66 36 36 e5 38 49 a7 2f 40 70 e0 38 ee 6e 9f 2f 6d 07 b1 7b f7 b7 a7 d3 47 a0 24 56 15 db 14 a9 26 29 97 ab 3f 1c 60 5e 63 9e 60 9e 60 9e e0 bc c9 3c c9 80 37 89 ba 54 b9 ac 52 95 ab 12 fd 70 52 a2 28 72 5d 78 59 5c 5c 97 ff 3a 3a fb 13 3e fc 06 65 32 43 e2 e8 87 df ff eb e8 d7 4f 1f 3e a1 29 7a 38 fa e1 e8 04 e6 f8 24 61 59 86 78 82 4e 52 28 e1 89 90 8c 23 71 72 f4 cf a3 4f 28 61 3c fd 84 fe 3a fa e1 b4 7c 12 b9 7d fa eb b7 19 96 88 60 21 8f 7e 38 52 b5 45 de 2c 41 7f 9d 11 c2 e6 b5 3a cd 12 f4 d7 3b 96 2e 8e 7e 98 40 22 90 ae e1 3d ff cf 7f b6 a1 cd d9 82 ca 48 20 7e 8f 13 64 a1 05 a2 c8 32 c8 17 fb 0b 34 9c 22 b2 38 99 b2 14 a6 e9 22 c6 84 60 3a 3d 99 a6 27 49 21 24 cb 10 17 27 e1 3f Data Ascii: n(*f668I/@p8n/m{G$V&)?`^c``<7TRpR(r]xY\\::>e2CO>)z8$aYxNR(#qrO(a<:\|}`!~8RE,A:;.~@"=H ~d24"8"`:='I!$'?
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: cf fe 3a 84 11 01 d3 54 32 b5 65 ec 07 ac 7f fc f3 e8 1d 9a c1 7b cc f8 0d 9e 52 48 6e ac 78 70 f4 c3 7f 1d 5d 10 94 21 2a df 11 96 dc 99 83 ca 0d 22 28 91 8c 1f fd 70 94 e2 fb 20 c5 f7 21 61 30 45 69 30 43 30 45 3c cc 20 c5 13 24 64 40 e1 7d 98 10 04 f9 04 3f 84 14 de 03 c9 72 5d 5f 89 d4 10 53 c4 f5 d3 84 a0 07 c0 d9 3c 28 88 aa a5 6b 72 c5 d3 80 60 fd 80 25 ca 74 cd 94 b3 3c 65 73 1a ce a0 00 94 49 3c c1 89 99 50 16 84 b0 56 18 c4 85 94 8c 1e d7 0a 41 8c 08 09 63 49 cb d6 80 64 d3 29 41 21 65 20 61 05 95 61 bb fe ef 90 63 08 08 8c 11 79 fb f9 e8 ca be ff 5f ff cf ff fa 7f 91 f8 7c f4 47 20 ee a7 bf 73 46 d0 db cf 47 39 47 02 51 a9 3f fe 7c f4 c7 d1 3f 8f 0c 51 15 f1 5e fe f3 f4 0f 35 34 ea 24 3c fe 35 9f 72 98 a2 0f 38 e6 90 2f 3e 32 2e 21 09 2c 6d fd Data Ascii: :T2e{RHnxp]!*"(p !a0Ei0C0E< $d@}?r]_S<(kr`%t<esI<PVAcId)A!e aacy_\|G sFG9GQ?\|?Q^54$<5r8/>2.!,m
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: 22 bb 3a 66 7a 75 fc fe 45 0a 17 e2 89 12 b3 9d 8b 19 9e da 03 56 c2 f2 85 9d d4 4f 9e 7a 9d e2 f7 f5 8f 3f 5e 9e 5f bc fb f5 e6 f2 ea e2 e6 e6 63 6b 04 8d aa ae fd 3d 7e a9 a5 e0 89 03 ca ed 52 a7 2f 26 a7 2f e3 17 2f 41 fc e6 bb d7 e0 75 fc fa 15 f8 3e 3e 7d 01 d0 b7 c9 eb 37 93 ef be 7f 8d 5e 4d 1e 6b cb 3b 06 35 8e 40 a1 dd a6 9c 8a b5 be 70 d9 ba 37 f0 de d7 b4 8a 22 ce b0 1c 87 df 5e 6b 5a 05 a6 d3 35 f4 ac 7f fc cf 7f 1e 99 93 a1 be 77 b9 a6 64 f1 1f 94 cd 69 59 66 2f 96 56 df c8 60 9a 17 d2 0c 8f 1c 0a 31 67 3c 55 7d 9d 33 2a 10 95 e5 0d d0 ed 22 47 fa 8a e9 27 ce 8a fc 32 3d fa e1 45 63 c4 78 0d cd 70 9a 22 da af 99 df 61 21 59 c2 b2 9c 20 89 fe c7 db 24 01 fd da 31 27 47 c3 ce a5 0d bc 5c d5 80 be cb 64 4a 70 b8 c7 53 b3 31 68 25 85 87 e8 e7 23 Data Ascii: ":fzuEVOz?^_ck=~R/&//Au>>}7^Mk;5@p7"^kZ5wdiYf/V`1g<U}3*"G'2=Ecxp"a!Y $1'G\dJpS1h%#
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: d9 de b4 19 84 7a ac d0 68 10 af 7a e1 be b4 66 1c 9a f7 3c 73 06 3e 8e 45 79 e7 7b 63 4c d4 34 6c 6b dd 07 6a 31 55 49 53 d5 ab 66 1b fd 6f 25 cd 42 31 c1 dc cc fe 0d da 70 0b c8 06 4d e8 05 70 83 ef f5 f5 df 06 df c7 85 c0 14 09 a1 97 4b bb 38 fa 65 4f 58 1b 57 4d 73 d3 19 4c 53 b5 5e b9 7e ec e3 a0 5d 24 58 2e 5c fb ea f7 40 8d 0b fd f3 58 58 27 ec be d0 21 4c 1d 70 48 9b 8c 0f 70 df ea ef b8 4c 48 48 ce 59 fa e8 b6 5b 56 1c 68 ef b3 f4 d1 8d 6b 22 5d f3 8f 9c dd 63 9a 6c 32 b8 75 73 9a a3 ab d1 79 22 a3 d7 ed 98 65 39 a4 8b 35 04 09 af e6 70 b2 44 c8 78 8a b8 8b dc b4 72 97 7e 44 8b 75 9c 27 3f d7 44 f0 5d 19 9f 99 6f ad ad 96 b1 23 d3 47 2b f5 cb 48 9c d5 41 ab 34 64 b7 46 a3 de ab 86 8f b3 6d 2f b8 a4 13 b6 01 7d ab 4d a8 ba aa d1 fb 4c df 89 a8 3d Data Ascii: zhzf<s>Ey{cL4lkj1UISfo%B1pMpK8eOXWMsLS^~]$X.\@XX'!LpHpLHHY[Vhk"]cl2usy"e95pDxr~Du'?D]o#G+HA4dFm/}ML=
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: 4c 35 b3 a9 b3 96 6a e3 6f dc 2f 3c 59 63 93 78 2e ef eb 00 9a b0 9d cd 60 5e c5 43 1e ce 16 69 68 ed a9 a2 18 72 5d 31 d4 ee 13 f5 58 5e e6 00 52 36 b3 da 13 70 a3 08 2f 3b a3 49 e9 29 d2 45 13 1d 58 2e b2 ce 3a aa 66 a4 a4 f0 e5 94 29 85 64 ca e6 fd 89 63 2d a1 d1 14 0b c9 21 95 d5 f4 da c4 b1 aa de dc 86 73 ca 6b ad ff d4 ea 5c 92 6d 34 5c 01 26 98 48 c4 37 5c 94 9b ad 0d b6 2c 7b e1 4a 34 0e 12 c6 d5 2e e9 b9 66 af 6b 5d eb 37 e4 da a9 88 dc 81 a6 ea b0 aa e0 61 e4 37 5c df 3c 6a da 05 2d 37 f0 85 6e 43 fb 26 18 b6 ac b7 c5 e8 42 1d d7 3c 55 13 ca f8 8a 9f 9b 16 3f 7f 3e f9 a4 db ac 02 a0 57 db 52 e8 9d 62 eb 0e 59 bf 20 5a 78 58 78 7e 0f 9d 8d d7 12 cd d5 8c 84 43 9d 78 68 c6 48 8a 78 bb 8b e0 da dc 67 7a 5d 95 79 10 34 7e 55 42 d4 55 d3 77 0d b7 d0 Data Ascii: L5jo/<Ycx.`^Cihr]1X^R6p/;I)EX.:f)dc-!sk\m4\&H7\,{J4.fk]7a7\<j-7nC&B<U?>WRbY ZxXx~CxhHxgz]y4~UBUw
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: d6 52 6c b8 45 0f e4 55 86 d1 fa 0d fa ef 2c fe 13 25 32 b8 d6 ff fd e1 ad 8e 90 98 2b f5 ed 80 a9 9f 72 b8 30 81 90 01 81 54 af 5e 0a 4e d0 74 13 dc 15 d0 5b bd 8b 34 96 2a 62 17 b7 91 86 b6 fe 1d 7b d7 5d 9b 29 d1 67 9b 95 39 78 1b 6f ec 65 91 d1 67 e7 65 7e db 1c fa 8d cf a0 00 33 99 69 60 a0 e7 26 13 08 c9 19 9d f6 1d 52 5e 0f ad e8 ca 43 a6 f7 ae 2f 25 66 45 43 e9 06 73 21 2c 1e 40 8a 05 2f 72 09 62 98 dc a5 dc 26 f9 f1 ca 3d 5b 1a 03 cc 84 25 85 00 84 25 77 aa 0e 8c 09 4a 3d d3 39 5d 4f c2 18 d3 14 3d bc fd 7c 04 4e cb 38 f0 a7 88 cf 5e 7c 33 35 8d ab d3 35 10 33 44 88 7a 36 c9 f6 8a 07 6d 0a 6a 26 95 2e aa ee b2 ba 33 d6 55 4d d9 ec a7 8d 52 df 10 28 3b 25 d3 37 df fd d5 3b de 75 ed 7a 2e 14 a7 df ff b9 78 f3 f2 cf ae 1d 31 05 b5 ed 6e d3 f0 a4 d6 Data Ascii: RlEU,%2+r0T^Nt[4*b{])g9xoege~3i`&R^C/%fECs!,@/rb&=[%%wJ=9]O=\|N8^\|3553Dz6mj&.3UMR(;%7;uz.x1n
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: 6d 27 2c d2 41 13 f0 2b a3 94 fa a2 e0 04 50 26 71 82 b6 65 5e f4 38 6a 61 e6 20 d3 41 64 6b 98 36 7c 9b 3b 30 2d fc 95 78 02 ff 02 7f 15 0a 65 46 45 75 97 ba 13 cc 28 bc af f9 6c 6f e5 46 18 d6 a9 63 aa 1b ba 6d 96 7a e2 90 b0 b5 87 fc 7d 43 78 38 e3 85 6e bc 35 2c c3 21 5d fe b5 d4 c7 9b 45 c8 58 a3 83 e6 9f af 2f d2 57 d1 57 03 69 89 fa 81 40 e0 73 40 d0 84 62 b0 8b df 7e 44 18 ec ba b6 27 05 9e 0b ef b8 10 98 22 21 9e 77 08 0e 78 77 d1 0f 80 04 cb 41 e2 1c f4 eb 5d 27 cf 7b be ee ff c6 f9 f3 ce 7d 37 08 cf a1 44 53 c6 77 cc 89 d6 52 80 07 d1 06 2c 07 60 20 3b b7 95 18 0e d7 7a aa a3 3c 0f db de 56 80 dc 5a c3 9b 1f 15 ea c4 ec 1d c9 79 49 7b af b6 43 c7 a1 e1 dc 12 39 b7 39 b3 86 1c f7 03 a3 3d 34 aa ea 6f 93 10 92 8f 1e 30 82 ee 13 ed b2 90 84 a5 32 Data Ascii: m',A+P&qe^8ja Adk6\|;0-xeFEu(loFcmz}Cx8n5,!]EX/WWi@s@b~D'"!wxwA]'{}7DSwR,` ;z<VZyI{C99=4o02
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: 90 d5 0d 48 8e a7 d3 61 5d b4 57 a6 60 87 54 42 8e 04 90 33 94 a1 fa dd 93 99 34 c6 a9 b2 fb 2a c7 bb 23 02 b6 a1 e6 35 cc b3 5a 54 55 69 03 7b 6d ab 1b 0f 0d b3 c8 78 95 dc dc 96 86 ef c1 53 8c 83 f7 07 d2 e5 96 d6 4f 15 0e eb c7 3d 4c 41 8e b8 60 14 d4 82 aa d7 2e 1c 97 d4 59 11 78 3d 68 ba 3b 6b c9 af a3 1d 81 24 28 72 10 33 cf a1 79 55 1c c0 0e d3 89 5a ff 2e 07 ac 95 fd 14 3c 5e f5 9a 15 85 11 6a eb f5 6b f2 d1 92 77 26 e9 75 fd 42 d6 54 4c bc f4 06 43 c4 79 57 2b ae 2f c4 ba b4 d0 70 62 7c da 1b 39 a5 6b 75 ca 3b 61 bf 54 c9 eb 57 ee 88 d2 28 33 93 7f 4f 60 2e 48 59 68 dc 77 09 0e 60 59 e4 3c 69 7d c1 21 87 34 4d c2 7b 35 c2 a3 52 03 63 c5 82 14 8a 99 1e 61 a1 3a c3 eb 03 45 98 10 9c dc 55 5b 99 03 5d 5f 55 63 aa ed 2c 72 48 ab 32 bd 93 34 ca be 58 Data Ascii: Ha]W`TB34*#5ZTUi{mxSO=LA`.Yx=h;k$(r3yUZ.<^jkw&uBTLCyW+/pb\|9ku;aTW(3O`.HYhw`Y<i}!4M{5Rca:EU[]_Uc,rH24X
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: a3 c0 03 76 75 8e 31 21 98 4e db 87 8d 26 26 cb ce 70 c7 ce 8e c9 d7 45 e8 21 eb 5e 4c 39 36 63 c0 15 e8 b1 c0 ee 11 27 70 d1 71 ad 5e ab e7 5b 74 58 98 43 0b 73 e5 46 12 43 a1 8e 89 04 55 86 67 16 d8 32 f0 e0 ba 07 e9 47 f4 0b 4f e6 37 4c d3 55 cc ae 9d ac 6d dd 7d 83 ed 78 e9 57 7d 73 e8 b9 c0 66 42 ac 0c df fe 14 ed 57 e0 ae c1 8e ed 0c 7b da 95 d8 b1 9f 28 d6 81 d7 48 1e 3b 50 ae 85 60 0f 3d 8b 9a 0e 59 a3 75 f5 b3 7b 94 8e 44 db 95 97 43 b9 17 5a 63 46 2d 87 f4 bb 10 0f b3 02 1b 7d e5 63 ad ac 5a db 3a 6e 9d 38 9b 03 51 c4 8f 5e 76 af 6a 36 d4 d9 ea ca cd 95 ab c7 30 07 af 7b 35 76 ac 2d a7 26 88 5f 17 f2 9c 65 39 41 6a 77 50 d2 6b c0 48 98 13 f0 2a 20 38 cc 63 f0 52 33 26 58 ad ae 5d 09 76 f1 60 0c e6 8c ed 82 a6 8d c0 7f f7 a5 6d 4e 60 82 66 8c a4 Data Ascii: vu1!N&&pE!^L96c'pq^[tXCsFCUg2GO7LUm}xW}sfBW{(H;P`=Yu{DCZcF-}cZ:n8Q^vj60{5v-&_e9AjwPkH* 8cR3&X]v`mN`f
2024-11-15 21:21:20 UTC	1378	IN	Data Raw: 82 18 12 75 be df 60 99 93 b3 ae e6 aa 05 54 30 de 4f 9a 72 fa c6 ce b6 9b 8b fe 2a 10 36 48 b9 23 97 b7 6c dd d5 96 bd ee cf 9d 27 1d 23 6b 52 b3 53 a6 d5 52 c4 28 7e bb 17 b5 07 50 8b 4e 64 03 df 75 a9 9c d7 f9 a0 b5 32 ba ba 19 92 33 96 82 32 f8 5d 1e 6a 5a 0c 6e 5a 36 58 78 0f b5 39 a4 88 0a 94 02 91 c3 04 d3 e9 d3 a3 cb 54 c9 aa 6b 09 b6 92 19 a4 14 11 f1 95 46 9b e9 a4 6c ef 0c ea 35 8a 8e 74 dc 23 3a 7e 25 94 73 ae e8 e3 e0 eb 3f f8 90 94 04 99 a2 91 88 7d 83 4a 39 ab e3 91 82 3d 29 c8 78 3a 4e e3 0d e8 a7 0d b6 47 ea f5 0e 3d b8 f4 0a 7c a4 e0 7a 97 d4 b9 8b 56 3c d2 70 4f 68 f8 95 50 8d b0 05 24 72 31 0e bb de c3 ce 44 a2 c4 74 ba 47 34 5c 5f 03 d3 48 e6 a6 ff 5a 7e f5 81 17 f0 bf 1e 9e d9 cf 1b e5 a5 96 da 24 cb fe 4e 60 d7 01 2e 8d 13 21 63 44 Data Ascii: u`T0Or*6H#l'#kRSR(~PNdu232]jZnZ6Xx9TkFl5t#:~%s?}J9=)x:NG=\|zV<pOhP$r1DtG4\_HZ~$N`.!cD

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	221429
Entropy (8bit):	5.538395939429366
Encrypted:	false
SSDEEP:	3072:L7II4PXhz039EOCHy0trSNEidT6BICQ3mZRnuKz/knHHqFKfTZ:XYhz0tEOnsJuKz/knHHqGZ
MD5:	47B7937FDAA37277006701B79D7588AF
SHA1:	3A6C6EB7481A5D9FD7167512CD889F84E0BBE8C1
SHA-256:	3C17262C25208743CC01CE3EB5AEA36EF279C391D0013820D01C6F788D3ED068
SHA-512:	B2EADF59E1B7B4CEFD0FC420E376956EB16740F4F46DCEA312B9B47313A3A71C9CDD316EC7C3CA53F8814C6DDE2129AE773153E81D84BAE88561E6FBD5CE8477
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-115508484-1&l=_analyticsDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	888
Entropy (8bit):	4.212446763958118
Encrypted:	false
SSDEEP:	24:tGNttGzFDu+IQNN6EfVazHwBNxwio+NabFBl3iQmLPyyQsYiIND9:fzFdIQ7nfVazHQwiPabrmLosYiaZ
MD5:	96206A3BAA78B49C9747CD9F5AEC3E31
SHA1:	E8F5CB66107966676B98722BAFF62855819D9033
SHA-256:	B4040E95722EB3CE418E418EDE6A6C0F8BBE0EB2702569E8F9912ECB76F5E027
SHA-512:	D82AC4E2F8A2F68AF44A1E957945987F2EB1CA7DD96875B4A37B08DA041FA5BAC6E895FAAEEC130FE31E992480AE0F3DE21EAC3175BE57C94EC221D3CACC780E
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="118" viewBox="0 0 118 118" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M92.99 104.36C94.65 104.54 96.3 103.98 97.55 102.88C109.79 92.11 117.52 76.34 117.52 58.76C117.52 48.69 114.99 39.22 110.52 30.94C110.44 30.8 110.37 30.66 110.29 30.52C109.97 29.93 109.63 29.35 109.28 28.77C109.13 28.52 108.98 28.27 108.83 28.02C98.49 11.21 79.93 0 58.75 0C50.31 0 42.29 1.79 35.04 5C60.48 8.06 83.08 26.28 83.08 26.28L93.93 17.46L90.13 64.57L55.13 50.7L67.42 40.11C52.73 20.69 38.3 13.46 25.99 11.98C24.37 11.79 22.75 12.29 21.5 13.33C8.37 24.11 0 40.45 0 58.76C0 67.57 1.94998 75.91 5.41998 83.41C7.38998 87.54 9.81001 91.46 12.6 95.09C23.36 108.74 40.03 117.51 58.76 117.51C67.99 117.51 76.71 115.38 84.48 111.59C57.68 108.99 33.59 89.46 33.59 89.46L22.33 98.51L26.33 50.08L62.33 64.37L49.69 75.27C65.08 95.65 80.18 103 92.99 104.36Z" fill="#00E356"/>.</svg>.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58454)
Category:	downloaded
Size (bytes):	58506
Entropy (8bit):	5.175109271749753
Encrypted:	false
SSDEEP:	768:5YVs7HSy2wqiBefd8CQUPL/0pu9zg2st4NCYm8etWt4+8:5YVqHSzU0ffGt5YmRti4
MD5:	0BE4C885D07E54ABB224234982B34FD7
SHA1:	82BA6A8B59F75A865BCC0CE7E242491156EAD595
SHA-256:	8D79C92638E9125038FB1FAAD3896558FEBEE2ED0C34F87E9D01C6F161999342
SHA-512:	24C61882F0C8665A6B121CC08829993235132630263D8A53DB50488B7F5FCA58B5389482D12D42F7291747C0A1E828EAC6ABB5995A278432E10FCF6039118EC4
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js
Preview:	!function(){var t={816:function(t,e,n){var r,i,a;!function(o,s){"use strict";i=[n(170)],void 0===(a="function"==typeof(r=function(t){var e=/(^\|@)\S+\:\d+/,n=/^\sat .(\S+\:\d+\|\(native\))/m,r=/^(eval@)?(\[native code\])?$/;function i(t,e,n){if("function"==typeof Array.prototype.map)return t.map(e,n);for(var r=new Array(t.length),i=0;i<t.length;i++)r[i]=e.call(n,t[i]);return r}function a(t,e,n){if("function"==typeof Array.prototype.filter)return t.filter(e,n);for(var r=[],i=0;i<t.length;i++)e.call(n,t[i])&&r.push(t[i]);return r}return{parse:function(t){if(void 0!==t.stacktrace\|\|void 0!==t["opera#sourceloc"])return this.parseOpera(t);if(t.stack&&t.stack.match(n))return this.parseV8OrIE(t);if(t.stack)return this.parseFFOrSafari(t);throw new Error("Cannot parse given Error object")},extractLocation:function(t){if(-1===t.indexOf(":"))return[t];var e=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[\(\)]/g,""));return[e[1],e[2]\|\|void 0,e[3]\|\|void 0]},parseV8OrIE:function(e){return i(a(e.st

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17715
Entropy (8bit):	3.8708550593179494
Encrypted:	false
SSDEEP:	384:THhGhWwFTFnl+kS0WG6twb+5sCAF/4kjwOs6CXsx:zhhwjHSvt8+mCAVjwOWXsx
MD5:	7EAD088DC2FC93A5098D22DF29E83A0F
SHA1:	BA24A2E3733E34E311FD68581CB846A1BB328F63
SHA-256:	AC6C986A8F5D8A4ED308AD3120B44FDA7F1AEF921C06D47B35DB4B1F9972654E
SHA-512:	2FEB717BFF42CAC6598D37A8114919BBDF0DDCC967EBAB4025E4BA0600B97AF5F098B0CB374233E4E75F5661FA28C85EFB814063E5AAA22B3E4D411CE71ABBF9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/private_label/497036/desktopLogo.7ead088dc2fc93a5098d22df29e83a0f.svg
Preview:	<svg width="191" height="24" viewBox="0 0 191 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M114.996 2.48927H114.704V21.5193H114.996V2.48927Z" fill="#111111"/>.<path d="M9.897 11.279C9.75107 10.7296 9.44206 10.1974 8.98712 9.69099C8.58369 9.25322 8.0515 8.90987 7.39914 8.66953C6.75536 8.43777 5.96566 8.3176 5.03004 8.3176C4.27468 8.3176 3.54506 8.37768 2.86695 8.50644C2.20601 8.62661 1.6824 8.74678 1.32189 8.87554L1.09013 8.96137L1.12446 9.20172L1.45923 11.3991L1.51073 11.7597L1.85408 11.6395C2.17167 11.5279 2.57511 11.4249 3.07296 11.3391C3.5794 11.2532 4.14592 11.2103 4.7382 11.2103C5.1588 11.2103 5.49356 11.2618 5.77682 11.3648C6.01717 11.4592 6.19743 11.588 6.3691 11.7854C6.51502 11.9571 6.57511 12.1631 6.64378 12.4206C6.67811 12.5579 6.66953 12.721 6.65236 12.9099C6.64378 13.0215 6.63519 13.133 6.63519 13.2446V13.2876C6.48927 13.2618 6.30901 13.2446 6.11159 13.2189L6.02575 13.2103C5.67382 13.1674 5.46781 13.1502 5.1588 13.1502C4.49785 13.1502 3.85408 13.2189 3.24464

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:20 UTC	349	OUT	GET /s/fs.js HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:21 UTC	969	IN	HTTP/1.1 200 OK x-goog-generation: 1731593162034275 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 93866 Content-Encoding: gzip x-goog-hash: crc32c=0285nQ== x-goog-hash: md5=aXXmUk1DS8oZpTcmb6DAyw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 93866 Access-Control-Allow-Origin: * X-GUploader-UploadID: AFiumC5M1r4gUwpgyVFg8UvwrFBoDCFdOmDLnWW8kRBc1P0peUEBnRh_6jlIubkOrsoFwjlYIg Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Fri, 15 Nov 2024 21:09:57 GMT Expires: Fri, 15 Nov 2024 22:09:57 GMT Cache-Control: public, max-age=3600,no-transform Age: 683 Last-Modified: Thu, 14 Nov 2024 14:06:02 GMT ETag: "6975e6524d434bca19a537266fa0c0cb" Content-Type: application/javascript vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:21 UTC	409	IN	Data Raw: 1f 8b 08 08 c9 03 36 67 02 ff 74 6d 70 71 65 7a 71 72 67 73 71 00 dc bd 79 7f db c6 b2 28 f8 ff fb 14 14 8e 9f 0e 10 b5 28 52 f2 0a 1a e1 a5 36 5b b6 b6 88 92 97 d0 3c fa 41 64 93 84 4d 01 0c 16 2d 91 f8 dd a7 aa 7a 41 03 04 e5 24 77 ee cc 9b 39 27 16 1b bd 2f d5 d5 55 dd b5 6c 6c ac 9c 4f 82 a4 36 88 86 bc 06 bf 33 3f 4e 6b d1 a8 96 4e 78 ad cb e3 9b 60 c0 21 32 8e 6e 82 21 1f d6 ae ee 6b fb d9 74 da 4d a3 f8 9e d5 0e c2 41 bd b6 1f c5 b5 29 e4 0a 13 28 1f 8e a2 f8 da 4f 83 28 64 b5 d9 94 fb 10 17 f3 11 8f 6b 69 54 9b a4 e9 2c 71 37 36 6e 6f 6f eb 23 a8 24 c1 4a ea 83 e8 7a 63 ca c7 fe 74 23 e5 f1 75 b2 ee 87 c3 f5 41 14 0e 03 ac 24 d9 f8 5f 1b 1b 2b a7 51 4c 1f a2 5b aa af 7e cc 55 bb c3 5a 16 0e b1 11 e8 f3 28 9a 4e a3 db 20 1c ab 44 17 ab a8 2d eb a6 Data Ascii: 6gtmpqezqrgsqy((R6[<AdM-zA$w9'/UllO63?NkNx`!2n!ktMA)(O(dkiT,q76noo#$Jzct#uA$_+QL[~UZ(N D-
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 73 87 e2 e6 2d 55 77 4d 8e 24 18 d9 96 8a b3 56 3c ac 11 ba 19 ac ae 86 b0 6a 2b 9e 17 38 e9 24 8e 6e 6b 21 bf ad 9d 43 e2 5e 1c 43 7f ac 9d a9 9f 24 35 7e 97 f2 70 98 d4 6e fc 69 c6 6b d6 5a 17 a6 2f 1c db 81 b3 66 21 78 85 51 5a f3 61 01 61 f8 71 36 00 08 a8 c1 7f 58 af e5 e4 fd 88 61 8a 71 a1 eb 46 3e 98 85 94 ba c7 c2 7c a0 1e 96 f4 a0 47 6d 39 05 83 98 fb 29 87 d6 5c 3b 36 b2 05 79 98 61 af 63 67 4e d3 e7 19 6b 2a d6 0f e2 64 55 30 98 60 1c 9a 33 9f cf 3b f4 c3 6b b2 d8 f3 e3 71 76 cd c3 34 a9 4f 79 38 4e 27 ad e0 6d dc 0a d6 d6 1c 95 91 d3 02 e5 f9 70 de ff e2 6a 71 b1 5a 1c 57 8b f7 9d 96 ec 5f 3a 67 41 dd 9f cd a6 f7 36 4e 11 d3 55 9b 0b 19 23 98 b0 80 c5 7a 58 30 6a 3b 78 7c b4 03 0f da b9 0e 12 ee 38 b6 1e 19 67 09 8c 4d 15 ce 70 a4 69 7c ff e0 Data Ascii: s-UwM$V<j+8$nk!C^C$5~pnikZ/f!xQZaaq6XaqF>\|Gm9)\;6yacgNk*dU0`3;kqv4Oy8N'mpjqZW_:gA6NU#zX0j;x\|8gMpi\|
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 5a 22 b9 e8 2b 0d 2c 92 39 82 ce 80 2e 28 d4 97 3d 3e 72 71 18 f6 52 b5 4f 2d 16 20 a9 92 a7 98 4b 60 99 6d 8a 9c 40 8d b0 74 6e 3b 26 31 a8 27 c1 98 02 4e 34 99 d5 15 4c ae d3 12 78 cc b2 d4 39 12 32 cb b3 1c f5 05 b0 9d 15 70 30 6e 05 39 1c ab ae 0b f1 10 39 f4 8b b3 83 9d e8 7a 06 b0 1b 0a 16 02 fe a8 73 2a c3 99 5f f3 ac 56 6d 28 10 bb 2e 9b e1 b9 a6 53 f7 ee 66 41 0c 40 ae 93 63 48 16 49 33 3f 9d 78 1b ad 5a d7 bf e6 5d a0 8b f3 3c 1c 68 6b 71 d9 00 a4 34 01 18 76 57 00 c6 40 d0 d3 54 43 17 68 d8 18 36 16 4b 0a cc 49 11 ef c3 ee 82 0c f0 13 ea ce f3 76 d2 8e 89 69 72 b9 9b cc 05 64 84 fe 4d 30 46 32 b9 9e 25 3c ee 8c 61 d0 04 21 6a bb 5b 47 dd 83 bd 9a 85 9b fe f1 d1 88 3e 8f 83 21 e4 dd a0 14 36 f2 ec c9 ea 6a 45 f2 0b e8 66 75 ca cb 85 94 f8 c6 6d Data Ascii: Z"+,9.(=>rqRO- K`m@tn;&1'N4Lx92p0n99zs*_Vm(.SfA@cHI3?xZ]<hkq4vW@TCh6KIvirdM0F2%<a!j[G>!6jEfum
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 65 b2 ea f6 00 73 5d 5e 47 83 1f 97 8a f5 a8 6e 31 5a 5e 7a 16 4d ef 47 c1 74 ca 87 b0 66 41 52 5d de af ec b1 02 b5 ca 0e 0f 2a 8b c0 fc dc fa d0 1e 3e a6 56 37 35 a9 2c 37 0c 12 bc 08 02 b0 4c 00 d9 55 97 1c 19 a0 81 c7 12 61 bf 50 ee be 5e bf 25 a8 d4 b0 fe 87 5a e8 a0 6d cb 0b 1c 88 84 cd 8d 8f 2a ba b6 9b d4 b8 5c d0 f5 05 22 22 f6 02 ac 86 6e 51 21 04 88 1a 58 4a c1 36 87 e6 43 d4 b4 dc 25 f9 84 2b 1e 15 15 7c b9 61 fd f2 06 a9 aa 2c fc 11 46 b7 a1 95 57 30 ac 02 77 dc 26 6a 6f e9 48 11 41 a8 5d 75 da a4 a3 e5 9b 22 90 c1 0a 6f 04 ea 69 13 30 08 6d 47 a8 6d 01 f4 a1 6b c9 6c 0a c9 d6 7a 11 97 04 ed 00 a6 8b a6 d8 8e 25 c2 7d bb e5 28 9e 36 c6 93 20 81 9f 38 7f 36 10 99 ad d0 c7 23 df 4b f0 a2 41 5e 4c 36 9d 9c 00 9e ab 95 c3 2d f7 05 ef 91 15 be 93 Data Ascii: es]^Gn1Z^zMGtfAR]>V75,7LUaP^%Zm\""nQ!XJ6C%+\|a,FW0w&joHA]u"oi0mGmklz%}(6 86#KA^L6-
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 98 74 ae 12 2f 50 a1 3c 7a 7f 1a 45 b1 4c a0 70 9e 74 e4 df c9 04 08 19 d1 41 a8 a2 83 30 8f 3e a5 35 91 a1 3c fa cc 87 55 be 96 29 e2 c3 48 8c b2 70 a8 d2 30 2c 45 55 08 05 bf d7 02 99 62 f2 ca b1 8e 99 f9 23 bf c7 e1 e5 1f 66 22 3d 00 e7 c9 e2 13 f6 08 20 63 26 b7 e8 1f 10 93 0a 88 ec 84 81 90 4a 06 90 01 30 a4 19 7d 22 83 53 51 c5 c1 70 ca 77 24 b2 ab a8 c0 4c 96 c5 13 9e 56 6d ad 85 e8 72 f6 c2 b6 2a c7 ca cc 41 38 cb d2 77 4a b4 86 ba 53 88 52 40 52 3c 90 24 28 15 23 4b 59 77 83 04 4e a8 10 e6 b4 98 3b 8f 57 fd 95 d8 a9 3e 0c e2 f4 de 93 bf 73 f1 3a ee d8 67 ea 09 c4 7c 3c 3b 53 1c 53 91 51 da d3 28 df 51 d7 15 0c c9 1a c6 bd c5 e3 1c 52 f7 aa 31 bb ba 8b b0 14 a6 ad 8d 20 81 0f dd 9a c1 fd 39 ec 29 b6 e2 20 bc 89 7e f0 a1 2c 58 53 63 24 b6 28 59 c6 Data Ascii: t/P<zELptA0>5<U)Hp0,EUb#f"= c&J0}"SQpw$LVmr*A8wJSR@R<$(#KYwN;W>s:g\|<;SSQ(QR1 9) ~,XSc$(Y
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 79 ac 58 da 05 be 55 bf f1 03 df 3e e4 a8 0d 0b 13 f4 21 6d 07 ae 3a e0 48 12 e2 47 66 87 c5 1c cc 4a 63 ce 3f fb d3 1f 3c fe 97 ca 6b e9 fb 22 a9 a0 7e ae f3 00 35 82 73 b2 1f 4c 81 1a af 77 df 9f 7c be ec 1c 1e 32 ba 20 44 68 d7 fd 18 64 b1 9a 68 94 49 28 5f ba 18 f0 15 9a 8a 37 1e cd 8b 10 8e 31 76 8e 01 41 28 60 de 72 42 54 ad c5 04 03 1e 6d 53 b2 eb af 54 aa 81 a6 54 67 09 0a cd 7a b9 f9 bc 10 9a 52 af ed b0 d8 97 12 4d 96 3c 55 70 a1 c1 52 e1 ec c9 c2 1a a2 17 ca 45 4f 95 33 a7 b4 54 ce 0f 4d 09 2f aa 45 a8 8d e0 91 9d c3 f0 c4 c8 66 0f c2 76 14 ba 5f 52 a7 20 ea 38 2a 9c 70 98 29 0c dd 3f 31 53 01 d1 de 2c 64 8b 43 f7 8f 85 6c d3 52 83 7e e8 be 2f 35 38 2c 65 e1 a1 fb a9 94 65 56 ca 92 85 ee 6f a5 2c b7 a5 2c 49 e8 be 2b 65 19 9b 27 e3 5d 5a 78 06 Data Ascii: yXU>!m:HGfJc?<k"~5sLw\|2 DhdhI(_71vA(`rBTmSTTgzRM<UpREO3TM/Efv_R 8*p)?1S,dClR~/58,eeVo,,I+e']Zx
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 72 5a 0f 92 1d f1 ac c8 87 6a 67 2a 45 29 cd be e0 fe ab b4 38 48 8a 28 f2 35 25 6c 85 5e e0 90 c2 4e e0 cd b0 f3 86 1e 8e 66 c6 50 1b bf 70 37 65 5c ff 86 a5 e7 03 21 34 8c 8a 52 0b ca 21 39 27 e4 01 62 10 8a fa e9 12 ed 79 4e 97 ac 40 1b 6d 68 4c 93 2c ea 79 02 41 b4 51 50 c8 c9 ef 90 2b 8c 6b 9a a4 92 94 b3 b1 f5 13 a3 d2 f9 c8 71 86 4d 66 13 97 17 97 12 3e b6 e2 7c e9 f4 26 b2 eb 8f 90 3d 0b d9 a7 90 bd 0b 3d fb 59 e8 61 67 e0 53 e3 9b 3f c2 85 53 08 37 e0 c2 c9 24 a9 6f 00 54 b2 32 1a 0e 78 ae 76 9e e2 73 0a ca 02 a1 72 87 02 cf c5 02 a4 73 14 e2 40 b1 85 05 c5 16 c0 9c 41 b2 1f 84 01 99 ba 44 33 78 c1 5b b4 b7 27 25 d3 81 7b 87 11 0a 29 7f b3 bc 9e 24 6d dc 04 87 68 3b eb b2 2d 3c b5 24 17 92 8a 4a 50 a2 dd e0 33 0c 04 27 37 41 80 92 33 7e 0c f0 e0 Data Ascii: rZjg*E)8H(5%l^NfPp7e\!4R!9'byN@mhL,yAQP+kqMf>\|&==YagS?S7$oT2xvsrs@AD3x['%{)$mh;-<$JP3'7A3~
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 9e ec 9d 9d 9d 00 84 88 69 de 86 b6 68 a1 5e 34 c4 42 9d 1d 5d 76 2f b6 8f 0e ce bd 17 d4 fa e7 83 63 58 e2 4b b1 82 2f 36 8d 28 9a e3 17 54 f9 fb 3d 98 c9 ed bd 0e 14 a2 c9 fa dc 39 87 d9 dc a5 ae 78 2f 68 66 4e f7 ce f6 2f a1 3b 67 5f bd 17 af 44 c7 77 2e f7 a1 08 34 77 7a 7a 72 76 0e 4b fd e2 b5 58 b0 c3 bd 1d a8 89 3a b8 d3 ed 9e 5d 1c ee 29 a8 7f d9 30 23 77 21 27 cc f5 4b ea e8 7e e7 e0 f0 f2 fc fd d9 c9 f9 f9 21 d4 f5 92 ba da f9 d0 f9 02 3b e4 b7 8b bd 2e 14 de 32 e0 59 4e f4 c9 fe 3e 00 88 f7 f2 f9 b2 24 b9 14 2f 69 d1 8f f6 76 0f 3a 97 50 db d9 d7 4b 09 c2 2f 5f ca 55 38 b9 38 db d9 bb 3c 3f 38 3a 38 7e 77 b9 7d b1 bf 0f e0 b9 7f 71 78 e8 bd 7c a5 36 63 f7 7d 07 26 ce 7b 49 c3 dc 3d e8 d2 72 75 cf bf 1e ee 75 df ef 61 2f 68 c8 58 08 7a b2 b7 77 Data Ascii: ih^4B]v/cXK/6(T=9x/hfN/;g_Dw.4wzzrvKX:])0#w!'K~!;.2YN>$/iv:PK/_U88<?8:8~w}qx\|6c}&{I=ruua/hXzw
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 64 e7 38 bf 68 66 12 80 8b ea 1a 42 51 00 28 fb 2e f0 76 b0 43 3b 0b 1d ba 43 18 4c f7 ae 67 e9 3d f4 0a be 28 88 e0 8b f8 e1 63 e0 9d 61 b9 33 39 c3 1f 91 b2 c7 73 8b 16 10 43 16 c0 1c 46 9f 7c a4 59 3f f9 a8 22 3a db 82 8c c4 39 97 61 9d f7 b4 03 54 1b 19 32 10 41 95 20 89 61 04 01 0c c1 22 9d 04 de 11 76 e0 48 76 fc 9c ee 1e a1 df 27 d0 6f 7d d5 08 3d 3f 21 30 89 b2 78 80 13 79 82 7b 1a c0 12 a6 10 82 47 7e fc 03 26 0f 43 dc 4f d0 86 c2 0b f1 71 1d c5 f7 30 6d 10 3e d7 d7 84 30 75 f0 7d e8 df 47 59 da 9d 04 23 dc 90 10 b1 8f 42 7c a4 86 03 cc 19 65 88 c7 00 89 28 98 0a ab 03 f8 45 b4 d7 a4 9e 1d 46 e1 f8 dc 4f 7e 20 6b 06 9f 64 dd 52 f6 bc b9 59 8a a1 5b 05 e4 d2 64 b9 92 ae 77 93 fa 2d 30 84 aa 02 90 de f7 c0 3b c5 79 39 2d ce 0b be 0b 17 ee 5f e9 02 Data Ascii: d8hfBQ(.vC;CLg=(ca39sCF\|Y?":9aT2A a"vHv'o}=?!0xy{G~&COq0m>0u}GY#B\|e(EFO~ kdRY[dw-0;y9-_
2024-11-15 21:21:21 UTC	1378	IN	Data Raw: 6e 4c 63 ef 06 bb 71 23 a7 e6 c8 bf 43 8c 8e 8c 6f 02 01 31 05 2f b7 5e 3f 67 53 9c fb bb c3 68 9c c7 37 36 55 34 ec cb 43 7a 64 f6 36 1b cf 5f 53 a4 b4 91 91 2b 5e 6a 6b 60 9b 2f 1a 98 63 27 03 54 da 05 10 9c 9a 89 cd e7 9b 98 b8 2b bc 54 8a b1 5d cc f0 84 d4 59 5e f0 2d cc 02 44 48 9c 5e 71 3f 35 2a 7e b9 d9 a0 ba b1 7f 07 21 51 e4 80 db 94 61 b1 e6 6b fe 02 53 b7 fd c1 8f 68 34 42 9b 70 5b 22 06 e0 37 9a 4e a9 33 5c 57 f7 e4 28 36 44 b9 fb 30 9d 00 98 0f 08 8e 54 3b 4b 2a 5c a3 22 46 b7 26 40 40 4f a2 e9 d0 7b 2e 46 04 1d c2 13 f7 d4 bf c7 f1 ca 09 d5 b3 2f a7 04 50 87 5e cc 87 8a e5 72 45 45 e5 68 06 71 f2 6c 87 35 2c e6 35 16 95 55 f5 c1 5d d2 37 66 ae bc 5b 82 04 26 0e 08 83 3e 50 bc d0 c1 f5 d8 5d 69 2c 4f 17 44 0f 66 79 9f a6 b3 33 c1 83 e0 45 29 Data Ascii: nLcq#Co1/^?gSh76U4Czd6_S+^jk`/c'T+T]Y^-DH^q?5~!QakSh4Bp["7N3\W(6D0T;K\"F&@@O{.F/P^rEEhql5,5U]7f[&>P]i,ODfy3E)

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:21 UTC	566	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 773 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:21 UTC	773	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 59 4b 42 52 43 22 2c 22 55 73 65 72 49 64 22 3a 22 22 2c 22 53 65 73 73 69 6f 6e 49 64 22 3a 22 37 33 39 37 63 31 31 39 2d 38 37 38 30 2d 34 33 32 38 2d 61 64 33 30 2d 32 32 66 31 37 31 62 64 31 34 37 38 22 2c 22 50 61 67 65 49 64 22 3a 22 66 66 32 34 39 38 30 65 2d 31 64 30 39 2d 34 30 65 37 2d 62 36 63 37 2d 32 65 33 62 32 64 65 39 62 61 30 37 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 66 74 65 72 6e 69 63 2e 63 6f 6d 2f 66 6f 72 73 61 6c 65 2f 31 33 2e 32 34 38 2e 31 36 39 2e 34 38 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 54 44 46 53 5f 44 41 53 4c 4e 43 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 70 61 72 6b 65 64 70 61 67 65 73 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 78 5f 63 6f 72 70 5f 74 64 66 73 2d 64 61 Data Ascii: {"OrgId":"YKBRC","UserId":"","SessionId":"7397c119-8780-4328-ad30-22f171bd1478","PageId":"ff24980e-1d09-40e7-b6c7-2e3b2de9ba07","Url":"https://www.afternic.com/forsale/13.248.169.48?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-da
2024-11-15 21:21:21 UTC	313	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.afternic.com Content-Type: application/json; charset=utf-8 Date: Fri, 15 Nov 2024 21:21:21 GMT Content-Length: 1320 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:21 UTC	981	IN	Data Raw: 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 61 66 74 65 72 6e 69 63 2e 63 6f 6d 22 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 53 65 73 73 69 6f 6e 55 55 49 44 22 3a 22 22 2c 22 50 61 67 65 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 36 36 38 30 30 35 34 33 35 34 36 32 30 34 31 36 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 38 35 35 31 31 30 30 33 32 34 38 39 30 31 30 31 37 32 34 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 35 32 31 30 34 31 30 30 30 35 30 31 30 37 36 38 32 33 36 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 33 31 37 30 35 36 38 31 33 35 37 2c Data Ascii: {"Consented":false,"CookieDomain":"afternic.com","PrivacyHash":"","UserUUID":"","SessionUUID":"","PageUUID":"","UserIntId":"6680054354620416","SessionIntId":"8551100324890101724","PageIntId":"5210410005010768236","EmbedToken":"","PageStart":1731705681357,
2024-11-15 21:21:21 UTC	339	IN	Data Raw: 72 73 41 6c 6c 6f 77 6c 69 73 74 22 3a 5b 5d 2c 22 48 74 74 70 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 41 6c 6c 6f 77 6c 69 73 74 22 3a 5b 5d 2c 22 4d 61 78 41 6a 61 78 50 61 79 6c 6f 61 64 4c 65 6e 67 74 68 22 3a 30 2c 22 4d 61 78 43 6f 6e 73 6f 6c 65 4c 6f 67 50 65 72 50 61 67 65 22 3a 30 2c 22 4d 61 78 50 65 72 66 4d 61 72 6b 73 50 65 72 50 61 67 65 22 3a 30 2c 22 4d 61 78 55 72 6c 4c 65 6e 67 74 68 22 3a 30 2c 22 52 65 63 6f 72 64 50 65 72 66 6f 72 6d 61 6e 63 65 52 65 73 6f 75 72 63 65 49 6d 67 22 3a 66 61 6c 73 65 2c 22 52 65 63 6f 72 64 50 65 72 66 6f 72 6d 61 6e 63 65 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 22 3a 66 61 6c 73 65 2c 22 55 72 6c 50 61 74 68 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 5d 2c 22 55 72 6c 50 72 69 76 61 63 79 43 6f 6e 66 Data Ascii: rsAllowlist":[],"HttpResponseHeadersAllowlist":[],"MaxAjaxPayloadLength":0,"MaxConsoleLogPerPage":0,"MaxPerfMarksPerPage":0,"MaxUrlLength":0,"RecordPerformanceResourceImg":false,"RecordPerformanceResourceTiming":false,"UrlPathBlocklist":[],"UrlPrivacyConf

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:22 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:22 UTC	249	IN	HTTP/1.1 202 Accepted Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:22 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:22 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:22 UTC	539	OUT	GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:22 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 15 Nov 2024 21:21:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-15 21:21:22 UTC	1378	IN	Data Raw: 31 63 62 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 Data Ascii: 1cb4(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultF
2024-11-15 21:21:22 UTC	1378	IN	Data Raw: 3d 3d 20 27 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 27 20 3f 20 27 46 41 49 4c 55 52 45 27 20 3a 20 27 53 55 43 43 45 53 53 27 3b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 61 64 61 74 61 20 3d 20 65 76 74 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 6e 61 6d 65 20 3d 20 6d 65 74 72 69 63 4e 61 6d 65 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 76 61 6c 75 65 20 3d 20 76 61 6c 75 65 3b 0a 09 09 09 46 53 28 27 73 74 61 74 27 2c 20 7b 0a 09 09 09 09 65 76 65 6e 74 54 79 70 65 3a 20 27 49 4e 54 45 47 52 41 54 49 4f 4e 5f 4d 45 54 52 49 43 27 2c 0a 09 09 09 09 70 61 79 6c 6f 61 64 3a 20 7b 0a 09 09 09 09 09 70 72 6f 76 69 64 65 72 5f 69 64 3a 20 27 64 6c 6f 27 2c 0a 09 09 09 09 09 6f 72 67 5f 69 64 3a 20 77 69 Data Ascii: == 'dlo_client_error' ? 'FAILURE' : 'SUCCESS';const metadata = evt.attributes \|\| {};metadata.name = metricName;metadata.value = value;FS('stat', {eventType: 'INTEGRATION_METRIC',payload: {provider_id: 'dlo',org_id: wi
2024-11-15 21:21:22 UTC	1378	IN	Data Raw: 74 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 0a 20 20 7d 5d 2c 0a 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 69 64 65 6e 74 69 66 79 22 2c 0a 20 20 22 72 65 61 64 4f 6e 4c 6f 61 64 22 3a 20 74 72 75 65 2c 0a 20 20 22 6d 6f 6e 69 74 6f 72 22 3a 20 74 72 75 65 0a 7d 2c 20 0a 7b 0a 22 69 64 22 3a 20 22 66 73 2d 75 73 65 72 76 61 72 2d 6c 61 6e 67 75 61 67 65 22 2c 0a 22 73 6f 75 72 63 65 22 3a 20 22 6e 61 76 69 67 61 74 6f 72 5b 28 6c 61 6e 67 75 61 67 65 29 5d 22 2c 0a 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 72 65 6e 61 6d 65 22 2c 0a 20 20 20 20 20 20 22 70 72 6f 70 65 72 74 69 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 Data Ascii: t", "select": "customer_id" }], "destination": "FS.identify", "readOnLoad": true, "monitor": true}, {"id": "fs-uservar-language","source": "navigator[(language)]","operators": [{ "name": "rename", "properties": { "
2024-11-15 21:21:22 UTC	1378	IN	Data Raw: 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 0a 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 68 69 76 65 6d 69 6e 64 20 65 78 70 65 72 69 6d 65 6e 74 22 0a 20 20 7d 5d 2c 0a 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 2c 0a 20 20 22 72 65 61 64 4f 6e 4c 6f 61 64 22 3a 20 74 72 75 65 2c 0a 20 20 22 6d 6f 6e 69 74 6f 72 22 3a 20 74 72 75 65 0a 7d 2c 7b 0a 22 73 6f 75 72 63 65 22 3a 20 22 5f 65 78 70 44 61 74 61 4c 61 79 65 72 2e 64 61 74 61 4c 61 79 65 72 4c 6f 67 22 2c 0a 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 64 61 74 61 22 0a 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 Data Ascii: "name": "insert", "value": "hivemind experiment" }], "destination": "FS.event", "readOnLoad": true, "monitor": true},{"source": "_expDataLayer.dataLayerLog","operators": [ { "name": "query", "select": "$.data" }, {
2024-11-15 21:21:22 UTC	1378	IN	Data Raw: 63 6b 20 69 66 20 74 68 65 20 6d 69 78 70 61 6e 65 6c 20 73 63 72 69 70 74 20 69 73 20 6f 6e 20 70 61 67 65 0a 09 69 66 20 28 77 69 6e 64 6f 77 5b 27 6d 69 78 70 61 6e 65 6c 27 5d 20 26 26 20 74 79 70 65 6f 66 28 6d 69 78 70 61 6e 65 6c 29 20 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 61 20 6e 65 77 20 73 65 73 73 69 6f 6e 20 68 61 73 20 73 74 61 72 74 65 64 20 73 69 6e 63 65 20 77 65 20 6c 61 73 74 20 73 65 6e 74 20 64 61 74 61 20 74 6f 20 4d 69 78 70 61 6e 65 6c 0a 09 09 76 61 72 20 6c 61 73 74 53 65 73 73 69 6f 6e 20 3d 20 6c 6f 61 64 53 65 73 73 69 6f 6e 28 27 66 73 5f 6d 69 78 70 61 6e 65 6c 27 29 3b 0a 09 09 69 66 20 28 73 65 73 73 69 6f 6e 20 21 3d 20 6c 61 73 74 53 65 73 73 69 6f 6e 29 20 7b 0a 09 09 09 Data Ascii: ck if the mixpanel script is on pageif (window['mixpanel'] && typeof(mixpanel) == "object") {// Check if a new session has started since we last sent data to Mixpanelvar lastSession = loadSession('fs_mixpanel');if (session != lastSession) {
2024-11-15 21:21:22 UTC	471	IN	Data Raw: 73 63 72 69 70 74 27 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 09 76 61 72 20 72 65 63 53 65 74 74 69 6e 67 73 48 6f 73 74 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 66 73 5f 72 65 63 5f 73 65 74 74 69 6e 67 73 5f 68 6f 73 74 27 5d 3b 0a 09 76 61 72 20 68 6f 73 74 20 3d 20 74 79 70 65 6f 66 20 72 65 63 53 65 74 74 69 6e 67 73 48 6f 73 74 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 20 3f 20 72 65 63 53 65 74 74 69 6e 67 73 48 6f 73 74 20 3a 20 27 65 64 67 65 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 27 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 68 6f 73 74 20 2b 20 27 2f 64 61 74 61 6c 61 79 65 72 2f 76 34 2f 6c 61 74 65 73 74 2e 6a 73 27 3b 0a 09 76 61 72 20 Data Ascii: script';dloScriptTag.async = true;var recSettingsHost = window['_fs_rec_settings_host'];var host = typeof recSettingsHost === 'string' ? recSettingsHost : 'edge.fullstory.com';dloScriptTag.src = 'https://' + host + '/datalayer/v4/latest.js';var

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:22 UTC	399	OUT	GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:23 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 15 Nov 2024 21:21:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-15 21:21:23 UTC	1111	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 28 65 76 74 2c 20 76 61 6c 75 65 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 3d Data Ascii: N_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEvent(evt, value) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus =
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 65 73 5f 74 65 61 6c 69 75 6d 5f 72 65 74 61 69 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 74 72 79 20 7b 0a 09 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 75 73 74 6f 6d 27 5d 20 3d 20 5b 0a 7b 0a 20 20 22 69 64 22 3a 20 22 66 73 2d 69 64 65 6e 74 69 66 79 2d 63 75 73 74 6f 6d 65 72 2d 69 64 22 2c 0a 20 20 22 73 6f 75 72 63 65 22 3a 20 22 75 74 61 67 2e 64 61 74 61 5b 5e 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 2c 0a 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 22 6e 61 Data Ascii: es_tealium_retail'] = [];try {window['_dlo_rules_custom'] = [{ "id": "fs-identify-customer-id", "source": "utag.data[^(customer_id,internal)]", "operators": [{ "name": "query", "select": "$[(customer_id,internal)]" }, { "na
2024-11-15 21:21:23 UTC	56	IN	Data Raw: 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 71 70 2e 68 69 76 65 6d 69 6e 64 2c 20 63 70 0d 0a Data Ascii: "name": "query", "select": "$[(qp.hivemind, cp
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 64 36 38 0d 0a 2e 78 70 64 70 70 33 2c 20 63 70 2e 68 69 76 65 6d 69 6e 64 29 5d 22 0a 20 20 7d 2c 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 72 65 6e 61 6d 65 22 2c 0a 20 20 20 20 20 20 22 70 72 6f 70 65 72 74 69 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 78 70 64 70 70 33 22 3a 20 22 76 61 72 69 61 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 22 71 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 5f 69 64 2b 76 61 72 69 61 6e 74 22 0a 20 20 20 20 20 20 7d 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 0a 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 Data Ascii: d68.xpdpp3, cp.hivemind)]" },{ "name": "rename", "properties": { "cp.xpdpp3": "variant", "qp.hivemind": "hivemind", "cp.hivemind": "hivemind_id+variant" } }, { "name": "insert", "value": "
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 7d 0a 0a 0a 5d 3b 0a 09 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 09 09 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 46 75 6c 6c 53 74 6f 72 79 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 20 65 72 72 6f 72 3b 20 72 65 76 69 65 77 20 44 4c 4f 20 69 6e 74 65 67 72 61 74 69 6f 6e 5c 27 73 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 2e 27 29 3b 0a 09 7d 0a 09 0a 09 76 61 72 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 3d 20 73 65 73 73 69 6f 6e 55 72 6c 20 2b 20 27 3f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 73 72 63 3d 6d 69 78 70 61 6e 65 6c 27 3b 0a 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 74 68 65 20 6d 69 78 70 61 6e 65 6c 20 73 63 72 69 70 74 20 69 73 20 6f 6e 20 70 61 67 65 0a 09 Data Ascii: stination": "FS.event"}];} catch (err) {console.error('FullStory custom rules error; review DLO integration\'s custom rules.');}var mixpanelSessionUrl = sessionUrl + '?integration_src=mixpanel';// Check if the mixpanel script is on page
2024-11-15 21:21:23 UTC	688	IN	Data Raw: 6e 65 6c 2e 72 65 67 69 73 74 65 72 27 2c 20 73 65 73 73 69 6f 6e 55 72 6c 3a 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 29 0a 09 09 09 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 6d 69 78 70 61 6e 65 6c 46 73 49 6e 74 65 67 72 61 74 69 6f 6e 41 73 79 6e 63 2c 20 35 30 30 29 3b 0a 09 09 7d 0a 09 7d 0a 09 0a 09 76 61 72 20 64 6c 6f 53 63 72 69 70 74 54 61 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 09 Data Ascii: nel.register', sessionUrl: mixpanelSessionUrl }}})} else {setTimeout(mixpanelFsIntegrationAsync, 500);}}var dloScriptTag = document.createElement('script');dloScriptTag.type = 'text/javascript';dloScriptTag.async = true;

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:22 UTC	504	OUT	GET /datalayer/v4/latest.js HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:23 UTC	829	IN	HTTP/1.1 200 OK x-goog-generation: 1727377556312475 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 11986 Content-Encoding: gzip x-goog-hash: crc32c=I4JzeA== x-goog-hash: md5=IyBLJgiyXTxxJFl1fLhzSQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 11986 Access-Control-Allow-Origin: * X-GUploader-UploadID: AFiumC7S-oyltmlnwL2m7zHm5uHq2BRSYJYuLaJcNzP14k8kZmFdtH9tsh_mJZ_sacq6UbYCVGk Server: UploadServer Date: Fri, 15 Nov 2024 21:05:47 GMT Expires: Fri, 15 Nov 2024 22:05:47 GMT Cache-Control: public, max-age=3600,no-transform Age: 935 Last-Modified: Thu, 26 Sep 2024 19:05:56 GMT ETag: "23204b2608b25d3c712459757cb87349" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:23 UTC	549	IN	Data Raw: 1f 8b 08 08 94 b0 f5 66 02 ff 74 6d 70 77 70 78 66 39 6d 36 30 00 d5 7d 69 73 db 46 d2 f0 77 ff 0a 08 e5 92 81 68 cc 50 d9 a3 de 07 34 cc 52 64 39 d1 ae 2d 79 25 39 79 76 15 ae 0b 22 87 12 62 08 e0 02 a0 6c 45 e4 7f 7f bb 7b 6e 1c 94 7c 24 f5 ec d6 c6 22 e6 e8 99 e9 e9 e9 6b 7a 66 b6 e6 cb 7c 5a a7 45 1e 84 77 fe b2 e2 5e 55 97 e9 b4 f6 47 37 49 e9 71 56 b3 72 b4 a5 8b f0 f0 8e 9f f3 c1 c1 c9 c9 f1 49 3c 9c c4 3e fd f2 19 26 fe bc 77 72 14 ef 42 1a fe 10 49 87 47 2f 8f e3 ef 20 09 7f 88 a4 17 07 df bf fd 21 fe 13 a4 d1 2f 7f 1d f0 d5 2a e0 f1 dd 3a 0c 99 d3 ce e0 e0 86 e7 f5 c1 f5 a2 be 85 76 f0 8f 47 29 00 47 64 bd cd f9 c7 05 9f d6 7c 16 fb e6 b7 29 f4 ba c8 d3 ba 28 f7 93 2c 3b 28 cb a2 8c 7d 99 e2 61 92 47 69 76 b9 92 27 35 6f 96 c4 44 e8 51 ab f4 8b Data Ascii: ftmpwpxf9m60}isFwhP4Rd9-y%9yv"blE{n\|$"kzf\|ZEw^UG7IqVrI<>&wrBIG/ !/*:vG)Gd\|)(,;(}aGiv'5oDQ
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: bd 62 ee d5 58 a3 6a 83 7c 9d 64 f3 a2 bc c6 95 a5 01 89 ae 5c ab 1c a7 b8 c0 23 b5 6f 0f 01 8a 8b 1c aa dc 6c e4 a8 c0 35 52 75 57 58 88 e5 93 f2 ca ae 72 7a 9b d7 c9 c7 b7 79 b5 5c 2c 8a b2 76 fa 57 51 9e ec e6 d2 14 c1 fa 67 49 79 c9 eb d3 25 4d c1 31 fd 1b fb 22 d1 ab 44 aa 77 bd ac 6a 98 2c 2f c9 e5 54 99 8a 6a 2d 6b 7a 91 55 65 27 6f ad 8e 5b 95 92 fa aa 55 01 d2 1a 85 df e6 ef f3 e2 43 2e 09 4c 7e 79 37 92 d0 44 09 3d 96 b3 db 05 15 d2 09 5e 0d 29 58 6e 1d 94 40 ee 25 91 3b b1 ee 3c b6 18 bb fa e9 d5 f0 b1 2e 79 bd 2c e1 f7 00 fa 5f 17 08 61 90 15 97 a6 7c 1d de 21 84 32 ae 07 d3 22 af f9 c7 9a e5 f0 3b e3 37 3c 63 05 fc ba e6 55 95 5c f2 9d a0 1c fb 9e bf f3 b7 d3 e3 a3 01 8a 8d fc 32 9d df 06 65 18 f9 7e 38 aa 3e a4 f5 f4 2a c8 c3 bb 69 02 e4 2f Data Ascii: bXj\|d\#ol5RuWXrzy\,vWQgIy%M1"Dwj,/Tj-kzUe'o[UC.L~y7D=^)Xn@%;<.y,_a\|!2";7<cU\2e~8>*i/
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 8f 5e 1d 9f 52 87 df 9e 1e 40 03 7b 67 7b 58 15 f0 06 9d 3d 65 50 ef 00 ba 76 82 3d de 83 ff ef 9f 1d 1e 1f 61 69 68 f4 ec 64 0f 7b 70 74 f0 c3 ab c3 1f 0e 8e f6 0f a0 e2 a3 63 2a 7d 76 7c 02 05 df 9e ca 0a cc db 3b 39 3c c5 16 8f df 9e 61 ed 63 02 08 30 8e 0e 04 44 44 37 e1 00 7a 81 60 de 1c 9c c0 e0 5f ef 11 d4 97 2e fa 07 8f be 2a 49 7b df 7c 8b ab 72 e1 08 04 25 63 82 45 2c ec 1a d4 bc de 28 ee 79 3c 5f ad ee de bd 23 6e fa ee 5d 74 3e 59 2b 31 03 dc 67 af 2c 93 db ed 6d 17 1a 1f e8 e2 b0 2e 57 2b 37 57 89 4c b2 42 eb b0 1e 80 75 79 fc 21 57 f6 11 30 05 d4 10 40 b8 c6 20 70 27 a0 b2 51 b5 35 29 3c 53 5b cf 90 9d 9e aa 4e 27 b0 06 2f 73 bb 39 4b b6 a3 60 07 4d ba 2d d8 9f e5 24 dc 55 c1 82 7a e5 08 f9 50 c2 37 f2 c4 ed f1 60 0a 66 3a f0 c1 42 74 bc c0 Data Ascii: ^R@{g{X=ePv=aihd{ptc}v\|;9<ac0DD7z`_.I{\|r%cE,(y<_#n]t>Y+1g,m.W+7WLBuy!W0@ p'Q5)<S[N'/s9K`M-$UzP7`f:Bt
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 8e 11 a1 91 d0 49 24 fd 58 83 82 02 4d ed b9 ad 81 aa 0e a3 34 77 2d ad 10 d4 79 2d af 60 79 2f f8 34 9d a3 67 1f 32 c3 91 51 5b b5 be aa c8 74 a4 17 0d 39 cc 3a 85 a1 ad fa fb aa a2 cf 7c 7b 69 bc 84 c1 9d a2 03 dc 2c 92 16 28 58 28 0c fd 4d 60 e2 e0 36 71 29 76 fc 84 b9 e5 f4 38 be 13 f8 bf 53 ea 70 b4 b5 cb 10 27 d1 b9 e2 b8 93 35 53 04 74 7f 31 a1 25 6c 2c 86 7d 68 a8 15 f1 ee 70 c8 5a 83 88 ff c2 ff 24 36 11 2e fb ed 60 d7 08 d6 ec 59 a8 42 a5 51 66 ea f1 30 aa 6d e5 a5 b4 55 8d 1c 24 61 dd 70 03 2b f9 25 05 17 a9 a6 52 80 f8 75 b9 24 16 50 02 0b 38 3b 79 7b a0 7f ab 74 21 8b 48 5d d5 42 07 48 09 05 23 f0 7d 91 8b da 6a 44 bf 48 b9 54 e5 4a 50 bb 38 60 0b 95 71 2c 1c 0d 47 8e e4 74 e5 6a 69 75 cf 16 9d df 8b 6f a8 6f 99 cd 9d 92 b4 6c 15 30 be 64 35 Data Ascii: I$XM4w-y-`y/4g2Q[t9:\|{i,(X(M`6q)v8Sp'5St1%l,}hpZ$6.`YBQf0mU$ap+%Ru$P8;y{t!H]BH#}jDHTJP8`q,Gtjiuool0d5
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 5b e7 71 57 1d 81 d9 de 3a e3 8e 3a 6d 2a a0 59 36 33 bc 65 4f ef bf ed 99 7d 6c 4f ea b8 45 31 eb e0 02 e6 f7 c2 cc ef 47 67 f5 d1 62 28 93 0f b1 5c 4c f4 53 1a ab 23 13 58 3a 04 c6 37 94 01 a2 dc b1 a7 a4 16 81 91 06 49 b9 5f cc f8 5e 8d 31 e8 a0 fa fc e9 4f a8 99 ad 56 c9 f3 f8 af c3 ed ed e4 59 fc d7 ef 56 ab ff f9 b3 48 fd d3 5f 49 6f 23 ce 8a 7e d2 b8 10 a6 9c 87 3b 14 cf 87 b0 58 63 19 26 bb 5e 0b bf b7 b3 49 c1 72 6a 03 35 b6 ca b1 02 96 b1 1a 87 b4 cb 2b 2a b8 94 85 9e 7f d7 8a 3c 49 65 4c 6d 50 6e 3a 4d c2 14 04 5b dc 83 55 8d c0 bf 43 b7 b8 ea c5 57 06 4f a3 c1 60 82 78 09 a6 0d 53 1b 91 4b fc de 95 df 4a 3d 89 fd 18 75 a9 6a b5 c2 3f f4 73 0c ff fa 51 25 2c 38 03 4b e1 c8 86 47 a1 e8 2e 3c da 81 62 c7 fd c2 53 79 f9 1a 54 24 24 e0 50 c5 9b a3 Data Ascii: [qW::mY63eO}lOE1Ggb(\LS#X:7I_^1OVYVH_Io#~;Xc&^Irj5+<IeLmPn:M[UCWO`xSKJ=uj?sQ%,8KG.<bSyT$$P
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 3a 0f ad 13 44 d9 f6 26 1a c8 d9 12 f7 f4 2c c6 8e 45 9d e1 f9 03 ed ed c4 3c 18 25 08 a7 71 50 ee 38 69 e8 4e 8a dd 62 b4 87 06 ca 24 ba 84 3a b3 80 95 45 81 d5 7f e1 2b 2b 43 77 10 c6 83 76 0a 79 21 75 58 7a 79 3e a1 da 03 1d 2f 06 35 1c 1a 1a 8e ca 67 2e 50 7d 77 8d d0 18 b4 0c 0b a4 ab 4b 15 3c 2f 27 12 3c 9e 8f 53 cb 40 93 6e e3 14 e8 1b 49 b4 1a dc 07 3a 63 0a 06 23 fe 20 63 ff 05 ee c9 0a 93 11 04 32 25 6f ed aa 41 e1 a7 b9 2c e4 57 fb 1c 35 82 1e 29 c5 a4 0c 75 e8 ba ea dc 6a 95 60 7c 12 16 7e f7 d0 88 94 2e 5c de 7f 7a 45 05 23 e2 81 4b 2c 42 97 97 61 ce 5e 79 09 5a 54 22 1c b1 79 43 a8 cb 7b ca 34 8f 2a e2 4e c1 5c c4 bf 42 d5 7b f8 8c 7b 43 1b de 17 22 ef df 51 41 6a 88 a7 a2 7d 0f c0 51 e1 96 ae 78 ed ab a3 62 74 a8 af fb 64 81 c2 83 ef c6 fe Data Ascii: :D&,E<%qP8iNb$:E++Cwvy!uXzy>/5g.P}wK</'<S@nI:c# c2%oA,W5)uj`\|~.\zE#K,Ba^yZT"yC{4*N\B{{C"QAj}Qxbtd
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: 33 55 89 25 fc 0e 49 d7 1e fa 66 05 c5 1c 85 dd 28 f8 58 8b 60 ee 31 9d 44 47 ef 3b 38 7a bf 58 96 12 f7 3f bd 2f 5c 58 57 ec d0 f3 47 b6 34 12 f7 59 6c 89 2b 73 e5 c6 5b 97 d7 cf da 66 b2 1f 33 c1 e5 3a b2 6e d6 71 8e d7 a0 5c 08 84 af c9 82 de 25 41 4d b8 96 5b 9f 93 42 a5 bf e3 3b 69 6c 44 97 4c 9e 98 8c ae f5 bb 3f d1 3b 26 9c 19 d1 91 3a d6 76 cb fe b3 84 85 16 ed 31 a1 dd 46 67 cc 9f 27 f9 53 40 bd 1f 1d 32 e2 45 d1 89 44 e0 7e eb 7c 6a 6b 67 4c 2b 08 32 66 17 24 60 05 5a 26 7b fc e9 55 c5 99 a4 72 6d f6 6d 7e b2 af 7a c6 83 e3 09 3d 56 54 c8 a7 2e be a5 e3 d5 f0 6f 4d fb 2b 6f 63 7c f7 e2 5d 9a a7 f5 bb 6a 91 e4 3e 7b 29 52 ca 65 c6 df 4d 8b 4c 7a 1d 64 e6 2b 2b b3 b4 9e 61 92 d9 bf 89 6c c1 ff df d1 7b 1b 32 e7 7b 91 33 cd 52 4c e3 e2 d1 a6 9f 45 Data Ascii: 3U%If(X`1DG;8zX?/\XWG4Yl+s[f3:nq\%AM[B;ilDL?;&:v1Fg'S@2ED~\|jkgL+2f$`Z&{Urmm~z=VT.oM+oc\|]j>{)ReMLzd++al{2{3RLE
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: d5 fe 8b db 16 8c 96 5e a2 6e 68 d3 6a 25 90 71 a1 5e 60 fd 59 cc b4 89 7a be 8f 98 3f e2 b5 4b a0 ea 15 68 7c 82 68 ae c4 6d fd 9a e4 7a b6 bb db f7 eb e2 a5 bc 23 f7 55 03 e3 1e 5e ad e4 64 96 db db 76 60 57 09 6a 48 71 cd 3b 17 ae 09 7f 41 27 51 18 8e ef 84 4e be b5 bb 8e 44 de 5a ee a4 f3 ce 9d 74 bc fe d9 da f5 36 51 5f fa b4 8d 10 37 12 55 5b 43 d2 a1 9c e9 ef 7a a1 cb 33 3b 54 14 95 fc 5d c8 5a 8f 3c c9 fe 7c 53 1b 90 92 e8 7a 9f 2e 6a 41 1d b9 8f ff b5 5f 8a d0 98 ec bb 7c b9 eb fe 34 37 f2 14 03 08 1a f1 b2 f2 1d 06 c8 68 df c6 0c 85 d1 e4 dd c1 1d 0d 7b e1 70 71 df 6c 47 98 2d 94 c5 4c 8d 8f ae 43 18 50 e6 ff d9 e9 fa 18 0e 64 7c 47 37 a0 e6 88 46 67 39 f7 5d d2 50 7e 55 7c e5 e6 be 39 2b 66 02 e3 d9 15 96 f2 0e 2c e5 93 70 8c 84 18 61 c4 7b 83 Data Ascii: ^nhj%q^`Yz?Kh\|hmz#U^dv`WjHq;A'QNDZt6Q_7U[Cz3;T]Z<\|Sz.jA_\|47h{pqlG-LCPd\|G7Fg9]P~U\|9+f,pa{
2024-11-15 21:21:23 UTC	1378	IN	Data Raw: e2 f8 81 fa 3b 19 f5 0f 65 90 07 80 91 af c6 1e 7f 08 65 40 1c 28 7e fd db bd 62 8f 5f 34 ef 86 52 7c de fe 2b 29 9d cd 2d 57 8b 6c 1a 71 77 72 8e 54 60 70 ef 0c 44 f9 0e ea c5 a5 76 83 ab 2e 8b b5 e6 26 18 9a c6 53 fa e2 d9 28 8a d3 be 57 c7 01 6e 2b bc 56 23 b5 b7 90 ae 56 a9 23 2c 43 b5 0f 65 35 48 a3 ae b8 1e 4d e8 f8 95 ad 82 0d 77 56 43 ee df e3 ec c4 ad dd a0 1e df 77 84 4a 35 b7 e9 5d 39 0f ca 32 f1 54 0b 6e 4c 6e 7a 0d ba 34 fd e7 20 b9 b0 27 b2 e3 c0 63 e4 31 2b a7 8c 75 19 eb 62 43 70 8f 71 47 8e 1a 5b aa 77 18 ab 56 45 20 54 17 25 bf 49 f9 87 d7 c5 8c cc 5b f9 09 13 56 a7 b9 88 7d 52 41 05 83 ac b8 f4 71 39 cc 8e f3 57 45 42 e1 a1 2a fe f9 84 c0 91 39 6c a9 3e ca ad 33 25 7e 70 6c 22 2b 65 9c 87 70 96 59 9b d9 ca f3 84 45 f4 6b ba 20 ac f1 0d Data Ascii: ;ee@(~b_4R\|+)-WlqwrT`pDv.&S(Wn+V#V#,Ce5HMwVCwJ5]92TnLnz4 'c1+ubCpqG[wVE T%I[V}RAq9WEB*9l>3%~pl"+epYEk
2024-11-15 21:21:23 UTC	413	IN	Data Raw: be d1 c3 aa fd ba e2 68 a6 7e be a4 0d 45 9c 60 68 ba 64 da c6 2b 1a 15 18 d9 12 38 2f b0 68 73 53 ed 15 83 22 55 03 69 39 e1 df 90 ad 2e 8e 62 bb a1 15 b2 a2 d7 77 d7 35 75 e6 46 2d c7 0b d4 be ad ce 16 65 26 55 05 c0 8a 07 03 da cf 81 9a dd 2a 15 5f dd 0a 27 dc 18 08 a6 ef 7a 79 3e b4 03 03 f1 fa cd ad 8e a3 79 5c c6 6a 8f 5c fa e2 83 77 78 f6 50 79 3a d0 6d 48 09 fa 74 90 3a 7f 32 2e 9c e3 28 41 5f b9 30 6a 14 2c 1a e7 41 9a 15 55 46 d8 7d ca 28 f8 67 a8 4e cb 3b 7e 94 b7 c4 fa 24 30 75 74 72 e3 21 42 b9 90 94 8a f3 1a 9a 49 17 19 47 81 a1 62 18 3b f1 e6 34 fb 12 2f 45 3a d7 b7 47 6c 98 1f 81 ee fe c7 d6 e9 de d2 0a 56 9d ff 4e 9d 0e ad fc 50 45 73 88 da e8 ef a3 72 ad 93 fc 79 8f bb 48 3e 39 4f 7e c5 0d 9c 44 8b 23 ad 17 e5 9a e3 91 3d e8 a1 af 4d df Data Ascii: h~E`hd+8/hsS"Ui9.bw5uF-e&U*_'zy>y\j\wxPy:mHt:2.(A_0j,AUF}(gN;~$0utr!BIGb;4/E:GlVNPEsryH>9O~D#=M

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:24 UTC	846	OUT	POST /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=1&ClientTime=1731705683378&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=0&LastActivity=3&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 19883 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:24 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed bd 89 96 db c6 95 30 fc 2a fc da 27 9a e4 84 60 a3 f6 2a 25 fa 32 2d a9 5b 56 6c c9 8e 25 db 71 6c 9f 3e 20 16 12 4d 70 69 02 5c e7 64 5e ed 7b a4 ff 15 fe 7b 0b 0b 01 90 dd cd 5e 94 f1 c4 6e d9 24 58 b8 55 75 eb d6 dd ab 0a f8 af 93 0f e1 f5 c9 73 d2 3d f9 7e 18 4e 4e 9e f3 ee c9 f9 32 4b 4f 9e ff f8 5f 27 5f c4 93 e0 e4 39 15 dd 93 b3 f9 00 8b 4e 86 59 36 4b 9f 9f 9e ae 56 ab 9e 17 65 e1 7c 12 fb 3d 7f 3a 3e 8d a6 f3 d4 4b c2 53 c2 7a 94 eb 1e 91 a6 c7 f5 5f 16 d9 f8 32 9d 2e e6 7e f8 c2 71 fa c9 d4 1f 85 81 e3 3c c3 e2 71 18 c4 8b f1 5e b1 ef 8d 67 5e 3c 98 34 6e 64 73 2f 8a 62 ff 32 db cc c2 83 37 e2 a0 51 7c d2 3d f9 f3 ff 79 fd d5 ab 8f 3f 7c 7d de 19 66 e3 e4 ff 42 c9 c3 51 ff f8 fa e2 c3 e5 eb b3 0f 5f be 7f 55 47 Data Ascii: 0'`%2-[Vl%ql> Mpi\d^{{^n$XUus=~NN2KO_'_9NY6KVe\|=:>KSz_2.~q<q^g^<4nds/b27Q\|=y?\|}fBQ_UG
2024-11-15 21:21:24 UTC	3499	OUT	Data Raw: 1b 3c d0 7a fb 1e 94 3b 51 9e a7 2d 84 e7 a1 6f 0f fa 22 86 b2 f5 1c 15 3c 42 7b 13 7e 7b b0 ed 19 14 92 1d 00 b8 1b d9 27 d8 d0 7a b8 61 e2 76 4f 0e 6f 5c 2e 0a f1 8c 04 95 e4 08 1c b5 7d 3c 5c 3b c3 d6 83 2f 6e 20 60 26 4a 51 d7 08 a3 15 ef 46 5e 92 86 0f e5 db 9b 9f de 76 9f 56 ee b7 ab f3 3e 2d 3f 70 d7 cd c3 ba b8 d7 56 97 c7 8c e2 a8 ed 26 0f eb e0 9e db 4d 1e 43 a8 a3 b6 9b dc a7 83 87 ed af 78 50 0f 47 6d 39 78 6c cb 47 ad c7 3f 82 40 4f de fe c3 d6 fb 1f d4 c3 fd d7 fb 1f db cd 4d eb bf 8f 20 d0 93 34 f9 a0 25 e5 87 f9 26 f7 5e 44 7d 6c 37 47 ad 29 3e 82 5a 9f a2 fd 63 d7 2c 1f d5 ec cd 0b 79 f7 6a f6 41 8b 62 0f ea e1 fe eb 40 8f ed e6 a8 65 91 47 50 eb e9 db 7f d0 b2 cb 83 7a 38 6a a1 e1 b1 2d 1f 95 e4 7f 04 81 8e 4a c0 3f cc 41 b9 5f 92 ff 5e Data Ascii: <z;Q-o"<B{~{'zavOo\.}<\;/n `&JQF^vV>-?pV&MCxPGm9xlG?@OM 4%&^D}l7G)>Zc,yjAb@eGPz8j-J?A_^
2024-11-15 21:21:25 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.afternic.com Content-Type: application/json; charset=utf-8 Date: Fri, 15 Nov 2024 21:21:24 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:25 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 33 31 37 30 35 36 38 34 38 36 32 7d 0a Data Ascii: {"BundleTime":1731705684862}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:25 UTC	626	OUT	GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=1&ClientTime=1731705683378&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=0&LastActivity=3&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:25 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:25 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:25 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:26 UTC	640	OUT	GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705684659&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&LastActivity=800&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:26 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:26 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:26 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:28 UTC	854	OUT	POST /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705686784&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&IsNewSession=true&DeltaT=2124&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1019 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:28 UTC	1019	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 55 db 6e db 46 10 fd 15 96 0f 42 02 ac a8 bd 5f e4 b2 81 23 3b 6d 60 c7 36 2a a5 46 d0 18 c2 8a 5c 49 ac 29 52 26 57 be 24 f0 bf 77 28 d9 12 95 ba 41 db e7 ee 42 02 b9 73 66 e6 cc 65 87 5f c3 a1 bb 09 fb 14 85 97 73 57 84 7d 66 08 47 e1 f1 ad af c3 fe ef 5f c3 93 ac 48 c3 be 46 e1 61 35 6b 4e 0c 96 48 48 85 a4 b9 6a 6b 3c a2 67 a8 d9 42 39 56 18 19 c2 90 61 12 49 1c 89 bd 85 28 8e 38 53 02 09 45 90 d0 14 51 1e d1 bd 85 08 8b 24 15 fb ae 24 79 d1 15 61 14 19 2e 91 11 0c 29 d8 42 c3 cf 60 c4 60 4b bd d5 e7 04 d3 17 f5 29 6d 74 e1 a7 18 a2 3a 32 ac bd 38 82 94 08 03 34 8d 41 44 46 62 4f 8a 24 d2 b8 e5 41 b6 92 d1 ca 9b c6 90 03 b6 07 a5 42 ee a0 84 7e 8b 6d 01 b5 da 01 29 df 02 95 44 be 5a b9 36 50 b7 2c aa 2d 10 0c 7e 0f c8 Data Ascii: UnFB_#;m`6*F\I)R&W$w(ABsfe_sW}fG_HFa5kNHHjk<gB9VaI(8SEQ$$ya.)B``K)mt:284ADFbO$AB~m)DZ6P,-~
2024-11-15 21:21:28 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.afternic.com Content-Type: application/json; charset=utf-8 Date: Fri, 15 Nov 2024 21:21:28 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:28 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 33 31 37 30 35 36 38 38 31 35 35 7d 0a Data Ascii: {"BundleTime":1731705688155}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://13.248.169.48/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Windows Analysis Report
http://13.248.169.48/

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:28 UTC	635	OUT	GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=5210410005010768236&Seq=2&ClientTime=1731705686784&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705681357&PrevBundleTime=1731705684862&IsNewSession=true&DeltaT=2124&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:29 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:28 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:29 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:29 UTC	602	OUT	GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.afternic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.afternic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:29 UTC	575	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 21:21:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"e48a-grpqi1n3WoZbzAzn4kJJEVbq1ZU" via: 1.1 fly.io fly-request-id: 01JCJA7JAM7H43S3Q5D2Y8JK60-dfw CF-Cache-Status: HIT Age: 219155 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8e324a8d9e342c98-DFW
2024-11-15 21:21:29 UTC	794	IN	Data Raw: 37 64 36 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3b 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 3d 5b 6e 28 31 37 30 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 28 5e 7c 40 29 5c 53 2b 5c 3a 5c 64 2b 2f 2c 6e 3d 2f 5e 5c 73 2a 61 74 20 2e 2a 28 5c 53 2b 5c 3a 5c 64 2b 7c 5c 28 6e 61 74 69 76 65 5c 29 29 2f 6d 2c 72 3d 2f 5e 28 65 76 61 6c 40 29 3f 28 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 29 3f 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 6e 29 7b 69 66 28 22 66 75 6e Data Ascii: 7d62!function(){var t={816:function(t,e,n){var r,i,a;!function(o,s){"use strict";i=[n(170)],void 0===(a="function"==typeof(r=function(t){var e=/(^\|@)\S+\:\d+/,n=/^\sat .(\S+\:\d+\|\(native\))/m,r=/^(eval@)?(\[native code\])?$/;function i(t,e,n){if("fun
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 29 7d 2c 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 29 72 65 74 75 72 6e 5b 74 5d 3b 76 61 72 20 65 3d 2f 28 2e 2b 3f 29 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 24 2f 2e 65 78 65 63 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 22 22 29 29 3b 72 65 74 75 72 6e 5b 65 5b 31 5d 2c 65 5b 32 5d 7c 7c 76 6f 69 64 20 30 2c 65 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 7d 2c 70 61 72 73 65 56 38 4f 72 49 45 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 61 28 65 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 2e 6d 61 74 63 Data Ascii: )},extractLocation:function(t){if(-1===t.indexOf(":"))return[t];var e=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[\(\)]/g,""));return[e[1],e[2]\|\|void 0,e[3]\|\|void 0]},parseV8OrIE:function(e){return i(a(e.stack.split("\n"),(function(t){return!!t.matc
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 28 76 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 2f 69 2c 72 3d 65 2e 6d 65 73 73 61 67 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 5b 5d 2c 61 3d 32 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 61 3c 6f 3b 61 2b 3d 32 29 7b 76 61 72 20 73 3d 6e 2e 65 78 65 63 28 72 5b 61 5d 29 3b 73 26 26 69 2e 70 75 73 68 28 6e 65 77 20 74 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 73 5b 32 5d 2c 73 5b 31 5d 2c 76 6f 69 64 20 30 2c 72 5b 61 5d 29 29 7d 72 65 74 75 72 6e 20 69 7d 2c 70 61 72 73 65 4f 70 65 72 61 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 28 3f 3a 3a 20 49 6e Data Ascii: (var n=/Line (\d+).script (?:in )?(\S+)/i,r=e.message.split("\n"),i=[],a=2,o=r.length;a<o;a+=2){var s=n.exec(r[a]);s&&i.push(new t(void 0,void 0,s[2],s[1],void 0,r[a]))}return i},parseOpera10:function(e){for(var n=/Line (\d+).script (?:in )?(\S+)(?:: In
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 20 74 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 7d 2c 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3d 53 74 72 69 6e 67 28 74 29 7d 2c 67 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 72 67 73 7d 2c 73 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 73 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 22 29 3b 74 68 69 73 2e 61 72 67 73 3d 74 7d 2c 67 65 74 46 69 6c 65 Data Ascii: this.functionName},setFunctionName:function(t){this.functionName=String(t)},getArgs:function(){return this.args},setArgs:function(t){if("[object Array]"!==Object.prototype.toString.call(t))throw new TypeError("Args must be an Array");this.args=t},getFile
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 72 5d 7d 29 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e 28 38 31 36 29 2c 65 3d 6e 2e 6e 28 74 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 6e 3d 74 2e 65 72 72 6f 72 2c 72 3d 74 2e 66 69 6c 65 6e 61 6d 65 2c 69 3d 74 2e 6c 69 6e 65 6e 6f 2c 61 3d 74 2e 63 6f 6c 6e 6f 2c 6f 3d 5b 5d 3b 69 66 28 6e 29 74 72 79 7b 6f 3d 65 28 29 2e 70 Data Ascii: ,r)&&Object.defineProperty(t,r,{enumerable:!0,get:e[r]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},function(){"use strict";var t=n(816),e=n.n(t);function r(t){var n=t.error,r=t.filename,i=t.lineno,a=t.colno,o=[];if(n)try{o=e().p
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 29 7d 2c 61 3d 73 65 74 54 69 6d 65 6f 75 74 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 Data Ascii: {return e.reject(n)}))}))},a=setTimeout;function o(t){return Boolean(t&&void 0!==t.length)}function s(){}function c(t){if(!(this instanceof c))throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a f
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 66 28 65 2c 74 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 64 28 65 2c 74 29 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 64 28 65 2c 74 29 7d 7d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 73 29 3b 72 65 74 75 72 6e Data Ascii: n}function v(t,e){var n=!1;try{t((function(t){n\|\|(n=!0,f(e,t))}),(function(t){n\|\|(n=!0,d(e,t))}))}catch(t){if(n)return;n=!0,d(e,t)}}c.prototype.catch=function(t){return this.then(null,t)},c.prototype.then=function(t,e){var n=new this.constructor(s);return
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 73 65 3a 68 2c 79 3d 5b 5d 2e 73 6c 69 63 65 2c 5f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 53 3d 5f 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 70 65 72 66 6f 72 6d 61 6e 63 65 3a 7b 7d 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 77 3d 30 3b 77 3c 32 35 36 3b 2b 2b 77 29 62 5b 77 5d 3d 28 77 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 76 61 72 20 54 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 70 75 73 Data Ascii: se:h,y=[].slice,_="undefined"!=typeof window,S=_&&"undefined"!=typeof performance?performance:{};for(var b=[],w=0;w<256;++w)b[w]=(w+256).toString(16).substr(1);var T=new Uint8Array(16);function E(t){return function(t){for(var e=[],n=0;n<t.length;n++)e.pus
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 72 72 61 79 28 66 29 3f 5b 5d 3a 7b 7d 29 2c 49 28 74 5b 75 5d 2c 5b 66 5d 2c 21 31 29 29 3a 74 5b 75 5d 3d 66 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 72 65 74 75 72 6e 20 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 72 Data Ascii: rray(f)?[]:{}),I(t[u],[f],!1)):t[u]=f}}return t}function j(){if("undefined"!=typeof document){var t=document.currentScript;return t\|\|function(){if("undefined"!=typeof document)for(var t=document.getElementsByTagName("script"),e=0,n=t.length;e<n;e++){var r
2024-11-15 21:21:29 UTC	1369	IN	Data Raw: 6c 69 63 65 28 65 2b 6c 29 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2e 73 6c 69 63 65 28 65 29 2c 69 3d 69 2e 73 6c 69 63 65 28 30 2c 65 29 7d 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2c 69 3d 22 22 3b 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 7c 7c 6f 26 26 66 5b 33 5d 26 26 73 5b 70 5d 7c 7c 22 22 2c 66 5b 33 5d 26 26 28 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 69 66 28 6f 26 26 22 2f 22 21 3d 3d 74 68 69 73 2e 70 61 74 68 2e 63 68 61 72 41 74 28 30 29 26 26 28 74 68 69 73 2e 70 61 74 68 3d 22 2f 22 2b 74 68 69 73 2e 70 61 74 68 29 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 3d 6f 2c 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 3d 72 7c 7c 73 2e 70 72 6f 74 6f 63 6f 6c 2c 74 68 69 73 2e 68 6f 73 74 Data Ascii: lice(e+l)}else this[p]=i.slice(e),i=i.slice(0,e)}}else this[p]=i,i="";this[p]=this[p]\|\|o&&f[3]&&s[p]\|\|"",f[3]&&(this[p]=this[p].toLowerCase())}if(o&&"/"!==this.path.charAt(0)&&(this.path="/"+this.path),this.relative=o,this.protocol=r\|\|s.protocol,this.host

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:30 UTC	395	OUT	GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:30 UTC	575	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 21:21:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"e48a-grpqi1n3WoZbzAzn4kJJEVbq1ZU" via: 1.1 fly.io fly-request-id: 01JCJA7JAM7H43S3Q5D2Y8JK60-dfw CF-Cache-Status: HIT Age: 219156 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8e324a94eec7e5b1-DFW
2024-11-15 21:21:30 UTC	794	IN	Data Raw: 37 64 36 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3b 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 3d 5b 6e 28 31 37 30 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 28 5e 7c 40 29 5c 53 2b 5c 3a 5c 64 2b 2f 2c 6e 3d 2f 5e 5c 73 2a 61 74 20 2e 2a 28 5c 53 2b 5c 3a 5c 64 2b 7c 5c 28 6e 61 74 69 76 65 5c 29 29 2f 6d 2c 72 3d 2f 5e 28 65 76 61 6c 40 29 3f 28 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 29 3f 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 6e 29 7b 69 66 28 22 66 75 6e Data Ascii: 7d62!function(){var t={816:function(t,e,n){var r,i,a;!function(o,s){"use strict";i=[n(170)],void 0===(a="function"==typeof(r=function(t){var e=/(^\|@)\S+\:\d+/,n=/^\sat .(\S+\:\d+\|\(native\))/m,r=/^(eval@)?(\[native code\])?$/;function i(t,e,n){if("fun
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 29 7d 2c 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 29 72 65 74 75 72 6e 5b 74 5d 3b 76 61 72 20 65 3d 2f 28 2e 2b 3f 29 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 24 2f 2e 65 78 65 63 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 22 22 29 29 3b 72 65 74 75 72 6e 5b 65 5b 31 5d 2c 65 5b 32 5d 7c 7c 76 6f 69 64 20 30 2c 65 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 7d 2c 70 61 72 73 65 56 38 4f 72 49 45 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 61 28 65 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 2e 6d 61 74 63 Data Ascii: )},extractLocation:function(t){if(-1===t.indexOf(":"))return[t];var e=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[\(\)]/g,""));return[e[1],e[2]\|\|void 0,e[3]\|\|void 0]},parseV8OrIE:function(e){return i(a(e.stack.split("\n"),(function(t){return!!t.matc
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 28 76 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 2f 69 2c 72 3d 65 2e 6d 65 73 73 61 67 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 5b 5d 2c 61 3d 32 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 61 3c 6f 3b 61 2b 3d 32 29 7b 76 61 72 20 73 3d 6e 2e 65 78 65 63 28 72 5b 61 5d 29 3b 73 26 26 69 2e 70 75 73 68 28 6e 65 77 20 74 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 73 5b 32 5d 2c 73 5b 31 5d 2c 76 6f 69 64 20 30 2c 72 5b 61 5d 29 29 7d 72 65 74 75 72 6e 20 69 7d 2c 70 61 72 73 65 4f 70 65 72 61 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 28 3f 3a 3a 20 49 6e Data Ascii: (var n=/Line (\d+).script (?:in )?(\S+)/i,r=e.message.split("\n"),i=[],a=2,o=r.length;a<o;a+=2){var s=n.exec(r[a]);s&&i.push(new t(void 0,void 0,s[2],s[1],void 0,r[a]))}return i},parseOpera10:function(e){for(var n=/Line (\d+).script (?:in )?(\S+)(?:: In
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 20 74 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 7d 2c 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3d 53 74 72 69 6e 67 28 74 29 7d 2c 67 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 72 67 73 7d 2c 73 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 73 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 22 29 3b 74 68 69 73 2e 61 72 67 73 3d 74 7d 2c 67 65 74 46 69 6c 65 Data Ascii: this.functionName},setFunctionName:function(t){this.functionName=String(t)},getArgs:function(){return this.args},setArgs:function(t){if("[object Array]"!==Object.prototype.toString.call(t))throw new TypeError("Args must be an Array");this.args=t},getFile
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 72 5d 7d 29 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e 28 38 31 36 29 2c 65 3d 6e 2e 6e 28 74 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 6e 3d 74 2e 65 72 72 6f 72 2c 72 3d 74 2e 66 69 6c 65 6e 61 6d 65 2c 69 3d 74 2e 6c 69 6e 65 6e 6f 2c 61 3d 74 2e 63 6f 6c 6e 6f 2c 6f 3d 5b 5d 3b 69 66 28 6e 29 74 72 79 7b 6f 3d 65 28 29 2e 70 Data Ascii: ,r)&&Object.defineProperty(t,r,{enumerable:!0,get:e[r]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},function(){"use strict";var t=n(816),e=n.n(t);function r(t){var n=t.error,r=t.filename,i=t.lineno,a=t.colno,o=[];if(n)try{o=e().p
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 29 7d 2c 61 3d 73 65 74 54 69 6d 65 6f 75 74 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 Data Ascii: {return e.reject(n)}))}))},a=setTimeout;function o(t){return Boolean(t&&void 0!==t.length)}function s(){}function c(t){if(!(this instanceof c))throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a f
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 66 28 65 2c 74 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 64 28 65 2c 74 29 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 64 28 65 2c 74 29 7d 7d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 73 29 3b 72 65 74 75 72 6e Data Ascii: n}function v(t,e){var n=!1;try{t((function(t){n\|\|(n=!0,f(e,t))}),(function(t){n\|\|(n=!0,d(e,t))}))}catch(t){if(n)return;n=!0,d(e,t)}}c.prototype.catch=function(t){return this.then(null,t)},c.prototype.then=function(t,e){var n=new this.constructor(s);return
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 73 65 3a 68 2c 79 3d 5b 5d 2e 73 6c 69 63 65 2c 5f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 53 3d 5f 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 70 65 72 66 6f 72 6d 61 6e 63 65 3a 7b 7d 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 77 3d 30 3b 77 3c 32 35 36 3b 2b 2b 77 29 62 5b 77 5d 3d 28 77 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 76 61 72 20 54 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 70 75 73 Data Ascii: se:h,y=[].slice,_="undefined"!=typeof window,S=_&&"undefined"!=typeof performance?performance:{};for(var b=[],w=0;w<256;++w)b[w]=(w+256).toString(16).substr(1);var T=new Uint8Array(16);function E(t){return function(t){for(var e=[],n=0;n<t.length;n++)e.pus
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 72 72 61 79 28 66 29 3f 5b 5d 3a 7b 7d 29 2c 49 28 74 5b 75 5d 2c 5b 66 5d 2c 21 31 29 29 3a 74 5b 75 5d 3d 66 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 72 65 74 75 72 6e 20 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 72 Data Ascii: rray(f)?[]:{}),I(t[u],[f],!1)):t[u]=f}}return t}function j(){if("undefined"!=typeof document){var t=document.currentScript;return t\|\|function(){if("undefined"!=typeof document)for(var t=document.getElementsByTagName("script"),e=0,n=t.length;e<n;e++){var r
2024-11-15 21:21:30 UTC	1369	IN	Data Raw: 6c 69 63 65 28 65 2b 6c 29 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2e 73 6c 69 63 65 28 65 29 2c 69 3d 69 2e 73 6c 69 63 65 28 30 2c 65 29 7d 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2c 69 3d 22 22 3b 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 7c 7c 6f 26 26 66 5b 33 5d 26 26 73 5b 70 5d 7c 7c 22 22 2c 66 5b 33 5d 26 26 28 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 69 66 28 6f 26 26 22 2f 22 21 3d 3d 74 68 69 73 2e 70 61 74 68 2e 63 68 61 72 41 74 28 30 29 26 26 28 74 68 69 73 2e 70 61 74 68 3d 22 2f 22 2b 74 68 69 73 2e 70 61 74 68 29 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 3d 6f 2c 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 3d 72 7c 7c 73 2e 70 72 6f 74 6f 63 6f 6c 2c 74 68 69 73 2e 68 6f 73 74 Data Ascii: lice(e+l)}else this[p]=i.slice(e),i=i.slice(0,e)}}else this[p]=i,i="";this[p]=this[p]\|\|o&&f[3]&&s[p]\|\|"",f[3]&&(this[p]=this[p].toLowerCase())}if(o&&"/"!==this.path.charAt(0)&&(this.path="/"+this.path),this.relative=o,this.protocol=r\|\|s.protocol,this.host

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:34 UTC	667	OUT	GET /94l4jmnkd7in/7Ybg3zqoD9AaHTtrU0mA9/a7b860e366bd1f71ccf4aef8e07a7b30/afternic_footer.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.afternic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:35 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9935 Connection: close Date: Fri, 15 Nov 2024 21:21:35 GMT Last-Modified: Mon, 04 Dec 2023 21:32:04 GMT ETag: "5dac01f34d379a4cc900fa8e9a7ce851" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 27cdec4bbea3c020f504b2062d4e122c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 7dzEjyl7fj16Mpo7Yo5SSKzZo841kMvHGA1MVnQsAcfjfQW3pn2eaA==
2024-11-15 21:21:35 UTC	9594	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 34 2e 39 39 36 20 32 2e 34 39 68 2d 2e 32 39 32 76 31 39 2e 30 33 68 2e 32 39 32 56 32 2e 34 39 5a 4d 39 2e 38 39 37 20 31 31 2e 32 37 39 63 2d 2e 31 34 36 2d 2e 35 35 2d 2e 34 35 35 2d 31 2e 30 38 32 2d 2e 39 31 2d 31 2e 35 38 38 2d 2e 34 30 33 2d 2e 34 33 38 2d 2e 39 33 35 2d 2e 37 38 31 2d 31 2e 35 38 38 2d 31 2e 30 32 31 2d 2e 36 34 34 2d 2e 32 33 32 2d 31 2e 34 33 33 2d 2e 33 35 32 2d 32 2e 33 36 39 2d 2e 33 35 32 2d 2e 37 35 35 Data Ascii: <svg width="191" height="24" viewBox="0 0 191 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M114.996 2.49h-.292v19.03h.292V2.49ZM9.897 11.279c-.146-.55-.455-1.082-.91-1.588-.403-.438-.935-.781-1.588-1.021-.644-.232-1.433-.352-2.369-.352-.755
2024-11-15 21:21:35 UTC	341	IN	Data Raw: 38 35 2d 2e 35 30 36 20 30 2d 2e 38 30 37 2e 32 37 35 2d 2e 38 30 37 2e 39 30 32 76 32 2e 30 31 37 68 2d 2e 38 37 35 76 2d 33 2e 36 31 34 68 2e 38 37 35 5a 6d 36 2e 35 39 33 20 33 2e 36 31 34 68 2d 2e 38 37 36 76 2d 2e 33 36 63 2d 2e 32 34 39 2e 33 2d 2e 36 32 36 2e 34 33 37 2d 31 2e 30 32 31 2e 34 33 37 2d 31 2e 30 30 35 20 30 2d 31 2e 35 38 2d 2e 37 39 38 2d 31 2e 35 38 2d 31 2e 38 38 20 30 2d 31 2e 30 37 33 2e 35 37 35 2d 31 2e 38 38 20 31 2e 35 37 31 2d 31 2e 38 38 2e 33 38 36 20 30 20 2e 37 38 31 2e 31 32 20 31 2e 30 33 2e 34 33 38 56 39 2e 31 37 36 68 2e 38 37 36 76 35 2e 31 31 36 5a 6d 2d 2e 38 30 37 2d 31 2e 38 31 31 63 30 2d 2e 36 31 38 2d 2e 32 36 36 2d 31 2e 31 30 38 2d 2e 38 37 36 2d 31 2e 31 30 38 2d 2e 36 30 39 20 30 2d 2e 38 37 35 2e 34 39 Data Ascii: 85-.506 0-.807.275-.807.902v2.017h-.875v-3.614h.875Zm6.593 3.614h-.876v-.36c-.249.3-.626.437-1.021.437-1.005 0-1.58-.798-1.58-1.88 0-1.073.575-1.88 1.571-1.88.386 0 .781.12 1.03.438V9.176h.876v5.116Zm-.807-1.811c0-.618-.266-1.108-.876-1.108-.609 0-.875.49

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:36 UTC	431	OUT	GET /94l4jmnkd7in/7Ybg3zqoD9AaHTtrU0mA9/a7b860e366bd1f71ccf4aef8e07a7b30/afternic_footer.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:36 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9935 Connection: close Last-Modified: Mon, 04 Dec 2023 21:32:04 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Fri, 15 Nov 2024 21:21:36 GMT Cache-Control: max-age=31536000 ETag: "5dac01f34d379a4cc900fa8e9a7ce851" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 458e178928cba27987d8f2cdf2fced38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P5 X-Amz-Cf-Id: I6sOErXkyle63eAbAfzqvgszJmeXtQcvpDZdR9-7h5rRwOnrwpsPow== Age: 81134
2024-11-15 21:21:36 UTC	9935	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 34 2e 39 39 36 20 32 2e 34 39 68 2d 2e 32 39 32 76 31 39 2e 30 33 68 2e 32 39 32 56 32 2e 34 39 5a 4d 39 2e 38 39 37 20 31 31 2e 32 37 39 63 2d 2e 31 34 36 2d 2e 35 35 2d 2e 34 35 35 2d 31 2e 30 38 32 2d 2e 39 31 2d 31 2e 35 38 38 2d 2e 34 30 33 2d 2e 34 33 38 2d 2e 39 33 35 2d 2e 37 38 31 2d 31 2e 35 38 38 2d 31 2e 30 32 31 2d 2e 36 34 34 2d 2e 32 33 32 2d 31 2e 34 33 33 2d 2e 33 35 32 2d 32 2e 33 36 39 2d 2e 33 35 32 2d 2e 37 35 35 Data Ascii: <svg width="191" height="24" viewBox="0 0 191 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M114.996 2.49h-.292v19.03h.292V2.49ZM9.897 11.279c-.146-.55-.455-1.082-.91-1.588-.403-.438-.935-.781-1.588-1.021-.644-.232-1.433-.352-2.369-.352-.755

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:37 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:37 UTC	249	IN	HTTP/1.1 202 Accepted Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:37 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:37 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:38 UTC	575	OUT	GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.afternic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:38 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 15 Nov 2024 21:21:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-15 21:21:38 UTC	1111	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-11-15 21:21:38 UTC	1378	IN	Data Raw: 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 28 65 76 74 2c 20 76 61 6c 75 65 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 3d Data Ascii: N_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEvent(evt, value) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus =
2024-11-15 21:21:38 UTC	1378	IN	Data Raw: 65 73 5f 74 65 61 6c 69 75 6d 5f 72 65 74 61 69 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 74 72 79 20 7b 0a 09 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 75 73 74 6f 6d 27 5d 20 3d 20 5b 0a 7b 0a 20 20 22 69 64 22 3a 20 22 66 73 2d 69 64 65 6e 74 69 66 79 2d 63 75 73 74 6f 6d 65 72 2d 69 64 22 2c 0a 20 20 22 73 6f 75 72 63 65 22 3a 20 22 75 74 61 67 2e 64 61 74 61 5b 5e 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 2c 0a 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 22 6e 61 Data Ascii: es_tealium_retail'] = [];try {window['_dlo_rules_custom'] = [{ "id": "fs-identify-customer-id", "source": "utag.data[^(customer_id,internal)]", "operators": [{ "name": "query", "select": "$[(customer_id,internal)]" }, { "na
2024-11-15 21:21:38 UTC	56	IN	Data Raw: 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 71 70 2e 68 69 76 65 6d 69 6e 64 2c 20 63 70 0d 0a Data Ascii: "name": "query", "select": "$[(qp.hivemind, cp
2024-11-15 21:21:38 UTC	1378	IN	Data Raw: 64 36 38 0d 0a 2e 78 70 64 70 70 33 2c 20 63 70 2e 68 69 76 65 6d 69 6e 64 29 5d 22 0a 20 20 7d 2c 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 72 65 6e 61 6d 65 22 2c 0a 20 20 20 20 20 20 22 70 72 6f 70 65 72 74 69 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 78 70 64 70 70 33 22 3a 20 22 76 61 72 69 61 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 22 71 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 5f 69 64 2b 76 61 72 69 61 6e 74 22 0a 20 20 20 20 20 20 7d 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 0a 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 Data Ascii: d68.xpdpp3, cp.hivemind)]" },{ "name": "rename", "properties": { "cp.xpdpp3": "variant", "qp.hivemind": "hivemind", "cp.hivemind": "hivemind_id+variant" } }, { "name": "insert", "value": "
2024-11-15 21:21:38 UTC	1378	IN	Data Raw: 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 7d 0a 0a 0a 5d 3b 0a 09 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 09 09 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 46 75 6c 6c 53 74 6f 72 79 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 20 65 72 72 6f 72 3b 20 72 65 76 69 65 77 20 44 4c 4f 20 69 6e 74 65 67 72 61 74 69 6f 6e 5c 27 73 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 2e 27 29 3b 0a 09 7d 0a 09 0a 09 76 61 72 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 3d 20 73 65 73 73 69 6f 6e 55 72 6c 20 2b 20 27 3f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 73 72 63 3d 6d 69 78 70 61 6e 65 6c 27 3b 0a 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 74 68 65 20 6d 69 78 70 61 6e 65 6c 20 73 63 72 69 70 74 20 69 73 20 6f 6e 20 70 61 67 65 0a 09 Data Ascii: stination": "FS.event"}];} catch (err) {console.error('FullStory custom rules error; review DLO integration\'s custom rules.');}var mixpanelSessionUrl = sessionUrl + '?integration_src=mixpanel';// Check if the mixpanel script is on page
2024-11-15 21:21:38 UTC	688	IN	Data Raw: 6e 65 6c 2e 72 65 67 69 73 74 65 72 27 2c 20 73 65 73 73 69 6f 6e 55 72 6c 3a 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 29 0a 09 09 09 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 6d 69 78 70 61 6e 65 6c 46 73 49 6e 74 65 67 72 61 74 69 6f 6e 41 73 79 6e 63 2c 20 35 30 30 29 3b 0a 09 09 7d 0a 09 7d 0a 09 0a 09 76 61 72 20 64 6c 6f 53 63 72 69 70 74 54 61 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 09 Data Ascii: nel.register', sessionUrl: mixpanelSessionUrl }}})} else {setTimeout(mixpanelFsIntegrationAsync, 500);}}var dloScriptTag = document.createElement('script');dloScriptTag.type = 'text/javascript';dloScriptTag.async = true;

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:39 UTC	399	OUT	GET /rec/integrations?OrgId=YKBRC&isInFrame=false&isNative=false HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:39 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 15 Nov 2024 21:21:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-11-15 21:21:39 UTC	1111	IN	Data Raw: 31 63 62 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 Data Ascii: 1cb4(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultF
2024-11-15 21:21:39 UTC	1378	IN	Data Raw: 4f 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 28 65 76 74 2c 20 76 61 6c 75 65 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 Data Ascii: ON_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEvent(evt, value) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus
2024-11-15 21:21:39 UTC	1378	IN	Data Raw: 6c 65 73 5f 74 65 61 6c 69 75 6d 5f 72 65 74 61 69 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 74 72 79 20 7b 0a 09 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 75 73 74 6f 6d 27 5d 20 3d 20 5b 0a 7b 0a 20 20 22 69 64 22 3a 20 22 66 73 2d 69 64 65 6e 74 69 66 79 2d 63 75 73 74 6f 6d 65 72 2d 69 64 22 2c 0a 20 20 22 73 6f 75 72 63 65 22 3a 20 22 75 74 61 67 2e 64 61 74 61 5b 5e 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 2c 0a 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 63 75 73 74 6f 6d 65 72 5f 69 64 2c 69 6e 74 65 72 6e 61 6c 29 5d 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 20 20 22 6e Data Ascii: les_tealium_retail'] = [];try {window['_dlo_rules_custom'] = [{ "id": "fs-identify-customer-id", "source": "utag.data[^(customer_id,internal)]", "operators": [{ "name": "query", "select": "$[(customer_id,internal)]" }, { "n
2024-11-15 21:21:39 UTC	1378	IN	Data Raw: 20 20 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 0a 20 20 20 20 20 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 28 71 70 2e 68 69 76 65 6d 69 6e 64 2c 20 63 70 2e 78 70 64 70 70 33 2c 20 63 70 2e 68 69 76 65 6d 69 6e 64 29 5d 22 0a 20 20 7d 2c 7b 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 72 65 6e 61 6d 65 22 2c 0a 20 20 20 20 20 20 22 70 72 6f 70 65 72 74 69 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 78 70 64 70 70 33 22 3a 20 22 76 61 72 69 61 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 22 71 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 70 2e 68 69 76 65 6d 69 6e 64 22 3a 20 22 68 69 76 65 6d 69 6e 64 5f 69 64 2b 76 61 72 69 61 6e 74 22 0a 20 20 20 20 20 Data Ascii: "name": "query", "select": "$[(qp.hivemind, cp.xpdpp3, cp.hivemind)]" },{ "name": "rename", "properties": { "cp.xpdpp3": "variant", "qp.hivemind": "hivemind", "cp.hivemind": "hivemind_id+variant"
2024-11-15 21:21:39 UTC	1378	IN	Data Raw: 20 20 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 0a 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 45 49 44 22 0a 20 20 7d 0a 5d 2c 0a 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 7d 0a 0a 0a 5d 3b 0a 09 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 09 09 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 46 75 6c 6c 53 74 6f 72 79 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 20 65 72 72 6f 72 3b 20 72 65 76 69 65 77 20 44 4c 4f 20 69 6e 74 65 67 72 61 74 69 6f 6e 5c 27 73 20 63 75 73 74 6f 6d 20 72 75 6c 65 73 2e 27 29 3b 0a 09 7d 0a 09 0a 09 76 61 72 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 3d 20 73 65 73 73 69 6f 6e 55 72 6c 20 2b 20 27 3f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 73 72 63 3d 6d 69 78 70 61 6e Data Ascii: "name": "insert", "value": "EID" }],"destination": "FS.event"}];} catch (err) {console.error('FullStory custom rules error; review DLO integration\'s custom rules.');}var mixpanelSessionUrl = sessionUrl + '?integration_src=mixpan
2024-11-15 21:21:39 UTC	738	IN	Data Raw: 73 74 61 74 75 73 3a 20 27 53 55 43 43 45 53 53 27 2c 0a 09 09 09 09 09 6d 65 74 61 64 61 74 61 3a 20 7b 20 64 65 74 61 69 6c 3a 20 27 6d 69 78 70 61 6e 65 6c 2e 72 65 67 69 73 74 65 72 27 2c 20 73 65 73 73 69 6f 6e 55 72 6c 3a 20 6d 69 78 70 61 6e 65 6c 53 65 73 73 69 6f 6e 55 72 6c 20 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 29 0a 09 09 09 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 6d 69 78 70 61 6e 65 6c 46 73 49 6e 74 65 67 72 61 74 69 6f 6e 41 73 79 6e 63 2c 20 35 30 30 29 3b 0a 09 09 7d 0a 09 7d 0a 09 0a 09 76 61 72 20 64 6c 6f 53 63 72 69 70 74 54 61 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 09 64 6c 6f 53 63 72 69 70 74 54 61 67 2e 74 79 70 65 20 Data Ascii: status: 'SUCCESS',metadata: { detail: 'mixpanel.register', sessionUrl: mixpanelSessionUrl }}})} else {setTimeout(mixpanelFsIntegrationAsync, 500);}}var dloScriptTag = document.createElement('script');dloScriptTag.type

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:40 UTC	866	OUT	POST /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=1&ClientTime=1731705698761&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=0&LastActivity=800&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 23010 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.afternic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:40 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 69 93 e4 c8 75 20 f8 57 b0 d9 a6 11 69 cc 88 84 df 8e 22 b9 52 d6 d5 dd 64 55 75 ab ab ba c9 66 89 56 86 c0 11 81 0c 44 20 12 88 23 23 65 b3 26 51 c7 ce 98 c9 46 66 63 32 8d ed da ee ce ec ee a7 fd 46 69 c5 e5 8c 34 a4 cc e6 17 54 ff 85 f9 03 fb 17 f6 3d 77 07 02 40 44 5e 55 d9 5a 8d d8 5d 9d 71 38 dc 9f 3f 7f f7 7b ee 40 fc c1 d1 cb e4 fc e8 01 39 3e fa d1 24 99 1f 3d a0 c7 47 4f d6 cb ea e8 c1 eb 3f 38 fa 61 36 8f a1 45 1c 1f 9d 96 63 6c 3a 9a 2c 97 8b ea c1 c9 c9 66 b3 19 86 e9 32 29 e7 59 34 8c 8a d9 49 9e 8c c3 fc 24 1c 97 49 32 4b e6 cb ea 24 2a 8a 69 96 0c 16 45 9e 45 db a3 e3 a3 ef fd 77 8f 3f 79 f4 ea cb 4f 9f 78 93 e5 2c ff ef a1 e5 dd 61 1d fd b4 c1 f6 5f 1e d7 68 6a 12 e8 06 d1 34 cc ab e4 98 1c ee 77 1f cb Data Ascii: iu Wi"RdUufVD ##e&QFfc2Fi4T=w@D^UZ]q8?{@9>$=GO?8a6Ecl:,f2)Y4I$I2K$*iEEw?yOx,a_hj4w
2024-11-15 21:21:40 UTC	6626	OUT	Data Raw: 53 d9 15 75 30 f1 d3 b4 9b 42 85 69 39 8b d2 3d 9f a5 d7 e7 f3 d5 b6 ee f9 2f 8f f0 94 57 bc f5 fe a0 39 b2 65 4e 64 e1 33 e8 f1 89 86 f3 18 7f 01 aa 28 5b 3f 5a 6a 0f 5f 1c 9b 33 59 80 7c ff 72 fd 9b a6 ee 27 4d bd 14 1f c8 95 86 b3 2c df b6 7b d9 33 40 ad cd a2 ba 2b 3e 9a af d5 d1 9e 3f 3a 26 e6 27 5a 6d 8f 8d 3b 68 d6 f4 b1 67 83 8e 41 cc a1 8b 79 f0 f3 a4 df c5 1d 16 3a 26 43 cc 6f 71 d5 af cd 13 e9 f1 c7 8c b3 30 ff 1f be ff fb f8 db a6 a0 c5 fe ef 1f fd b4 3e 29 d5 1c 33 79 7a fa f8 d1 e3 5a 95 77 d5 30 d7 7a 0d 34 72 10 da 53 60 2f d9 83 e6 5a af 81 46 af 80 76 fa 84 1d 80 66 5a af 81 c6 0e 41 eb c8 6c 03 ad 6e bd 06 1a 3f 08 ad 5d 9d dd 41 73 ad d7 40 13 07 57 da 0e 9d 77 2b 75 ad 07 a1 65 73 7c 78 74 12 b7 c0 35 67 d2 3a 86 b8 39 59 c5 fd 40 3c Data Ascii: Su0Bi9=/W9eNd3([?Zj_3Y\|r'M,{3@+>?:&'Zm;hgAy:&Coq0>)3yzZw0z4rS`/ZFvfZAln?]As@Ww+ues\|xt5g:9Y@<
2024-11-15 21:21:40 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.afternic.com Content-Type: application/json; charset=utf-8 Date: Fri, 15 Nov 2024 21:21:40 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:40 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 33 31 37 30 35 37 30 30 32 38 36 7d 0a Data Ascii: {"BundleTime":1731705700286}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 21:21:40 UTC	610	OUT	GET /rec/bundle?OrgId=YKBRC&UserId=6680054354620416&SessionId=8551100324890101724&PageId=7615451287155152054&Seq=1&ClientTime=1731705698761&CompiledVersion=aa37b0048e92b9fe820404ebb566a04d7c8aba36&PageStart=1731705696721&PrevBundleTime=0&LastActivity=800&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 21:21:41 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Nov 2024 21:21:41 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-15 21:21:41 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed